Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/43bc24c4-e6e1-3452-a132-895a65997e92.roa
File:                     43bc24c4-e6e1-3452-a132-895a65997e92.roa (raw, json)
Hash identifier:          uSYPI+/lIZoP0kSfIJHSdTUsfMQIazMvE1w0p0RawRM=
Subject key identifier:   09:FC:DC:F8:8B:73:BB:76:00:F5:1D:A3:B9:F1:1C:18:E9:36:65:DC
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D0FA13F0C73B3820CDC80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/43bc24c4-e6e1-3452-a132-895a65997e92.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.49.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:0f:a1:3f:0c:73:b3:82:0c:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=3d568ff0-ef6b-4dc1-abfe-c1172d4122b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:9c:1c:bd:f3:1b:7c:bf:1c:1c:40:e6:3b:
                    59:97:21:c1:0f:33:c3:ea:57:fe:a9:07:98:09:4a:
                    7b:75:6f:f9:36:27:26:05:db:9b:74:4c:98:41:a5:
                    a5:87:78:48:40:c0:93:59:e0:ea:79:0a:b0:2b:8d:
                    49:da:c4:07:c2:7d:60:2f:56:0a:75:8a:8a:e0:33:
                    c9:70:fe:c5:70:4b:c2:d9:61:31:ac:25:40:69:1f:
                    0e:38:3c:ea:b2:b6:42:16:71:00:ba:3d:32:5c:05:
                    51:a1:12:22:40:d2:e2:e9:cc:4f:fe:f9:bb:7e:da:
                    8e:1c:18:43:35:5d:b2:71:8f:46:7f:77:1d:06:36:
                    cd:e8:85:aa:5e:fc:74:33:bb:31:1b:c0:7a:b7:8d:
                    07:36:75:e3:f3:91:7a:d4:23:cc:c4:3c:cc:19:57:
                    25:87:18:10:71:d4:85:b2:1b:78:6a:42:ef:e8:5d:
                    44:bb:7a:f5:d8:5a:a7:fe:62:07:15:87:11:0f:34:
                    e6:50:6f:e2:4d:c2:49:00:89:28:45:35:d0:bc:2c:
                    9f:6e:73:3c:28:75:38:26:8b:c2:c5:7b:41:6a:a4:
                    f6:f5:11:f9:c5:43:14:00:46:1a:1b:80:4b:b0:aa:
                    05:8a:09:36:82:ca:b0:fb:70:6a:4c:f1:44:64:85:
                    06:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FC:DC:F8:8B:73:BB:76:00:F5:1D:A3:B9:F1:1C:18:E9:36:65:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/43bc24c4-e6e1-3452-a132-895a65997e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.49.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:77:44:75:34:aa:51:0d:02:b1:23:87:64:b7:95:f2:79:5e:
         ca:bb:ac:43:1f:e3:9c:0e:77:f8:68:92:4d:66:50:f1:5a:96:
         35:af:67:28:57:ae:13:e1:c6:3e:31:22:f2:98:0c:0d:c9:58:
         00:3f:da:8e:df:1c:6d:c5:02:2a:34:77:9e:62:06:d5:4b:38:
         b8:a9:c7:1b:84:a8:a6:e0:0a:fc:a3:2c:33:53:46:45:38:75:
         49:df:ca:1c:19:51:c0:d6:d4:85:71:23:db:1c:18:d0:4e:0a:
         fd:e4:39:d2:cf:2f:83:20:24:76:d0:33:ba:17:a5:36:58:6c:
         2b:83:59:2e:39:c2:1c:48:91:93:cd:22:9a:97:c2:0a:bf:be:
         51:bb:18:77:d3:4c:91:19:41:b7:53:4f:46:2b:7b:c7:38:9d:
         06:ce:ec:80:45:8e:94:1c:c0:bc:89:2b:ce:2f:40:d5:68:0a:
         63:8d:7b:58:e2:bf:dd:7c:c6:31:83:a8:dd:0e:ad:29:ff:49:
         c1:cc:29:ac:8c:e9:48:b7:a5:57:1a:ae:89:65:eb:3f:b3:44:
         45:7c:ce:05:4d:aa:c0:fc:53:1e:cc:69:db:82:4d:56:27:a6:
         8b:51:7e:a7:00:f0:8f:df:20:e6:3f:e2:44:41:cb:35:2a:dc:
         bb:6a:d1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:24 2026 by rpki-client