Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa
File:                     4923fab5-423d-3396-8261-8c9f4af962e5.roa (raw, json)
Hash identifier:          HlaHcBzum0C9Ed4BWbpZM9aJ1jodED+F4jhU2RroQlU=
Subject key identifier:   F6:31:BC:F0:51:8C:8D:7F:FB:49:16:7C:84:A7:FB:D7:C4:9E:15:FC
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D094BCB408433AFC498D0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.35.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:09:4b:cb:40:84:33:af:c4:98:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=fdd3de7a-6b7d-4557-805a-1ea514427332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:9d:18:2f:23:e9:4a:23:53:67:5a:27:e5:
                    ae:d7:a2:55:29:35:99:2a:d8:25:d9:c7:72:f8:96:
                    a0:b3:d0:41:ed:32:71:69:32:ba:ce:22:26:90:be:
                    5b:41:4b:ff:e6:ca:2f:99:f7:76:57:16:e0:b7:36:
                    27:3e:06:43:42:03:64:0d:1a:f3:2f:e5:5f:58:aa:
                    3b:fb:cf:93:47:ce:6d:3e:f8:35:ed:21:6b:fe:03:
                    c8:18:bf:46:0c:d7:d7:a3:b0:c6:6a:cd:9d:c9:62:
                    01:6c:0a:79:40:97:9e:60:d1:ee:3e:34:f4:b0:b3:
                    ef:e4:88:5e:b9:ab:8d:3b:1a:d2:5d:b4:50:13:d0:
                    f0:ae:25:5c:fa:19:04:77:ca:6f:03:73:7f:54:73:
                    b2:70:7d:b8:04:60:c9:8d:a6:4e:7f:54:5d:e2:9e:
                    7a:2a:10:68:7b:bb:0d:a4:ef:dd:9b:2e:ca:64:aa:
                    53:3f:a8:c3:be:cb:e7:2e:8c:67:ab:ec:97:93:5f:
                    39:f6:fc:21:fd:f3:9f:75:71:0f:b8:5b:25:63:5d:
                    32:c8:c2:14:0b:96:f9:73:85:7a:ed:8c:3a:9c:8f:
                    99:04:95:54:2d:41:09:57:b2:b7:8e:a3:c1:8e:d5:
                    ec:a3:4a:46:dc:8d:a4:2d:4f:e2:8d:86:d5:f7:5d:
                    1d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:31:BC:F0:51:8C:8D:7F:FB:49:16:7C:84:A7:FB:D7:C4:9E:15:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.35.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f7:20:98:9f:25:ed:26:db:7d:aa:02:b9:49:ba:24:b9:36:
         e7:d3:68:09:61:fa:5b:5e:0c:26:44:24:d9:34:fd:b8:5e:0f:
         2b:fe:4b:7d:22:0e:76:9b:6d:8e:06:ab:c0:8a:55:02:40:80:
         f1:56:3c:41:95:73:10:87:69:97:53:b8:80:ef:08:9d:2b:32:
         ef:8b:6f:43:5c:ee:de:5d:ae:04:f7:81:5c:8e:0d:a6:a9:de:
         3d:86:bb:c7:15:a1:9a:18:75:c3:43:d5:2a:6c:6f:25:f6:45:
         81:ac:ff:15:fc:22:22:df:a1:b1:50:a5:7b:d0:c6:8e:e3:fc:
         fb:b3:d1:26:0d:81:77:89:2d:65:c2:62:92:44:b5:b1:e1:21:
         0c:83:71:84:8a:67:0f:97:11:86:0b:11:bf:59:38:12:74:e2:
         bd:23:54:53:4e:de:ff:53:e4:2d:ba:f7:2d:cc:75:af:67:16:
         25:d7:96:3a:7f:75:c8:33:b5:e5:cb:ea:1e:d3:3a:d4:0f:27:
         31:97:81:23:f7:d9:fe:24:bd:63:4d:cc:84:49:00:f3:75:39:
         52:28:54:84:a1:02:cd:52:e4:ef:00:aa:15:1b:43:cf:69:0a:
         4b:85:f3:41:b8:9e:b6:d3:05:2c:ad:27:07:51:c4:7a:28:28:
         ce:fa:e8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:05 2026 by rpki-client