Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa
File:                     4923fab5-423d-3396-8261-8c9f4af962e5.roa (raw, json)
Hash identifier:          EpjDgpW8H/ywm7cKrb7UO3lg3d0sl6j2swniilvJmIw=
Subject key identifier:   42:1E:44:54:A3:01:71:EB:0C:58:10:AB:A2:86:03:58:C4:C1:3A:B9
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA790949DFC440A7C403AE600
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.35.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:94:9d:fc:44:0a:7c:40:3a:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=87df292d-3c93-4972-a86e-8297d183068e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:b3:0e:b7:02:9e:2c:a3:96:20:ef:ab:58:
                    5e:bb:d8:b7:9e:38:d8:2c:9c:f1:91:87:86:dc:e3:
                    f6:ac:5c:8a:32:76:de:c6:6a:23:b1:4d:30:61:b1:
                    26:1f:d2:77:ab:33:94:66:98:8e:9a:b5:30:57:70:
                    da:38:17:e8:c9:70:a6:9d:92:e5:74:b4:51:42:45:
                    0b:b0:db:78:96:f6:c5:c3:32:dc:c7:b4:a2:16:66:
                    42:53:08:2d:23:4e:bb:0a:4f:4f:81:34:4e:72:b4:
                    ac:f3:9b:d8:ba:33:64:32:54:6f:07:93:81:12:95:
                    f6:e0:97:8f:10:9c:fd:b8:2f:c1:4d:0a:ed:1a:05:
                    dc:db:27:73:73:dd:ef:43:22:6b:19:27:86:55:7c:
                    1f:6f:a9:72:e5:2b:44:4b:f8:a1:d2:2a:07:da:75:
                    72:f3:ec:8c:a4:87:af:de:5f:e5:37:2c:8d:e7:9c:
                    a9:d0:9f:28:41:e5:fd:b6:8a:2d:ac:89:e5:65:5a:
                    c6:7d:0a:7f:2c:da:88:32:19:55:01:ed:b7:1d:b9:
                    70:04:a3:75:ab:a2:01:5f:73:8c:40:e6:05:e0:54:
                    8d:69:0e:dd:05:82:96:dc:35:03:03:51:85:86:1f:
                    ea:17:26:e0:af:fb:a1:89:59:8b:fe:4f:64:91:d9:
                    56:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1E:44:54:A3:01:71:EB:0C:58:10:AB:A2:86:03:58:C4:C1:3A:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.35.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:de:e8:e1:47:44:74:d3:14:8f:a1:d3:8e:00:7d:4c:c2:2f:
         66:3b:ce:c8:e9:28:6a:98:61:e0:f3:29:f8:10:95:b8:4f:35:
         ec:3e:45:af:39:c2:9c:d4:74:51:38:17:63:e9:6e:57:5f:8e:
         10:62:2e:f8:58:28:f1:9a:ba:89:8e:be:13:5a:e8:95:6f:34:
         9a:d0:17:7c:c6:df:23:95:d1:61:b2:36:d9:68:77:c4:3c:20:
         68:63:7a:5c:72:60:b7:fd:1d:fe:1b:57:b8:12:cd:7c:93:b9:
         05:0d:44:d8:d8:d4:58:94:89:dc:2e:97:9e:a9:81:13:e8:40:
         fc:e1:2b:17:c3:09:64:3e:f2:9c:5b:e6:f3:b2:ec:3e:e7:80:
         13:e0:eb:fe:41:5e:9b:5d:42:04:7c:e8:31:fb:28:2a:39:b5:
         c0:a5:5f:56:f8:d9:4f:73:04:ed:28:d2:a3:e7:aa:86:6d:53:
         c0:50:71:c7:cf:10:b9:4c:e6:f0:14:26:41:8b:8f:71:b8:52:
         b4:b6:20:0e:d6:20:53:35:7a:93:fb:86:7f:71:72:24:81:27:
         54:b5:6d:ed:a0:d2:cf:56:5b:58:cc:a7:12:aa:7d:77:5a:fa:
         5e:ff:e4:90:77:77:0d:48:91:8b:6c:12:8a:19:05:77:f3:c7:
         c7:e1:8c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:32:44 2026 by rpki-client