Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4a31ba6b-b077-3e03-8f50-c488fd9e2d35.roa
File:                     4a31ba6b-b077-3e03-8f50-c488fd9e2d35.roa (raw, json)
Hash identifier:          PeIJJo2AIs//jVHFxl9GWQ4KjHu6y9B95Dr25/P1EPg=
Subject key identifier:   02:31:DA:20:C2:AE:EE:A4:CA:1F:EB:3E:9C:72:43:5A:48:ED:93:47
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584CCA41D2E19E1609D19C5BA0C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4a31ba6b-b077-3e03-8f50-c488fd9e2d35.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     16591
IP address blocks:        136.60.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:d2:e1:9e:16:09:d1:9c:5b:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=3df2b381-6e90-4939-834a-e30b43b86bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:e6:03:73:df:e3:fe:18:30:1b:dc:5e:a0:
                    c0:53:f9:8b:b1:70:a7:95:af:69:d8:b2:25:a4:81:
                    60:56:fd:2c:61:fd:b2:3f:7a:ba:41:0f:d0:ee:4d:
                    20:e1:92:8b:2b:31:dd:54:19:ee:02:c1:ae:2c:af:
                    7c:9a:c8:5f:91:e9:e7:01:fb:e6:7e:72:9b:14:99:
                    00:f9:73:20:91:a6:71:80:32:a2:8f:41:4f:6d:5c:
                    84:55:51:22:6d:67:f6:bd:82:92:e5:c2:f4:8f:f3:
                    8b:6c:f9:34:16:b5:d3:dc:b0:56:48:ac:d3:3c:2f:
                    1b:57:89:bb:9d:44:ac:79:cf:e5:5c:42:15:47:ab:
                    8b:2a:35:c8:15:88:f4:14:20:41:60:7c:9b:e2:22:
                    d8:a9:27:2a:ad:d9:f7:c7:68:11:d6:47:f2:a2:ae:
                    3a:6c:02:d9:89:d8:56:a2:87:7e:c0:45:a2:2b:7e:
                    35:de:de:c1:27:80:3c:bb:ac:9a:c9:b3:c3:67:7d:
                    17:7b:7a:63:f4:4d:9e:b2:ca:46:8a:3e:42:96:35:
                    13:f2:c4:9f:2d:a1:14:e5:cf:93:58:5e:2d:02:1e:
                    d1:25:b8:b5:66:33:d5:95:d8:b2:bb:f6:02:41:12:
                    04:1b:7a:99:cf:eb:d2:e0:4a:c0:fc:2f:3d:40:b7:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:31:DA:20:C2:AE:EE:A4:CA:1F:EB:3E:9C:72:43:5A:48:ED:93:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4a31ba6b-b077-3e03-8f50-c488fd9e2d35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.60.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:16:fc:23:ae:7a:0a:79:43:78:21:c0:ec:5e:14:f0:b8:2a:
         96:44:6e:25:78:54:5e:87:ca:9e:c2:ca:59:a8:01:9d:27:7e:
         52:8e:ea:d6:4a:8e:c1:a1:e0:57:1a:46:7f:1b:b6:ae:a4:4e:
         c1:d1:ba:3e:ec:38:ab:30:dc:f9:47:92:35:49:e4:69:38:37:
         76:38:a6:18:86:f3:4f:d7:c2:2e:d6:c5:62:36:cf:c9:c0:ae:
         b6:06:92:3c:d3:c3:78:1f:5e:2a:da:44:d3:5a:38:b4:be:31:
         8b:e8:bf:12:9c:f5:f3:41:10:be:4a:53:62:ab:46:57:97:63:
         80:05:3b:41:c0:38:26:fd:3a:00:dc:7e:e1:69:b7:cf:93:8e:
         84:12:0a:56:26:68:27:c7:20:3d:68:c0:4c:5a:bc:ae:67:8d:
         ec:c0:10:cf:82:9e:93:b3:22:d9:a0:ad:43:c3:fd:8e:f2:87:
         5d:9e:67:57:41:7a:e1:88:d5:95:ef:36:3c:29:c0:47:af:08:
         83:1f:ca:40:64:c9:07:be:ae:dc:5c:97:df:2d:08:6b:d0:d0:
         de:7c:77:34:44:d1:2d:39:bf:ea:e1:f7:a5:f3:43:dc:48:9d:
         4e:b9:58:97:ec:69:ca:d3:41:4c:4c:db:1f:6e:0b:00:08:7e:
         47:71:4d:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQdLhnhYJ0ZxboMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk
M2RmMmIzODEtNmU5MC00OTM5LTgzNGEtZTMwYjQzYjg2YmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVzmA3Pf4/4YMBvcXqDAU/mLsXCnla9p2LIl
pIFgVv0sYf2yP3q6QQ/Q7k0g4ZKLKzHdVBnuAsGuLK98mshfkennAfvmfnKbFJkA
+XMgkaZxgDKij0FPbVyEVVEibWf2vYKS5cL0j/OLbPk0FrXT3LBWSKzTPC8bV4m7
nUSsec/lXEIVR6uLKjXIFYj0FCBBYHyb4iLYqScqrdn3x2gR1kfyoq46bALZidhW
ood+wEWiK3413t7BJ4A8u6yaybPDZ30Xe3pj9E2esspGij5CljUT8sSfLaEU5c+T
WF4tAh7RJbi1ZjPVldiyu/YCQRIEG3qZz+vS4ErA/C89QLedjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAIx2iDCru6kyh/rPpxyQ1pI7ZNHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNGEzMWJhNmItYjA3Ny0z
ZTAzLThmNTAtYzQ4OGZkOWUyZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDxgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJwW/COuegp5Q3ghwOxeFPC4KpZEbiV4VF6Hyp7CylmoAZ0nflKO6tZK
jsGh4FcaRn8btq6kTsHRuj7sOKsw3PlHkjVJ5Gk4N3Y4phiG80/Xwi7WxWI2z8nA
rrYGkjzTw3gfXiraRNNaOLS+MYvovxKc9fNBEL5KU2KrRleXY4AFO0HAOCb9OgDc
fuFpt8+TjoQSClYmaCfHID1owExavK5njezAEM+CnpOzItmgrUPD/Y7yh12eZ1dB
euGI1ZXvNjwpwEevCIMfykBkyQe+rtxcl98tCGvQ0N58dzRE0S05v+rh96XzQ9xI
nU65WJfsacrTQUxM2x9uCwAIfkdxTQs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:33 2026 by rpki-client