Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/501181e8-d1df-3f50-a008-152c6bbc5501.roa
File:                     501181e8-d1df-3f50-a008-152c6bbc5501.roa (raw, json)
Hash identifier:          5xQ5SDTzIAFwKYiqwCKhjymzb2nzOGEcRVMvqMWUgb8=
Subject key identifier:   F9:0E:A3:7B:67:A4:4B:03:CD:00:59:E7:8F:F6:31:EB:22:52:2F:D1
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584F3A17DA59654A83E463333D80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/501181e8-d1df-3f50-a008-152c6bbc5501.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     16591
IP address blocks:        136.59.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:da:59:65:4a:83:e4:63:33:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=f398c834-a9fc-4d7a-b8ad-8ac93fbb7879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:db:25:49:d7:86:32:5e:de:99:5b:42:c4:53:
                    6a:50:0e:7c:d5:3e:e7:81:18:a3:a7:e3:30:18:13:
                    c3:77:6e:a6:61:bb:2c:26:c2:c4:15:bb:d0:4b:99:
                    da:76:a2:76:4f:0d:5a:67:3f:3c:bf:c8:75:aa:2e:
                    f0:0b:12:1e:07:3e:82:85:e7:fe:75:fe:30:3b:0a:
                    fe:8d:c6:2b:e6:8a:a8:37:fd:62:d1:6f:b2:09:e5:
                    ce:a1:19:e8:b0:43:0c:ba:0a:b3:14:a7:2e:58:fa:
                    02:d2:b8:35:06:4d:d0:e5:b4:f2:a0:33:21:1c:e5:
                    35:dc:ff:1f:a7:83:08:f6:7d:76:cf:2c:d4:50:6b:
                    17:eb:03:29:6d:68:45:cf:81:64:31:3b:11:29:23:
                    d3:53:d1:cf:7f:6c:ac:ef:7b:9f:b3:0f:97:ab:28:
                    da:ad:fb:bd:5e:4d:2b:c3:df:98:86:21:51:56:54:
                    49:00:2f:e7:da:df:91:00:62:0d:87:b4:95:a0:fb:
                    eb:b0:00:a0:17:48:da:7b:5d:db:5a:19:76:a8:38:
                    76:4f:8c:1a:d7:c7:c8:70:85:4c:77:55:f9:d5:e5:
                    e7:6f:a8:dd:c9:38:cd:51:e3:f3:e9:05:92:a2:32:
                    16:05:3f:67:a5:ea:4c:59:d8:39:1d:73:6c:7c:c9:
                    8b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0E:A3:7B:67:A4:4B:03:CD:00:59:E7:8F:F6:31:EB:22:52:2F:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/501181e8-d1df-3f50-a008-152c6bbc5501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.59.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b7:75:73:fc:4d:93:ec:a1:3e:26:a3:0e:ce:d5:b0:61:ba:
         d4:76:87:b1:fc:1c:8c:e8:df:ad:52:a3:54:a8:2c:80:18:37:
         f9:4c:ec:25:1c:ed:ae:d5:28:a8:0f:ae:71:72:be:93:c0:9b:
         b1:31:14:a4:db:15:3d:3d:bb:44:3e:52:62:6f:86:49:c5:f5:
         28:00:40:b0:65:3b:9a:25:66:a3:e1:84:a4:c2:c5:6e:a8:2b:
         e8:97:29:d5:40:88:94:22:f4:49:e8:f6:18:a4:5e:27:e0:07:
         2a:19:8c:d1:67:40:7e:7e:56:d3:5b:d6:8e:f9:86:fc:5e:01:
         ef:4b:7a:34:1e:bf:d0:73:04:87:36:37:1a:1c:8f:ec:8f:ad:
         be:18:ff:9a:1f:9b:85:f9:ff:19:d8:93:cc:08:47:47:bb:e7:
         20:64:fc:5f:b7:f0:ca:8f:d1:97:61:2c:55:73:5a:11:f0:74:
         07:30:89:c5:26:06:28:9d:17:d7:9d:86:2e:6b:12:f2:4d:45:
         e7:63:ad:77:01:cb:15:1a:01:1c:65:ed:72:27:5b:a7:89:89:
         53:b0:87:55:46:33:b0:23:fc:77:14:8f:ac:f0:2e:aa:7e:96:
         95:3b:ca:b2:eb:15:69:25:d7:e7:b3:4a:ea:51:02:03:5d:59:
         06:d9:33:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:35:47 2026 by rpki-client