Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/52f4d093-e1f7-320d-a2d5-c6ade4cec791.roa
File:                     52f4d093-e1f7-320d-a2d5-c6ade4cec791.roa (raw, json)
Hash identifier:          mpOfGNKDCmeK17gWGlszVORIHMmLLWyN8IXOMtxJufY=
Subject key identifier:   FE:4D:F8:D8:C6:58:72:0A:32:D1:65:E6:BF:C2:61:57:20:A9:52:2E
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D1667F11EDA1E17D34E20
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/52f4d093-e1f7-320d-a2d5-c6ade4cec791.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.59.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:16:67:f1:1e:da:1e:17:d3:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=3a233b60-687f-4f82-916f-cd9f6118432c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d1:7b:30:cc:36:c9:f7:d7:4c:31:6c:62:49:
                    18:fb:9b:85:09:55:94:95:ae:6a:56:64:32:05:56:
                    78:6f:d5:1a:7d:46:97:ed:c7:e6:7a:a7:24:c0:b8:
                    b7:54:f0:47:24:65:26:88:6e:df:2b:0e:b7:a9:57:
                    a4:e4:a6:c7:ff:02:57:cd:e2:c0:06:63:23:13:31:
                    65:09:e5:44:de:67:fe:1d:00:48:c8:16:16:c7:f1:
                    56:6a:4f:af:08:af:33:ad:4d:95:90:1b:f0:8d:5d:
                    2f:60:e3:8b:f0:04:61:40:fc:60:58:40:2b:20:3e:
                    8a:91:5f:70:90:f2:18:b1:e1:17:b3:ac:46:6d:a3:
                    8b:35:0e:e8:de:0c:33:90:9e:88:c2:5d:e1:c3:b8:
                    90:ad:7e:d4:ff:9c:0a:e3:3d:f2:b6:75:40:f7:81:
                    39:1c:f4:ff:51:50:15:52:6f:8b:c5:c5:28:77:95:
                    34:bd:ea:f6:26:3a:47:05:3f:46:e6:26:6e:af:5d:
                    cc:33:0d:2a:e7:a8:7b:a7:d3:84:82:05:58:18:0f:
                    2e:a4:b5:43:61:4d:c7:38:41:6e:83:32:d6:53:a6:
                    b5:0c:6a:2d:85:21:10:34:d4:84:c2:94:2f:92:3c:
                    9a:dd:73:f3:84:c4:e1:af:46:ef:59:1b:b0:ec:00:
                    ff:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4D:F8:D8:C6:58:72:0A:32:D1:65:E6:BF:C2:61:57:20:A9:52:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/52f4d093-e1f7-320d-a2d5-c6ade4cec791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.59.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7d:a3:71:d2:c2:64:7e:ee:bb:06:f6:d7:ca:ef:38:8b:a7:
         e9:03:69:11:20:27:2c:cf:1c:c6:20:43:f2:e2:bd:50:63:03:
         32:f8:10:e0:97:7b:b6:af:02:52:a2:51:57:24:1b:b2:d9:8c:
         46:78:fb:60:99:b5:88:fa:97:64:98:02:d7:04:82:89:90:56:
         c5:69:57:5f:85:4a:3d:c3:80:e1:9f:51:6f:c4:a1:75:66:c2:
         d7:09:0d:17:18:c6:29:e6:af:2a:a2:7d:42:ed:85:a5:ba:8d:
         cb:c1:0b:5e:c7:ba:f5:05:a0:24:7c:8d:c6:61:c4:57:89:45:
         76:e9:4e:a9:80:6e:b2:41:c7:61:c1:fc:ed:88:3d:b5:c7:9a:
         f8:26:01:bc:6e:6b:3c:96:ca:5a:ab:98:6f:28:de:5e:ed:ed:
         4e:8d:68:57:e9:66:e4:43:d0:c7:3c:a3:a4:95:c9:27:b4:75:
         f7:46:ff:27:e3:98:57:57:ee:ca:d1:ef:a1:be:fc:f3:98:48:
         c7:b8:42:dc:b9:41:1b:7a:59:63:79:c7:ef:cc:5c:f6:5f:4b:
         bf:1c:47:bc:32:fe:4d:4e:9e:cb:ae:14:75:62:a0:05:3b:f9:
         cf:c1:4b:67:92:ea:89:73:94:82:ae:65:93:2c:5d:f1:66:3a:
         8a:fb:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:45 2026 by rpki-client