Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/559275c7-d502-32c7-83b9-37204f3e27b2.roa
File:                     559275c7-d502-32c7-83b9-37204f3e27b2.roa (raw, json)
Hash identifier:          53dSqewXp6iKyYrBdVM2/e+yNvyMn4pxlyl9tCUQe7A=
Subject key identifier:   3E:DD:6D:64:E3:9F:9F:83:CE:7D:D9:76:80:19:C2:28:F7:E4:F3:95
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D5CDA06DFDC41D34AD540
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/559275c7-d502-32c7-83b9-37204f3e27b2.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.46.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:5c:da:06:df:dc:41:d3:4a:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=b5078b1e-3f03-49c6-923d-3152354f40d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a4:37:88:8f:f3:27:7f:0c:15:8c:e4:2d:ab:
                    09:35:98:f5:11:1d:f2:22:0b:ed:2a:50:55:00:6f:
                    fd:15:95:d3:a2:35:ba:ef:55:f5:a8:37:af:90:0a:
                    52:0f:03:c4:54:c2:bf:1f:18:61:67:90:08:8f:a7:
                    98:e4:d2:78:02:e1:fa:1c:da:0e:a8:d9:ef:ed:26:
                    b3:18:22:ac:9e:11:bd:2e:7d:5b:14:89:c8:93:88:
                    a3:51:cd:c4:99:27:08:70:44:24:f6:30:40:a3:7f:
                    00:9c:f5:75:3d:5e:32:d2:ed:8e:eb:17:e7:e3:b3:
                    d6:12:03:e4:f2:cb:76:34:9e:10:7a:e0:ff:84:f4:
                    5e:9a:54:b1:35:56:fa:aa:6f:26:00:82:9c:78:1d:
                    f8:c1:db:07:de:80:f8:ea:a2:11:c6:47:11:bf:f4:
                    b3:ad:9e:37:8d:3a:5e:4d:10:fe:0c:72:4b:99:34:
                    a6:ab:59:95:f8:bd:0e:29:88:bd:14:20:8f:48:52:
                    30:a8:97:24:9c:a5:37:37:b9:77:1a:b5:53:a9:05:
                    fc:8b:24:96:2b:f4:11:63:06:1f:97:0c:1f:ec:9e:
                    b7:c1:6a:fe:c9:a2:65:5f:fa:16:f8:c0:08:2a:25:
                    17:a6:1b:b7:f5:62:e8:bc:64:1f:16:83:0f:ff:69:
                    ac:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DD:6D:64:E3:9F:9F:83:CE:7D:D9:76:80:19:C2:28:F7:E4:F3:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/559275c7-d502-32c7-83b9-37204f3e27b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.46.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:6d:67:32:13:2e:d8:a0:68:51:0a:6f:9f:61:5c:3e:9f:af:
         16:c3:83:c6:1c:0d:0b:43:6e:92:e7:cc:5b:56:4b:0f:c3:9f:
         4a:0e:cd:f4:47:23:ed:f4:f2:05:13:ec:34:9a:3a:b2:0e:86:
         b1:4a:dd:78:e5:35:a8:c8:08:a3:99:66:b8:0c:03:3e:63:9e:
         39:30:94:5a:8b:34:f8:73:14:97:56:16:88:cc:ae:0e:7a:36:
         64:88:8d:68:47:65:21:05:85:0a:47:ad:55:c1:3f:f3:97:b9:
         fa:10:52:4a:90:00:d9:72:0b:78:56:0d:b3:e7:4d:8e:c5:b0:
         88:78:6e:53:d9:f2:fb:56:22:71:22:bb:98:04:25:45:26:27:
         88:0e:4a:ac:66:23:d6:78:5a:47:a4:31:27:bd:f6:60:ec:1d:
         1a:87:78:4d:aa:0f:68:90:75:36:cf:2c:7f:95:0c:fb:38:bc:
         20:c1:63:c5:39:55:87:a0:3d:31:de:ba:ca:cc:d7:ce:af:15:
         73:f9:5b:9b:d5:93:fb:e7:9a:81:6f:67:30:47:e5:05:4c:93:
         b7:d8:7a:5a:c3:bf:52:23:e7:ba:b8:12:cc:7f:06:2a:a4:bd:
         34:bb:d6:3d:c4:e7:7d:80:aa:63:64:14:1e:e2:40:2a:31:d7:
         87:3a:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:19 2026 by rpki-client