Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/64329697-4a8a-335c-8425-77ab57475e21.roa
File:                     64329697-4a8a-335c-8425-77ab57475e21.roa (raw, json)
Hash identifier:          MM7Kt4hsfp0Fl+qSaYcQCVpXO60GP41O/oAXDjcNdts=
Subject key identifier:   65:DD:33:A6:3A:3C:14:11:0C:56:23:E0:71:54:EE:73:7B:81:6F:03
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA7916DBB0AA5532DC38CC5C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/64329697-4a8a-335c-8425-77ab57475e21.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.63.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:6d:bb:0a:a5:53:2d:c3:8c:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0ebb7102-2e1b-4e44-9cdf-19d698f338ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:be:d6:1b:dc:0e:7b:f5:00:bc:f2:7c:f6:
                    03:bb:1d:71:ca:de:d3:f9:50:b4:55:53:fd:f0:18:
                    41:c3:ed:7f:dd:75:35:75:8c:bb:6f:ad:cf:0f:29:
                    1f:56:96:b8:13:07:a1:7f:3d:49:eb:db:19:4d:e6:
                    e0:17:21:dc:3e:29:c9:51:43:a2:72:89:d1:a2:7f:
                    f9:bd:24:10:19:8c:ae:5d:c5:e3:f2:12:50:f3:86:
                    56:94:bd:05:c8:a2:79:95:98:f2:5d:95:b1:3f:1b:
                    73:17:3d:e0:72:8d:a6:1e:5c:71:97:63:56:cb:3f:
                    a2:9b:58:24:d3:da:a7:bb:e9:61:92:c4:6e:9f:7e:
                    fc:5e:4d:5b:11:c0:91:e6:13:93:87:56:de:70:16:
                    a6:5d:46:8d:67:1b:28:c2:96:8f:17:21:e6:65:10:
                    ba:38:ee:b8:5e:55:bf:9a:9b:96:6c:b7:61:90:0a:
                    71:10:a6:ab:cd:24:db:59:27:a8:70:24:fb:47:d5:
                    4c:e3:be:85:8e:f0:98:91:e8:40:26:6c:7b:4b:9f:
                    15:12:75:7d:1f:2d:80:51:68:d0:f1:4f:5b:4e:8f:
                    3a:9b:e0:9a:e5:39:8c:ca:7b:8b:54:08:85:5f:65:
                    89:bd:d9:5c:0d:ad:c8:03:62:55:87:a5:72:88:75:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DD:33:A6:3A:3C:14:11:0C:56:23:E0:71:54:EE:73:7B:81:6F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/64329697-4a8a-335c-8425-77ab57475e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.63.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:72:bb:01:49:b5:2e:3a:ae:a3:46:e8:77:be:c0:00:5b:5c:
         ed:38:9d:f2:7a:b5:53:a7:79:dd:56:f1:8a:3a:ec:b8:fa:c8:
         82:5a:c1:7d:08:33:21:9b:ce:6f:b5:61:32:ea:92:eb:0b:ad:
         22:0d:95:51:c0:7d:72:81:64:8b:0d:f0:26:db:fb:09:38:54:
         b0:42:70:46:e9:33:bd:6d:39:8a:d2:06:ea:54:af:14:bf:b4:
         7a:b6:92:07:b1:58:0d:d0:7b:6e:39:a3:0d:4e:4e:66:3d:fd:
         94:08:c0:7d:50:9b:bb:c4:95:a1:e3:48:4f:f2:3a:9b:be:27:
         35:02:1e:68:7c:25:bf:ea:62:7d:e0:aa:bc:dc:48:8c:1a:36:
         79:a0:b9:74:9d:c1:f9:70:62:7e:dd:91:67:dc:d1:30:11:ca:
         0d:67:ea:ba:8c:75:f3:eb:6e:86:ae:d5:42:ca:bc:dd:c9:69:
         3d:9a:ff:b8:eb:90:eb:d4:a7:ba:f9:df:4a:f7:87:34:b2:8e:
         73:b9:e3:45:80:7b:00:33:de:88:21:6b:95:d3:cc:a4:c3:9b:
         ef:50:40:f7:1c:ab:4d:c6:60:09:b4:41:3f:61:54:08:65:5c:
         d9:86:80:f6:5a:8d:11:d6:b9:0b:5e:72:af:7e:c0:f8:f8:58:
         c0:aa:8d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:34:39 2026 by rpki-client