Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6670bff5-6620-3e34-b318-bedb1d01093f.roa
File:                     6670bff5-6620-3e34-b318-bedb1d01093f.roa (raw, json)
Hash identifier:          Dbrp4XeBwiozI2qCyzUAAFssX621A0y4/4IH8XWPKhA=
Subject key identifier:   59:F5:47:CE:01:D5:32:84:E9:33:51:4C:06:36:4A:B1:37:DD:2C:CA
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D48FC0C4178A63C1047C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6670bff5-6620-3e34-b318-bedb1d01093f.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.52.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:48:fc:0c:41:78:a6:3c:10:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=d3a75c6f-7e60-418e-8306-2e4281311502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:76:6b:c6:a6:81:b7:3d:08:65:20:a4:fc:
                    dd:c1:88:a3:67:8a:2c:22:b2:8c:4f:b8:fd:3e:42:
                    4f:77:59:99:08:14:52:f9:5d:ac:e4:0f:0a:5e:22:
                    7a:a0:06:3f:1a:41:a5:b7:97:95:b6:3a:72:ee:d7:
                    df:b8:da:df:1c:ff:33:ba:f8:31:4a:64:f0:62:1b:
                    54:95:7f:fd:ce:46:a6:4b:81:78:64:fe:46:fa:2f:
                    0b:71:5a:ae:a2:13:08:c7:3b:fa:f9:2e:22:18:76:
                    5f:a1:fa:a0:6b:9c:ea:9b:ba:4f:41:86:10:89:e9:
                    5d:b9:aa:ab:1b:ff:d6:80:ec:aa:fc:aa:fd:bb:de:
                    2b:4a:5a:a6:0c:d7:b9:fc:14:05:48:fd:6b:da:45:
                    e3:2f:10:99:05:66:e9:0c:c5:dc:50:f8:55:14:fd:
                    ef:04:c0:fb:7a:50:9b:ba:8d:04:f7:24:87:8f:a7:
                    d1:93:7b:eb:75:f0:42:d9:9f:e1:a9:ac:a8:21:1c:
                    ad:4f:c5:2e:f3:48:16:0d:f2:09:5e:c3:d1:be:36:
                    e8:2c:f4:cc:77:53:af:58:e6:3f:35:1a:0e:f5:9f:
                    ab:e7:b1:ff:95:89:ae:b2:59:97:29:38:cb:ef:75:
                    6b:f2:1a:7e:8f:be:23:74:9c:63:17:f2:c6:93:9f:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F5:47:CE:01:D5:32:84:E9:33:51:4C:06:36:4A:B1:37:DD:2C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6670bff5-6620-3e34-b318-bedb1d01093f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.52.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:27:54:50:4c:ee:98:05:86:0f:86:f1:a2:74:ee:99:92:3d:
         84:2f:89:e5:ed:c8:1b:50:bc:8c:54:fe:78:ae:9d:7a:d6:af:
         81:7c:70:7f:25:26:7f:d3:97:35:17:83:64:ce:17:77:fb:83:
         27:71:51:6b:b0:e1:51:11:ff:ef:fe:10:89:9e:27:52:5f:f4:
         db:61:8d:06:d3:df:76:6a:a4:2a:c1:d7:8b:4d:58:50:a9:ea:
         96:85:58:35:11:09:35:0c:80:ba:d1:66:32:a1:32:08:1a:8d:
         20:3c:b0:11:e9:3d:2f:ee:1d:f3:53:e8:c2:e5:0a:73:e2:ec:
         ac:62:08:12:11:ec:86:6c:a2:a8:5f:2b:b9:a2:03:75:8a:74:
         60:74:fb:4d:46:02:57:a8:e3:7c:fe:ad:c9:45:47:0b:a0:b7:
         eb:71:68:ec:bf:e6:ed:d2:3a:1e:10:a2:a0:ff:3b:fc:68:f0:
         44:32:27:88:05:0c:61:9b:66:e4:59:ba:ff:00:59:ed:5a:03:
         36:01:27:69:f3:b1:ef:90:95:f4:81:5d:f2:fd:80:e4:36:47:
         3c:41:5d:59:d0:13:3a:b5:ea:68:4f:44:f0:ab:20:83:d6:61:
         3e:7e:ed:01:d5:4b:c7:62:91:bb:26:54:fc:c1:f2:a2:f5:75:
         50:6e:82:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:32 2026 by rpki-client