Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7237c30a-f3e2-3629-9938-fda9465037fa.roa
File:                     7237c30a-f3e2-3629-9938-fda9465037fa.roa (raw, json)
Hash identifier:          XQKjSH9fso11yL+d08hNMS2wfbt3yJHl1CRLqwAkj18=
Subject key identifier:   B0:94:1C:58:9F:6A:1A:A6:0C:10:06:FB:5C:61:5C:D6:40:F2:7C:BE
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037CF2BCCE853A3E49629540
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7237c30a-f3e2-3629-9938-fda9465037fa.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.58.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7c:f2:bc:ce:85:3a:3e:49:62:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=ad809648-43e9-4412-8637-33cf9e4ec08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4d:78:dc:3a:26:cd:8d:c2:f2:58:51:fd:dc:
                    35:81:7a:8d:1b:08:6a:94:c6:a2:20:d4:d3:9d:20:
                    c9:c9:dd:75:80:fe:18:3f:08:0b:2e:9b:9e:fb:c5:
                    a1:5f:9e:43:d5:da:20:f3:f8:04:84:8d:4d:64:f2:
                    5a:d3:36:70:b6:32:68:f6:42:a9:ce:fd:49:bd:b6:
                    4d:51:a6:bb:69:c8:ba:10:10:15:47:d8:b4:e5:57:
                    de:e2:17:69:bf:10:f5:39:f2:3d:58:95:9a:e5:e0:
                    37:09:90:8d:4f:ee:3e:dd:bf:05:46:7f:13:7a:af:
                    e3:49:93:0c:4a:74:02:fd:df:49:98:29:78:18:05:
                    28:a9:93:8f:f6:05:43:28:de:2c:fe:a3:65:4e:f8:
                    4c:ff:54:83:82:b4:9f:ef:91:65:24:db:01:98:42:
                    36:4c:93:de:40:74:62:f3:0e:f7:6e:e6:36:2c:11:
                    25:13:4f:33:cf:71:fc:06:51:ad:5d:be:48:55:3e:
                    69:25:b8:f1:eb:95:41:17:1f:fe:1d:9f:b9:b4:2e:
                    bb:6f:6a:ae:72:4e:72:66:17:b0:fc:7b:67:0d:50:
                    59:38:b9:dc:26:fc:1d:59:55:01:65:75:80:b9:50:
                    37:0c:39:0b:79:29:88:02:49:74:5b:9c:83:77:77:
                    95:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:94:1C:58:9F:6A:1A:A6:0C:10:06:FB:5C:61:5C:D6:40:F2:7C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7237c30a-f3e2-3629-9938-fda9465037fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.58.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a7:02:dc:23:26:2b:e2:2c:12:83:c6:bc:31:35:cd:14:b2:
         df:e8:79:c1:85:54:88:f5:d7:10:6f:2c:9b:e6:d7:85:3d:fc:
         b3:f5:36:8e:ea:92:d5:32:ca:70:72:1f:ad:e1:52:c3:32:e4:
         a9:a5:be:4c:58:01:b2:f2:5f:a5:10:cf:00:f8:d3:43:e9:f2:
         3c:52:80:70:0b:da:71:a6:a7:34:9c:b8:2f:de:dd:a6:b2:e7:
         da:0d:8f:4b:29:78:16:e2:ae:c6:00:e7:49:c5:a0:96:af:e8:
         76:e5:7d:51:0d:44:e8:43:6a:c9:52:be:d8:dd:a4:48:89:73:
         69:c8:6a:89:ec:ba:70:64:b5:a6:0e:c7:9f:e5:d6:fa:1a:04:
         9d:5e:a4:f6:6f:a7:af:38:f3:28:2b:9f:42:57:a0:e4:47:d7:
         e6:2f:56:fe:c1:52:c4:ed:9e:ab:bc:37:6e:5b:8a:73:bf:83:
         b0:29:43:19:db:d0:87:d9:c6:71:ba:c5:aa:b6:66:38:f1:e5:
         a8:9d:05:45:0c:b9:ae:51:4d:1a:c1:3f:92:1f:35:0e:ae:90:
         5f:5c:ff:49:10:71:62:0b:37:89:aa:c8:0c:da:90:91:21:6e:
         27:bf:31:dc:87:57:55:10:01:19:ec:86:c1:0a:18:13:af:7c:
         bd:27:4d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:48 2026 by rpki-client