Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/73d82f29-6c55-3196-ae7a-0d08e3aa1220.roa
File:                     73d82f29-6c55-3196-ae7a-0d08e3aa1220.roa (raw, json)
Hash identifier:          wnIeIuwNfD4nwi44Qxcw41LHC4ueD4ASsrCsKC1h4z0=
Subject key identifier:   FC:05:7C:EF:1B:93:32:A5:CF:4F:60:AE:C9:62:41:9A:79:E1:4B:42
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA79096E4324A446010678780
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/73d82f29-6c55-3196-ae7a-0d08e3aa1220.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.57.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:96:e4:32:4a:44:60:10:67:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=153252aa-4c09-4ec5-b87c-c56293c483eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7e:50:82:f5:29:4e:03:fa:0e:65:3e:80:46:
                    e7:4e:98:9b:aa:28:f4:78:79:12:b7:8e:53:f7:b8:
                    78:83:fa:de:3d:41:8d:77:f0:83:ad:a0:3d:bb:ed:
                    3f:a0:f7:64:37:44:0a:f4:27:7f:f6:85:b7:1e:2e:
                    f7:b4:ba:eb:2d:16:7d:9b:0e:b1:56:fc:c0:36:3d:
                    a2:11:00:72:20:4a:40:a5:ea:99:f5:1d:82:f6:21:
                    cc:67:0d:74:dd:fa:43:76:cb:ce:30:9e:83:a1:f1:
                    70:ef:73:78:49:f7:82:a5:7e:d4:f4:f1:cf:a5:90:
                    b5:9b:9f:9c:e8:a5:e5:c7:ad:5b:75:a8:83:95:f3:
                    29:66:63:9e:5a:9a:6a:3b:dc:d4:ab:a5:f5:bb:31:
                    44:b7:8c:6b:47:a4:52:19:75:b7:db:b8:d0:f1:48:
                    ea:10:66:b0:33:84:1c:86:e3:72:fc:3e:8f:b1:55:
                    2a:62:37:e5:fd:f4:97:0e:0a:11:51:1c:06:08:d0:
                    97:e4:7f:ea:ea:db:24:7f:ce:ef:b5:39:2c:82:c6:
                    cd:e0:7b:0a:dd:f1:bc:8f:84:47:cc:9c:5b:9e:f1:
                    da:75:7f:58:02:c7:ee:dd:cb:9c:cd:8b:99:1e:8d:
                    75:31:03:ce:a0:49:95:c7:34:bb:66:ff:8b:80:64:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:05:7C:EF:1B:93:32:A5:CF:4F:60:AE:C9:62:41:9A:79:E1:4B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/73d82f29-6c55-3196-ae7a-0d08e3aa1220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:91:11:10:b6:5f:c4:7c:af:06:b6:a0:ce:4d:64:44:ba:04:
         67:00:38:71:05:17:c4:f9:d3:be:5e:54:f7:ad:92:f9:cf:30:
         54:76:e3:1e:4b:15:cb:c9:77:70:54:f7:42:25:75:c1:67:1d:
         26:1a:ee:6e:8e:62:26:d1:ac:fd:0e:fa:78:ce:e6:fc:ce:9a:
         03:7d:a1:45:27:f4:d2:55:6f:83:33:4a:36:19:5c:b4:55:8b:
         04:27:df:be:94:b8:2e:33:1f:bc:c3:0c:7d:80:11:98:a1:6b:
         57:b3:84:ed:b5:57:77:b2:64:76:2d:45:d0:e5:92:61:21:a6:
         ea:2d:6a:7f:c2:f0:be:87:95:ab:c3:5b:b8:33:22:37:5d:52:
         5e:8a:2c:44:5a:67:d3:59:a2:a4:7d:f0:3e:03:8b:46:18:26:
         74:c0:56:68:cc:a9:cb:3d:11:6f:ec:f8:d4:8a:98:ff:4a:c5:
         a2:69:01:83:47:e1:12:f0:7d:e9:0b:14:1b:a8:c2:0d:ec:a8:
         ee:88:f5:09:b4:19:ac:f6:57:55:d3:ed:d6:17:22:00:27:37:
         d4:20:46:57:55:1f:63:04:ee:25:c2:56:23:35:86:8d:19:a8:
         ce:1d:3a:c6:cc:ce:41:2f:b2:c2:97:d6:f5:61:78:18:f3:71:
         f8:51:e6:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkJbkMkpEYBBnh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTUzMjUyYWEtNGMwOS00ZWM1LWI4N2MtYzU2MjkzYzQ4M2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH5QgvUpTgP6DmU+gEbnTpibqij0eHkSt45T
97h4g/rePUGNd/CDraA9u+0/oPdkN0QK9Cd/9oW3Hi73tLrrLRZ9mw6xVvzANj2i
EQByIEpApeqZ9R2C9iHMZw103fpDdsvOMJ6DofFw73N4SfeCpX7U9PHPpZC1m5+c
6KXlx61bdaiDlfMpZmOeWppqO9zUq6X1uzFEt4xrR6RSGXW327jQ8UjqEGawM4Qc
huNy/D6PsVUqYjfl/fSXDgoRURwGCNCX5H/q6tskf87vtTksgsbN4HsK3fG8j4RH
zJxbnvHadX9YAsfu3cuczYuZHo11MQPOoEmVxzS7Zv+LgGTE/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwFfO8bkzKlz09grsliQZp54UtCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzNkODJmMjktNmM1NS0z
MTk2LWFlN2EtMGQwOGUzYWExMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDkwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHuRERC2X8R8rwa2oM5NZES6BGcAOHEFF8T5075eVPetkvnPMFR24x5L
FcvJd3BU90IldcFnHSYa7m6OYibRrP0O+njO5vzOmgN9oUUn9NJVb4MzSjYZXLRV
iwQn376UuC4zH7zDDH2AEZiha1ezhO21V3eyZHYtRdDlkmEhpuotan/C8L6HlavD
W7gzIjddUl6KLERaZ9NZoqR98D4Di0YYJnTAVmjMqcs9EW/s+NSKmP9KxaJpAYNH
4RLwfekLFBuowg3sqO6I9Qm0Gaz2V1XT7dYXIgAnN9QgRldVH2ME7iXCViM1ho0Z
qM4dOsbMzkEvssKX1vVheBjzcfhR5qA=
-----END CERTIFICATE-----
Generated at Thu Jul 30 00:31:40 2026 by rpki-client