Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/78e2b819-e733-3d13-85f5-fe3cddc58cbf.roa
File:                     78e2b819-e733-3d13-85f5-fe3cddc58cbf.roa (raw, json)
Hash identifier:          no1wteJ9whgZ2YYlENntdM+x+9drWlwQyVavRNsErv0=
Subject key identifier:   49:06:FF:BD:B3:C3:88:69:FE:D1:E4:86:80:06:21:A1:21:5D:61:F7
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DFC8107BCE411B4D5ED417100
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/78e2b819-e733-3d13-85f5-fe3cddc58cbf.roa
Signing time:             Thu 28 May 2026 18:45:16 +0000
ROA not before:           Thu 28 May 2026 18:45:16 +0000
ROA not after:            Wed 26 Aug 2026 18:45:16 +0000
asID:                     16591
IP address blocks:        136.46.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:81:07:bc:e4:11:b4:d5:ed:41:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 28 18:45:16 2026 GMT
            Not After : Aug 26 18:45:16 2026 GMT
        Subject: CN=9b5ce709-067d-40a4-b8e9-8274f5f1f4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d7:3e:aa:b7:8c:34:ad:9d:87:64:2e:9a:21:
                    64:45:5f:1d:59:10:3f:0c:b7:bf:db:05:e7:e2:cb:
                    3b:cb:ea:4a:82:5f:5c:e3:0a:4b:c7:93:2d:8d:d8:
                    cd:a4:3e:70:2c:a3:51:86:01:e7:67:d7:99:b3:16:
                    18:65:bc:79:3b:e9:92:65:19:dc:4e:73:22:d5:e1:
                    93:41:8c:cd:05:73:fa:ab:f1:1f:2a:ab:1b:7e:83:
                    6c:6b:d6:fa:25:c4:d9:f9:43:52:db:55:f8:77:54:
                    71:66:ea:41:6d:6f:fb:49:6c:c9:b6:63:7a:52:73:
                    da:f7:5c:0b:c5:89:cb:05:aa:2c:96:93:a6:e6:6d:
                    cb:0c:68:12:03:10:29:ea:56:f8:76:77:0e:7f:94:
                    59:38:13:de:a9:42:6b:e0:9e:d2:62:25:cc:0f:24:
                    a5:42:25:1d:d6:eb:73:08:2d:64:75:e3:29:c9:4f:
                    be:96:98:38:78:ac:de:23:ec:ff:1d:e1:ce:d0:3b:
                    74:24:2b:9a:88:b1:e6:71:f3:3b:cc:48:6a:8d:6b:
                    b2:a5:d8:76:70:eb:05:61:bb:a0:af:50:5c:fb:e7:
                    61:94:88:26:87:84:b7:05:c2:40:04:06:a1:91:68:
                    d3:9f:b3:8f:dc:64:44:35:1e:75:5f:90:cc:14:47:
                    00:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:06:FF:BD:B3:C3:88:69:FE:D1:E4:86:80:06:21:A1:21:5D:61:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/78e2b819-e733-3d13-85f5-fe3cddc58cbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.46.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:84:d1:4a:29:ab:c4:8e:7e:55:5d:b3:3a:9a:7a:52:4c:a4:
         7f:95:d9:bd:ef:8c:2c:64:c0:6e:b4:4d:8e:01:7c:77:0c:03:
         f5:e1:5a:8f:f2:2d:2b:fc:6d:8d:4c:f3:5a:36:20:c8:3e:81:
         c1:e2:f6:37:31:5e:aa:a2:58:f5:df:dd:96:f1:47:7c:7f:ff:
         92:9b:09:0a:09:f4:82:ab:bd:11:80:f7:a2:78:c2:10:b2:c9:
         e4:e1:10:8a:5c:5e:c9:d0:e8:15:30:64:e2:8f:4d:32:bc:47:
         a0:53:ad:35:a2:c8:7d:24:f5:49:a7:d2:ca:2f:87:23:e2:72:
         9f:23:cb:fa:d9:d1:c7:97:6e:34:fa:58:ae:c6:9f:29:e0:11:
         a4:ea:44:fd:c0:4c:79:8f:5a:cc:17:fe:07:c0:bc:68:d5:bb:
         4d:8b:3b:68:aa:44:9b:66:77:0a:69:15:98:82:a8:dc:e1:e2:
         4c:85:c6:fb:a1:7b:35:25:d0:d0:32:b2:50:5a:62:a5:9a:1a:
         c4:89:a0:2b:fa:64:d8:56:e1:4c:d6:26:d4:39:e5:9f:56:37:
         31:e7:b0:3a:28:95:2e:5a:33:88:a6:18:9a:c6:61:a9:61:14:
         c7:95:a8:43:80:a1:62:ff:98:aa:38:cb:ee:1b:99:24:9f:38:
         52:46:e0:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE38gQe85BG01e1BcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDUyODE4NDUxNloXDTI2MDgyNjE4NDUxNlowLzEtMCsGA1UEAxMk
OWI1Y2U3MDktMDY3ZC00MGE0LWI4ZTktODI3NGY1ZjFmNGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNc+qreMNK2dh2QumiFkRV8dWRA/DLe/2wXn
4ss7y+pKgl9c4wpLx5MtjdjNpD5wLKNRhgHnZ9eZsxYYZbx5O+mSZRncTnMi1eGT
QYzNBXP6q/EfKqsbfoNsa9b6JcTZ+UNS21X4d1RxZupBbW/7SWzJtmN6UnPa91wL
xYnLBaoslpOm5m3LDGgSAxAp6lb4dncOf5RZOBPeqUJr4J7SYiXMDySlQiUd1utz
CC1kdeMpyU++lpg4eKzeI+z/HeHO0Dt0JCuaiLHmcfM7zEhqjWuypdh2cOsFYbug
r1Bc++dhlIgmh4S3BcJABAahkWjTn7OP3GRENR51X5DMFEcAlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkG/72zw4hp/tHkhoAGIaEhXWH3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzhlMmI4MTktZTczMy0z
ZDEzLTg1ZjUtZmUzY2RkYzU4Y2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC4wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+E0Uopq8SOflVdszqaelJMpH+V2b3vjCxkwG60TY4BfHcMA/XhWo/y
LSv8bY1M81o2IMg+gcHi9jcxXqqiWPXf3ZbxR3x//5KbCQoJ9IKrvRGA96J4whCy
yeThEIpcXsnQ6BUwZOKPTTK8R6BTrTWiyH0k9Umn0sovhyPicp8jy/rZ0ceXbjT6
WK7GnyngEaTqRP3ATHmPWswX/gfAvGjVu02LO2iqRJtmdwppFZiCqNzh4kyFxvuh
ezUl0NAyslBaYqWaGsSJoCv6ZNhW4UzWJtQ55Z9WNzHnsDoolS5aM4imGJrGYalh
FMeVqEOAoWL/mKo4y+4bmSSfOFJG4PE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:28:12 2026 by rpki-client