Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83cab256-8777-301a-bbc1-8725f7926792.roa
File:                     83cab256-8777-301a-bbc1-8725f7926792.roa (raw, json)
Hash identifier:          8A96qteZjjqidBsozseXnLVmq3mUlO5HBLZOl3HbXLo=
Subject key identifier:   6F:41:5B:DF:DB:6D:B2:56:C9:98:82:25:35:95:9C:51:82:1A:40:F9
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA7909B509FCC0503440BB260
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83cab256-8777-301a-bbc1-8725f7926792.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.50.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:9b:50:9f:cc:05:03:44:0b:b2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f05a7ce1-e6c8-49c6-8c49-1f77a7adc997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ef:23:43:8b:b1:01:51:87:7c:31:20:fd:b0:
                    2d:17:32:85:21:fa:b0:ad:a3:90:e8:90:32:8b:8f:
                    51:1a:bf:1b:54:b7:24:3e:c6:f0:64:25:d7:a4:e4:
                    c0:fe:6e:6f:7f:94:82:dd:a1:16:bc:b2:68:6c:08:
                    7b:f4:22:07:03:98:65:5d:0a:19:c1:ba:93:aa:e8:
                    26:72:47:55:ea:da:fb:ca:cb:9d:6d:43:69:4b:62:
                    06:4f:47:ed:16:e9:71:87:f4:3c:02:bd:ea:e6:72:
                    c1:9f:82:44:8a:1f:45:d9:a5:05:e0:af:2e:a0:2d:
                    01:c2:74:c6:42:07:f1:1c:84:79:27:33:6d:f9:15:
                    ad:9e:5e:93:9a:0a:a6:97:19:58:98:45:0f:65:c6:
                    b4:c1:e8:73:f9:ea:54:fb:e8:d9:4b:c0:e6:23:a6:
                    b2:bc:ad:cb:65:cb:fb:50:68:74:71:5f:1f:87:4a:
                    dd:b0:f2:aa:6b:b3:46:d8:c5:9b:5f:fe:b9:c7:32:
                    d5:2a:f3:b1:7d:cd:e8:ec:7e:8f:10:50:6d:c9:c5:
                    48:ea:e1:26:0c:86:27:0e:a2:9d:2c:25:d5:e5:46:
                    8a:68:b7:88:cd:e4:19:ba:8c:e4:05:bc:82:94:5f:
                    ea:69:5c:6c:a7:95:0a:68:9f:a8:80:a5:04:6b:8f:
                    fc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:41:5B:DF:DB:6D:B2:56:C9:98:82:25:35:95:9C:51:82:1A:40:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83cab256-8777-301a-bbc1-8725f7926792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.50.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:13:62:2b:21:ee:e8:e3:1d:c2:3a:87:2f:1a:0c:0c:5d:1a:
         9b:06:e4:5e:3a:12:c7:7e:0a:9f:10:e0:a0:40:07:1e:ad:14:
         07:ce:26:99:5d:39:d0:2e:19:68:37:12:f4:33:68:40:b5:b4:
         1b:06:99:d9:ae:37:27:c7:cf:d7:86:47:18:11:a9:57:87:b3:
         63:21:4d:39:23:1a:53:cb:f6:9c:99:46:9b:bf:45:39:99:91:
         74:b6:97:6b:8c:67:4d:b5:0f:a4:b7:2a:e2:31:4c:ac:f7:ef:
         ab:8d:01:1d:3d:22:aa:7f:12:fc:ee:7f:7a:84:31:ae:f3:83:
         92:5d:19:f4:e9:1a:d4:9f:20:f4:68:41:5d:27:57:bd:40:fa:
         07:36:65:e8:84:e4:26:8d:8a:69:1a:52:27:89:12:9f:f6:fc:
         97:46:cf:e0:c6:cc:c8:24:26:bd:11:55:16:11:82:cb:42:f3:
         35:01:9c:56:e6:75:b2:a3:06:e0:ea:d8:e9:dd:68:ad:60:bc:
         1f:c3:55:da:a6:14:cc:a8:67:18:9b:7f:2d:ee:22:a3:2a:32:
         e5:b8:26:f8:4c:d6:5f:cf:44:dc:1d:94:18:88:1b:d4:fb:56:
         4e:f3:60:36:79:7e:e3:40:5a:4d:96:8e:3d:76:4d:03:4b:a2:
         cb:3b:d9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:34:23 2026 by rpki-client