Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83cab256-8777-301a-bbc1-8725f7926792.roa
File:                     83cab256-8777-301a-bbc1-8725f7926792.roa (raw, json)
Hash identifier:          lgnyRskWLJUc4Dsq7sVpF33zaoZK6l0o/BaiANQmpuo=
Subject key identifier:   AB:5A:A8:0B:55:F5:9E:2E:2B:E9:3C:E7:17:A1:1A:D1:11:42:EB:75
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D0F7CE8904BB92E2269C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83cab256-8777-301a-bbc1-8725f7926792.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.50.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:0f:7c:e8:90:4b:b9:2e:22:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=86e9988e-4e70-4a60-bfe5-3ab2883f2fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:27:e2:44:85:ca:00:40:57:ad:e2:63:3f:94:
                    e8:7c:67:49:1f:05:0a:72:17:91:95:8d:7f:b0:d8:
                    48:fc:3c:a1:15:56:71:30:f5:1f:67:8f:f8:c5:7a:
                    c2:c2:98:3c:97:bc:70:e4:39:26:0b:63:00:4c:86:
                    97:b2:00:d5:68:09:7c:b3:bb:22:9f:4d:8e:3e:67:
                    64:6f:d7:c2:20:91:22:11:69:d6:a3:9e:63:27:3e:
                    77:3a:f6:13:95:9f:0b:0e:c6:80:db:41:ba:57:b7:
                    37:4f:34:d9:3a:86:b1:18:ae:fe:8a:f6:86:f7:ce:
                    da:d1:8d:2c:bc:ab:40:98:43:7f:ea:12:48:4b:6a:
                    79:69:7d:e4:f9:43:38:d1:14:3b:89:c3:4a:01:77:
                    2e:7c:00:3e:ab:4f:ae:86:ff:66:f3:fb:fb:7e:d5:
                    ec:38:7e:ed:aa:af:b2:5a:8f:22:87:8d:b5:91:b5:
                    75:ac:6a:05:cb:33:19:b2:12:01:c7:14:86:f1:69:
                    7a:72:e3:e1:bc:5c:62:97:f4:ee:e4:65:e6:e0:52:
                    45:36:65:cf:b1:62:f0:12:45:28:d0:4e:7a:07:6d:
                    70:c0:ef:ff:28:3a:d9:a6:7e:8f:59:05:a8:f3:23:
                    95:45:95:dc:e8:10:87:f3:0e:a3:48:e5:aa:22:0a:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5A:A8:0B:55:F5:9E:2E:2B:E9:3C:E7:17:A1:1A:D1:11:42:EB:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83cab256-8777-301a-bbc1-8725f7926792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.50.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:49:37:e6:d7:05:6f:0b:06:0c:9b:3c:9e:b9:37:08:54:3f:
         df:60:4e:5a:6d:15:97:cb:3d:d2:36:a5:72:4a:1b:d1:9f:ac:
         23:20:14:db:a8:70:53:6f:d2:f3:9f:46:19:89:db:eb:42:e2:
         8e:27:8e:35:61:32:16:71:1b:a7:25:9f:e8:0b:c5:3e:eb:10:
         86:1c:85:d9:11:66:71:d3:20:56:1d:2c:8f:4e:7c:3c:74:25:
         3f:b1:44:fc:06:6a:3d:1a:20:8b:67:0d:56:7d:86:3e:62:8a:
         ae:e9:a7:28:a0:d5:9c:85:0e:a9:22:0e:18:f9:2f:c7:56:42:
         b5:e8:f5:d5:0e:28:63:9f:f3:61:c3:ba:53:68:73:99:db:0f:
         89:0a:69:14:d0:8e:71:d9:18:18:69:cc:4f:fe:1f:9b:3c:c0:
         fe:60:74:5e:78:3d:76:4f:f3:7d:28:99:a9:64:d5:75:c2:eb:
         e2:cb:1a:72:76:2c:99:ec:39:ca:32:f2:63:f4:e2:cd:3e:dc:
         19:53:77:19:59:04:b6:3e:19:f4:ee:24:0e:00:a4:0e:db:a4:
         4e:51:be:6d:14:96:03:4e:3f:84:65:8b:ce:80:f3:6f:02:9b:
         18:19:27:ec:64:d7:3a:a1:40:e1:07:bf:b5:01:bc:74:26:8a:
         45:31:c4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:50 2026 by rpki-client