Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/91471df1-315b-329a-b59a-d5aab839d18e.roa
File:                     91471df1-315b-329a-b59a-d5aab839d18e.roa (raw, json)
Hash identifier:          kRKnqvHZ2v1PhclBYK+Gi/TkaKrbgoUvxItQtL0YBis=
Subject key identifier:   F8:00:9E:74:55:53:BF:1A:85:09:CC:AE:3D:9A:61:0E:A8:4C:2F:9C
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA790AA012DEB6A0DD1F322A0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/91471df1-315b-329a-b59a-d5aab839d18e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.35.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:aa:01:2d:eb:6a:0d:d1:f3:22:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b6aa447e-98e9-4a1a-90eb-ae6d8317a491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:3e:31:76:91:a6:1d:8e:a8:14:9b:05:31:
                    5e:31:28:9b:d3:f2:93:91:16:48:9f:fa:c0:40:ab:
                    88:1b:41:9e:48:05:fc:10:6f:fa:c0:d3:be:55:c8:
                    ae:76:ec:39:b2:76:18:6a:e5:32:28:09:96:35:43:
                    f8:94:e3:b1:c4:c1:8c:2c:f1:77:ef:04:72:40:39:
                    05:e4:ab:8d:61:3f:fa:6c:82:8c:c2:c5:a7:8a:84:
                    32:a2:3f:76:6c:84:80:c4:dc:4e:11:21:0b:2c:5d:
                    1e:ff:1c:c5:30:67:85:af:61:7f:04:80:be:49:f0:
                    e7:2b:40:10:f9:43:de:0e:01:55:1f:ef:33:45:91:
                    5b:a2:44:1d:75:e1:9e:8b:7d:0a:39:36:3c:5d:78:
                    11:2c:fc:5a:25:e0:b1:20:82:ab:c6:fc:c6:eb:16:
                    8d:d1:33:0f:d1:d8:bc:da:f7:65:52:09:17:df:d2:
                    75:1a:fc:79:3c:5c:e6:ed:c1:4d:d8:d7:70:0f:0e:
                    e4:c2:40:c2:b5:ca:97:0d:e8:1c:a6:bd:5b:2e:e7:
                    09:66:73:d0:93:96:95:ee:05:11:47:f0:19:ac:d2:
                    c6:c2:b5:fb:ef:ff:ce:9c:2c:e8:4b:49:59:dc:e5:
                    56:6b:69:96:a4:bf:82:87:79:f3:92:35:4a:17:45:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:00:9E:74:55:53:BF:1A:85:09:CC:AE:3D:9A:61:0E:A8:4C:2F:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/91471df1-315b-329a-b59a-d5aab839d18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.35.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f6:91:f1:87:f8:55:6f:ab:80:b4:1c:ac:c2:ad:01:01:f3:
         00:53:96:d1:c7:11:4c:64:aa:8f:0b:2f:37:f2:df:c5:69:c9:
         f9:29:d1:d3:ea:be:f3:73:b7:e4:f1:21:46:c5:09:fc:e7:62:
         e9:4b:f3:73:f4:db:65:8d:47:2c:02:5c:70:8a:f1:eb:2c:37:
         e3:0b:65:44:77:9b:42:2d:e2:b4:f2:90:0c:03:8c:52:90:16:
         7c:25:7f:96:05:96:53:29:39:69:d3:07:e8:b9:97:9d:83:4e:
         e8:06:74:29:da:13:4c:2b:90:38:b3:41:a9:c0:2d:b3:a4:de:
         1d:72:e5:8b:e3:60:38:61:a7:46:49:9f:90:d2:2a:21:73:1c:
         4d:f1:fb:fb:14:2a:a6:68:e6:2b:d3:08:fe:61:5b:b6:4f:a8:
         9c:ac:ca:7a:1d:88:7c:7e:fb:84:a9:1c:32:b5:4d:e0:12:d9:
         1a:d2:5d:5d:4d:5f:1d:8e:ca:a7:62:23:f4:d7:ec:73:a3:88:
         02:10:d5:f6:0c:0e:74:1e:33:e0:1c:ca:bd:74:16:46:4e:a6:
         ad:b9:8b:ab:6a:af:2f:67:a5:2c:6f:7a:81:cd:9b:9d:d5:e4:
         0f:6f:ec:2d:46:24:d9:2a:5c:9f:bc:72:6e:c7:ee:a1:1c:3b:
         84:08:f1:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkKoBLetqDdHzIqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YjZhYTQ0N2UtOThlOS00YTFhLTkwZWItYWU2ZDgzMTdhNDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwE+MXaRph2OqBSbBTFeMSib0/KTkRZIn/rA
QKuIG0GeSAX8EG/6wNO+Vciuduw5snYYauUyKAmWNUP4lOOxxMGMLPF37wRyQDkF
5KuNYT/6bIKMwsWnioQyoj92bISAxNxOESELLF0e/xzFMGeFr2F/BIC+SfDnK0AQ
+UPeDgFVH+8zRZFbokQddeGei30KOTY8XXgRLPxaJeCxIIKrxvzG6xaN0TMP0di8
2vdlUgkX39J1Gvx5PFzm7cFN2NdwDw7kwkDCtcqXDegcpr1bLucJZnPQk5aV7gUR
R/AZrNLGwrX77//OnCzoS0lZ3OVWa2mWpL+Ch3nzkjVKF0U11wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPgAnnRVU78ahQnMrj2aYQ6oTC+cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTE0NzFkZjEtMzE1Yi0z
MjlhLWI1OWEtZDVhYWI4MzlkMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCNAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHH2kfGH+FVvq4C0HKzCrQEB8wBTltHHEUxkqo8LLzfy38Vpyfkp0dPq
vvNzt+TxIUbFCfznYulL83P022WNRywCXHCK8essN+MLZUR3m0It4rTykAwDjFKQ
Fnwlf5YFllMpOWnTB+i5l52DTugGdCnaE0wrkDizQanALbOk3h1y5YvjYDhhp0ZJ
n5DSKiFzHE3x+/sUKqZo5ivTCP5hW7ZPqJysynodiHx++4SpHDK1TeAS2RrSXV1N
Xx2OyqdiI/TX7HOjiAIQ1fYMDnQeM+Acyr10FkZOpq25i6tqry9npSxveoHNm53V
5A9v7C1GJNkqXJ+8cm7H7qEcO4QI8UI=
-----END CERTIFICATE-----
Generated at Thu Jul 30 00:31:47 2026 by rpki-client