Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa
File:                     96c60abd-645f-326f-b5a5-66908173a9c0.roa (raw, json)
Hash identifier:          X7vDbDhiTlonFIZkCIZoaspw8R+w5NqT06LEMXb8F/k=
Subject key identifier:   C7:92:9B:7F:A6:22:72:F7:4F:FA:AB:91:77:9F:EA:E6:A0:95:6C:B8
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584E131980406080303CF5E380C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     16591
IP address blocks:        136.52.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:80:40:60:80:30:3c:f5:e3:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=d7315b5b-4620-489f-ad8d-f3ac0c42f0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d3:e2:ba:77:8c:bf:c3:54:26:52:87:28:c2:
                    2b:b9:33:06:bc:05:cd:5a:0c:5e:e4:2d:f7:da:7c:
                    3a:d7:ee:54:8d:26:de:ed:56:71:0c:bd:91:e7:be:
                    fa:af:af:0d:cf:30:2f:65:7e:80:eb:9f:17:62:19:
                    1c:32:8d:34:a8:c3:9c:e5:7d:fb:a6:7b:b7:19:b2:
                    17:d9:a5:f1:a2:68:3e:e4:4a:d9:5a:98:d0:db:eb:
                    75:34:dd:c8:59:e0:de:96:94:cd:30:49:46:e9:b9:
                    6c:82:81:54:f3:b7:83:1e:1e:8f:b0:d9:08:41:67:
                    66:3f:8b:1e:41:ff:aa:79:55:6e:24:f8:b9:5a:f4:
                    66:53:4e:ce:ef:f6:83:8e:9a:12:c6:64:d4:6f:5a:
                    20:31:2e:ee:9e:ee:8f:b2:85:71:7c:fc:96:74:de:
                    87:de:20:5d:71:8d:00:15:ac:a1:99:4c:4a:86:8c:
                    87:74:27:ad:35:d8:ce:83:ca:a6:7a:e4:9e:09:85:
                    fd:81:0a:78:ac:b3:f6:2c:23:0e:89:26:49:05:27:
                    aa:74:86:24:f7:2b:e0:69:f4:1c:57:61:70:6e:ce:
                    a8:06:27:7f:eb:6e:1b:8d:e0:3b:44:1d:54:42:b5:
                    33:00:d1:42:7c:45:5d:49:54:cd:94:a5:ad:f9:07:
                    c7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:92:9B:7F:A6:22:72:F7:4F:FA:AB:91:77:9F:EA:E6:A0:95:6C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.52.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d4:de:9f:6b:06:01:32:5c:2a:58:cc:7c:09:46:91:fc:f2:
         9a:8d:46:7d:a8:09:de:6f:8e:8a:f2:cb:35:0b:1e:7c:05:00:
         4e:25:d0:52:76:b2:c2:29:07:00:17:82:fc:bf:d1:47:2d:f4:
         b6:aa:1f:7a:42:9f:2c:d0:7e:8d:99:03:da:37:33:54:af:9e:
         d9:1c:d3:95:4f:f6:31:07:5c:be:01:85:66:20:1f:02:ac:5d:
         1e:e8:85:d6:42:97:62:90:df:eb:d5:09:f5:f6:3d:8a:07:14:
         7e:8a:75:50:65:e5:37:0c:1d:2e:29:35:33:f6:5b:d7:c4:a1:
         3e:2a:37:76:fb:d5:71:ab:2e:68:e7:81:93:c5:70:c4:fe:ae:
         23:fb:e7:ea:6c:ee:e8:e1:b0:6e:09:e9:ad:5c:3e:c8:60:0a:
         33:5b:72:50:08:d8:10:18:61:74:ec:89:92:36:5d:92:e7:78:
         c8:02:e8:8c:8d:e2:23:fc:a1:9d:b5:a3:09:b3:ea:06:93:5e:
         ec:48:0d:85:af:ea:98:72:9f:ce:50:08:4b:71:bc:a7:74:de:
         a8:4b:e2:4a:b2:00:1a:e1:d7:c6:ec:f5:eb:da:c7:81:96:c7:
         a7:9e:e5:74:42:63:b7:a2:fb:52:cb:2c:25:14:8c:0f:56:d6:
         a3:6a:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:22:17 2026 by rpki-client