Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9e8bdc80-45fc-3533-a58e-8ee7089ddb0e.roa
File:                     9e8bdc80-45fc-3533-a58e-8ee7089ddb0e.roa (raw, json)
Hash identifier:          YomiKodA2EGQupNImLAcpg0nc0l326MHLyUeLhra8M0=
Subject key identifier:   E0:B7:C5:76:BF:45:7C:BE:0E:7D:25:70:00:3C:2E:C4:33:91:22:79
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA791327519CF19F1676BE1C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9e8bdc80-45fc-3533-a58e-8ee7089ddb0e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.36.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:32:75:19:cf:19:f1:67:6b:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6c7d9f9a-8824-431b-99bb-e7f7761812fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:74:97:c0:f9:ef:f1:c4:be:1a:f2:b0:d4:
                    07:ba:08:7b:38:57:76:4f:79:39:e7:db:21:24:46:
                    7e:9b:2a:70:76:1a:24:c4:16:08:80:80:16:6f:3a:
                    53:fc:a4:96:92:73:fe:1e:fd:3c:72:ca:e7:6b:b6:
                    58:3e:04:b8:65:af:ff:c8:09:e7:d6:d2:64:ca:10:
                    d7:88:14:02:ee:a0:a3:e8:3b:a6:37:82:e2:73:da:
                    22:d3:7a:a6:7a:b0:47:d1:65:15:f7:31:67:b3:3d:
                    ec:32:a7:ad:db:59:97:7b:40:cc:a7:92:69:5a:09:
                    65:a0:24:59:31:cf:6a:04:bb:bc:64:dc:14:db:b0:
                    ba:ce:98:07:81:a1:71:4c:cb:6f:80:7b:a3:40:01:
                    e0:21:88:93:ee:48:75:22:fe:77:50:71:cc:b2:88:
                    69:ad:be:c4:11:75:64:1c:7d:8c:de:e8:dc:71:f8:
                    49:51:77:d8:0f:98:47:c7:01:55:81:44:b2:9b:78:
                    2e:15:6a:6b:6e:40:6c:81:b7:d0:00:3c:21:a0:58:
                    ba:c5:05:00:2c:ea:ad:05:82:d7:68:54:31:5f:81:
                    3a:80:81:7e:64:09:7a:4d:ef:90:cf:75:3e:28:b6:
                    23:ea:e5:c2:1a:28:b8:e5:1a:6c:20:30:8a:71:72:
                    15:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B7:C5:76:BF:45:7C:BE:0E:7D:25:70:00:3C:2E:C4:33:91:22:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9e8bdc80-45fc-3533-a58e-8ee7089ddb0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.36.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:80:88:00:17:f8:b8:0f:f0:a1:60:77:57:a1:eb:ad:3c:72:
         5e:3d:6a:04:74:8d:d6:87:55:9b:0f:fa:cc:8c:8a:2d:94:3e:
         64:2b:5e:8c:4a:72:69:67:9b:a7:25:a0:20:df:4c:ed:81:11:
         b8:ae:3c:36:30:c3:81:e5:a9:9a:85:d4:60:56:23:56:0e:c1:
         ec:ca:e8:67:09:22:f8:85:2d:4b:77:b9:07:f6:1f:22:be:76:
         ef:de:44:61:87:b6:1a:65:00:ea:d3:68:37:b2:cc:e2:ba:3d:
         74:d9:d4:8f:a0:ef:f7:77:aa:ff:d0:25:ce:29:64:d3:3a:e2:
         f9:59:ae:fe:36:78:84:8e:2c:7b:12:b3:ae:9b:5b:45:00:bb:
         71:61:51:6b:ff:de:af:fa:84:2c:75:e7:58:cb:45:c5:d8:56:
         82:f6:09:3d:3b:01:a9:a1:9d:c8:d1:a2:8b:17:14:bb:47:47:
         c1:cd:bc:dd:41:94:45:6b:fd:27:75:2d:43:2c:c2:d6:3b:84:
         24:7c:c2:15:98:d8:d1:50:fc:df:ad:fc:9c:a1:98:d1:9b:2d:
         7d:d1:99:0a:55:30:21:bc:b4:3e:6a:09:73:7d:5b:f4:5c:fe:
         39:97:3a:3c:d9:6c:4d:df:db:6c:bb:31:85:da:d4:31:36:52:
         a5:2c:92:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:30:34 2026 by rpki-client