Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9ee0e93f-8f9e-3874-bbe5-fd090dc8967c.roa
File:                     9ee0e93f-8f9e-3874-bbe5-fd090dc8967c.roa (raw, json)
Hash identifier:          4UqdoQh69zM3WQXUvFQXco3qwDkFpzuyDbnGbkCMQuY=
Subject key identifier:   3B:C8:1E:5B:9B:63:1B:B5:84:34:D5:DF:FB:C7:3C:1A:67:FF:A1:AC
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA7912CD28D5CB815C9B6E820
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9ee0e93f-8f9e-3874-bbe5-fd090dc8967c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.38.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:2c:d2:8d:5c:b8:15:c9:b6:e8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aead5af5-2ed0-4b6e-a5f1-3a8869837582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9b:ce:5e:f8:da:8a:49:7c:03:3d:16:0b:df:
                    bd:ef:0e:a2:00:89:73:3f:b2:de:fd:48:cf:87:7e:
                    89:73:a8:61:1a:65:51:59:ea:fe:6d:00:9f:ea:7b:
                    c0:ad:ba:79:da:6b:6c:b4:bb:55:6a:af:34:a2:82:
                    40:b6:94:0b:df:df:d5:5c:a6:5f:8c:40:d7:84:dc:
                    08:78:77:89:61:c4:4c:10:8a:e1:7a:c2:08:52:14:
                    a7:db:b4:e5:1d:e5:38:ae:68:7f:86:08:e6:d2:7d:
                    5a:47:ac:7d:24:7b:5d:1d:f3:bd:a4:3d:f9:35:a7:
                    ea:d1:b1:e2:eb:10:62:fe:d2:0a:4d:29:5f:43:28:
                    35:16:bc:b7:79:7e:38:31:e1:fd:67:8a:73:4a:ad:
                    95:0d:f2:85:73:98:56:dd:0f:b5:ba:96:d9:76:45:
                    23:e4:69:5f:9f:da:6d:b7:6e:57:ee:7b:01:3b:a6:
                    be:54:20:aa:7e:11:93:fe:ef:c4:7b:86:9c:b7:ed:
                    35:f0:b0:bf:09:03:6d:11:83:2e:1c:f7:12:9c:fb:
                    c9:ad:8d:17:59:05:f8:91:03:10:a3:65:d5:6e:b6:
                    fb:63:90:22:d8:6e:b0:9b:b4:ac:a9:64:81:5a:29:
                    d0:2e:77:3c:49:5f:34:e6:5a:db:ac:e9:ea:25:0b:
                    4a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C8:1E:5B:9B:63:1B:B5:84:34:D5:DF:FB:C7:3C:1A:67:FF:A1:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9ee0e93f-8f9e-3874-bbe5-fd090dc8967c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.38.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ba:1b:c3:7a:f8:1b:c7:aa:d8:b3:0d:32:8d:12:87:bf:d0:
         e1:f9:5e:58:3d:d4:86:96:26:71:85:d7:5b:66:8d:4c:7c:99:
         be:fd:65:ee:03:50:99:30:24:0e:e8:f3:90:e1:9c:b3:a1:a6:
         87:6f:66:6c:a6:ad:79:ed:0a:5f:80:0e:18:29:27:63:51:85:
         f3:10:88:3c:9d:01:cb:fc:81:93:4f:18:ef:ee:25:f8:de:3e:
         eb:d9:a8:1b:b6:7d:42:cb:0f:d8:81:43:19:bd:82:e5:80:90:
         f3:2d:46:27:7a:a2:d8:12:c1:01:01:be:f5:12:f2:89:05:1f:
         4e:41:9e:dc:68:35:0d:49:aa:70:45:b3:35:6a:19:f7:53:1e:
         8a:d3:3a:18:9f:b6:1d:eb:44:64:ea:4c:56:20:85:52:4f:d3:
         9a:e2:4a:e9:5f:81:bd:2a:7e:2c:c1:cf:84:01:04:3e:fd:5a:
         00:ec:d9:51:02:81:09:e7:a3:52:43:be:38:0f:72:c1:68:07:
         88:17:37:f8:63:8b:65:7a:6a:40:ed:72:3d:ba:ce:55:c2:84:
         5f:cf:e5:01:18:85:5e:67:59:9b:49:a3:78:44:5f:89:f6:39:
         17:9a:5a:b3:5f:83:bf:17:55:1b:37:0a:ea:f7:20:3d:cf:de:
         3d:8e:5c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:30:45 2026 by rpki-client