Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa
File:                     a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa (raw, json)
Hash identifier:          1LosEtzc8aPFY4q8iQYcf5Nd+fh1Gy2c8Gr4MSDkrkY=
Subject key identifier:   F2:FB:17:45:C1:5D:1A:B9:B8:66:FC:3A:2C:2C:13:27:E7:77:C1:7F
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D4F5C537448561F10B200
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.57.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:4f:5c:53:74:48:56:1f:10:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=b3f35022-c127-4cac-b432-eded175dd283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fa:62:ba:09:c1:e4:7c:26:3f:46:ad:c8:ff:
                    36:8d:0d:71:ac:a7:ad:38:86:77:c6:17:dc:55:b8:
                    f7:f8:92:ec:fc:36:bf:91:a9:9b:1c:cc:eb:fe:f6:
                    c0:80:c4:f8:eb:85:5e:8f:a8:90:d9:a6:b5:8b:e5:
                    e4:ca:9e:6e:83:39:cb:f8:ce:1e:0f:e9:2a:20:9f:
                    ee:f4:49:03:a3:71:1b:d2:42:24:a0:c0:58:2d:c2:
                    8a:0b:1e:45:7f:15:51:43:20:1a:14:7b:f2:11:ea:
                    b6:78:24:be:25:62:d3:03:c8:51:73:0c:f0:29:51:
                    eb:82:0c:bf:45:64:fe:ab:3f:9c:38:df:b1:a3:d9:
                    e7:33:80:b2:d6:9b:7a:b6:da:e8:35:3a:8c:fd:a9:
                    bc:b2:d6:8b:88:05:7a:d4:40:c6:7f:0e:9b:28:13:
                    29:fb:aa:77:99:8c:a6:2f:b5:50:ed:99:9d:67:42:
                    55:cb:39:64:cc:20:20:86:e8:07:4d:6b:e6:f5:2e:
                    e3:9c:5b:92:e2:52:22:78:a7:1e:41:50:f1:83:5c:
                    cd:5a:0a:b8:64:2c:aa:df:1f:01:d7:fd:f9:55:1c:
                    b0:41:e5:66:17:5f:ac:3b:39:92:72:76:7c:fb:34:
                    c9:32:22:1f:7a:07:9d:2e:e9:b9:06:31:3f:d0:37:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FB:17:45:C1:5D:1A:B9:B8:66:FC:3A:2C:2C:13:27:E7:77:C1:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d9:45:db:67:09:ca:36:43:14:cd:9e:98:e3:94:81:57:a4:
         70:6c:84:64:cf:59:1d:72:14:00:84:5f:49:61:15:19:43:36:
         15:55:99:f2:06:e9:b8:08:bc:57:e5:af:b4:52:ec:9f:cb:9e:
         ed:b2:04:cc:45:02:b1:c7:ad:d5:ce:2b:fb:bb:a6:50:b7:95:
         03:d8:e0:4a:71:bb:48:a8:88:ad:69:05:6a:af:62:00:7c:55:
         68:e4:e9:4c:df:69:7f:7c:79:53:80:1d:de:33:65:69:b1:ee:
         a5:bc:18:ab:42:0b:c2:90:68:61:b2:4c:91:01:99:1f:a1:6e:
         b1:14:6d:e2:62:a8:cb:40:e6:86:7e:04:3d:5d:6f:28:fc:4f:
         e8:aa:37:93:5c:ec:ae:62:37:d8:59:0a:3f:19:47:bc:f3:30:
         fd:25:ab:ca:1c:0a:21:37:bf:ee:71:8e:85:cd:8a:da:ff:3b:
         56:68:dd:9c:90:07:ae:f7:9c:ec:01:bb:e9:28:e8:ce:da:a1:
         f7:20:3d:99:56:d0:90:e9:86:5a:d7:c8:5e:9a:af:db:3c:82:
         13:3a:01:29:b5:9f:90:30:fe:8c:6d:05:04:79:ba:0e:9e:31:
         ba:f2:72:c8:99:20:d4:bc:9f:10:97:e5:36:a4:de:cc:99:b0:
         85:03:dc:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfU9cU3RIVh8QsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
YjNmMzUwMjItYzEyNy00Y2FjLWI0MzItZWRlZDE3NWRkMjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPpiugnB5HwmP0atyP82jQ1xrKetOIZ3xhfc
Vbj3+JLs/Da/kambHMzr/vbAgMT464Vej6iQ2aa1i+Xkyp5ugznL+M4eD+kqIJ/u
9EkDo3Eb0kIkoMBYLcKKCx5FfxVRQyAaFHvyEeq2eCS+JWLTA8hRcwzwKVHrggy/
RWT+qz+cON+xo9nnM4Cy1pt6ttroNTqM/am8staLiAV61EDGfw6bKBMp+6p3mYym
L7VQ7ZmdZ0JVyzlkzCAghugHTWvm9S7jnFuS4lIieKceQVDxg1zNWgq4ZCyq3x8B
1/35VRywQeVmF1+sOzmScnZ8+zTJMiIfegedLum5BjE/0DdD7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPL7F0XBXRq5uGb8OiwsEyfnd8F/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTIwOTFkYmUtMDQxMi0z
ZjFhLTk4OTgtZjhkOGRkMjM1ZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDmgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnZRdtnCco2QxTNnpjjlIFXpHBshGTPWR1yFACEX0lhFRlDNhVVmfIG
6bgIvFflr7RS7J/Lnu2yBMxFArHHrdXOK/u7plC3lQPY4Epxu0ioiK1pBWqvYgB8
VWjk6UzfaX98eVOAHd4zZWmx7qW8GKtCC8KQaGGyTJEBmR+hbrEUbeJiqMtA5oZ+
BD1dbyj8T+iqN5Nc7K5iN9hZCj8ZR7zzMP0lq8ocCiE3v+5xjoXNitr/O1Zo3ZyQ
B673nOwBu+ko6M7aofcgPZlW0JDphlrXyF6ar9s8ghM6ASm1n5Aw/oxtBQR5ug6e
MbrycsiZINS8nxCX5Tak3syZsIUD3Ds=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:32 2026 by rpki-client