Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a51b75c5-1781-3044-acee-beb447fdab53.roa
File:                     a51b75c5-1781-3044-acee-beb447fdab53.roa (raw, json)
Hash identifier:          /rk/HmNRFxvZjsrFL1Oeea0vxVk/2YpP+0lAe9mc/rU=
Subject key identifier:   52:0B:02:82:A0:AF:33:A4:A1:D0:59:17:E2:F8:37:4B:B9:B3:DC:79
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA79071D085FBC670D1AFD180
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a51b75c5-1781-3044-acee-beb447fdab53.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.33.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:71:d0:85:fb:c6:70:d1:af:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c336cf02-9120-493f-bb3b-0646dd91d3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:09:ad:30:68:3e:b6:17:d8:9c:5f:3b:93:11:
                    93:a7:7c:ca:b2:28:cc:cd:9f:ae:5a:ae:5b:27:ee:
                    f6:84:94:96:7d:45:34:8c:54:00:b2:b1:1f:6b:3e:
                    29:34:91:76:a7:cd:14:81:68:a1:92:96:61:d8:b4:
                    81:bc:64:62:1b:92:ae:2f:63:1c:ed:ae:10:74:30:
                    91:4f:20:56:23:bc:e8:ea:cf:1b:7f:b9:82:f5:d7:
                    c8:38:7e:80:2e:57:88:75:2a:fc:24:88:c9:a2:bf:
                    a4:c3:5b:97:bf:3a:79:24:b3:cb:ca:c3:92:92:13:
                    4e:ea:20:67:d0:aa:d0:c9:9c:87:1e:ee:e8:85:83:
                    97:5d:ee:2c:96:32:72:4a:6c:62:e0:cb:f8:6d:eb:
                    68:33:dd:31:4c:e7:07:35:32:f8:a3:d6:e5:2a:ab:
                    37:aa:d0:29:ef:8f:22:82:e1:04:62:40:50:7f:00:
                    8b:8e:9c:fd:07:de:60:a9:bd:b7:07:70:4b:9b:80:
                    5d:ae:a0:c8:56:46:6b:53:c9:c6:82:a3:1b:f0:be:
                    72:4c:9a:d0:e0:d7:f5:5a:95:26:82:3c:a5:58:16:
                    f6:3b:c1:18:90:7d:8c:f9:bf:27:d3:b7:4e:9e:ce:
                    67:1e:8f:bf:c4:98:19:ee:20:39:57:1d:ca:62:e1:
                    48:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0B:02:82:A0:AF:33:A4:A1:D0:59:17:E2:F8:37:4B:B9:B3:DC:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a51b75c5-1781-3044-acee-beb447fdab53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.33.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:95:11:28:6e:94:50:4c:bf:75:03:6c:44:be:b7:e1:13:59:
         be:85:8d:bf:64:62:be:38:0c:05:21:ed:d4:3c:d2:38:be:44:
         37:4e:cb:7c:a0:fb:6a:b0:9c:12:64:58:c7:ba:95:ea:42:3c:
         f4:aa:01:b1:21:5d:29:64:56:bb:96:c8:34:a3:97:f0:d5:f0:
         24:0a:09:cf:4f:ec:1d:3e:d9:13:10:c6:ff:fd:38:a0:3a:37:
         72:e5:31:f3:3f:bb:2c:a4:9a:75:31:14:00:a6:63:9f:44:de:
         e4:2e:be:1e:8e:41:ea:f9:88:3d:72:39:80:1d:ec:fb:6e:d3:
         02:db:58:1f:2c:f9:5d:de:cc:1f:9c:9c:47:9d:5a:bd:e1:e7:
         e4:4e:21:a3:e2:6f:a7:b3:ab:f6:d1:7e:54:13:9e:49:80:d9:
         d9:e2:67:22:ba:78:04:cb:a7:4e:95:bb:e8:16:e4:41:bc:a5:
         dd:54:24:48:b8:8c:f2:c7:e1:ac:c5:85:a6:6b:c9:a1:39:be:
         6f:b0:12:89:b4:80:86:7f:c1:3a:97:c1:2a:38:d2:6f:84:c7:
         b0:34:14:5a:62:92:d5:89:d2:18:f6:b3:4c:a3:44:b9:d7:74:
         3e:34:0c:c5:16:45:5b:1a:63:19:52:60:83:21:e6:87:a8:03:
         c6:07:3a:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkHHQhfvGcNGv0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YzMzNmNmMDItOTEyMC00OTNmLWJiM2ItMDY0NmRkOTFkM2M0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QmtMGg+thfYnF87kxGTp3zKsijMzZ+uWq5b
J+72hJSWfUU0jFQAsrEfaz4pNJF2p80UgWihkpZh2LSBvGRiG5KuL2Mc7a4QdDCR
TyBWI7zo6s8bf7mC9dfIOH6ALleIdSr8JIjJor+kw1uXvzp5JLPLysOSkhNO6iBn
0KrQyZyHHu7ohYOXXe4sljJySmxi4Mv4betoM90xTOcHNTL4o9blKqs3qtAp748i
guEEYkBQfwCLjpz9B95gqb23B3BLm4BdrqDIVkZrU8nGgqMb8L5yTJrQ4Nf1WpUm
gjylWBb2O8EYkH2M+b8n07dOns5nHo+/xJgZ7iA5Vx3KYuFIEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFILAoKgrzOkodBZF+L4N0u5s9x5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTUxYjc1YzUtMTc4MS0z
MDQ0LWFjZWUtYmViNDQ3ZmRhYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCEwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqVEShulFBMv3UDbES+t+ETWb6Fjb9kYr44DAUh7dQ80ji+RDdOy3yg
+2qwnBJkWMe6lepCPPSqAbEhXSlkVruWyDSjl/DV8CQKCc9P7B0+2RMQxv/9OKA6
N3LlMfM/uyykmnUxFACmY59E3uQuvh6OQer5iD1yOYAd7Ptu0wLbWB8s+V3ezB+c
nEedWr3h5+ROIaPib6ezq/bRflQTnkmA2dniZyK6eATLp06Vu+gW5EG8pd1UJEi4
jPLH4azFhaZryaE5vm+wEom0gIZ/wTqXwSo40m+Ex7A0FFpiktWJ0hj2s0yjRLnX
dD40DMUWRVsaYxlSYIMh5oeoA8YHOi4=
-----END CERTIFICATE-----
Generated at Thu Jul 30 00:34:06 2026 by rpki-client