Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a6bed749-eb09-31b9-8a54-181cd3e43899.roa
File:                     a6bed749-eb09-31b9-8a54-181cd3e43899.roa (raw, json)
Hash identifier:          QtaaWRximgJj2D5xXu7gaFo77/tkyUQY9xjHm11vNUg=
Subject key identifier:   16:D9:7E:80:15:C6:AE:42:58:DD:D3:75:CE:1E:A4:51:4C:3F:DA:10
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037CFCA7FC90CDB750D633A0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a6bed749-eb09-31b9-8a54-181cd3e43899.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.60.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7c:fc:a7:fc:90:cd:b7:50:d6:33:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=4d87cd57-2d5b-4aca-b943-bd1ab32e3dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e8:26:ce:c3:6e:2d:8e:80:c1:11:56:9f:80:
                    e0:57:aa:25:77:fc:e7:00:d5:fd:54:ad:c7:a6:10:
                    d4:20:78:77:c8:d4:5c:3b:1a:00:eb:21:45:b7:b0:
                    ab:74:ce:53:71:7c:06:a4:0c:79:1c:2c:60:99:74:
                    c1:f8:6b:37:58:9e:e2:0a:e5:c7:71:3f:0a:57:02:
                    b3:15:c6:f2:7a:7b:49:01:6c:4a:62:e9:66:b4:4e:
                    8d:85:bf:64:1e:c9:5c:b2:19:c8:50:21:f0:a6:71:
                    10:90:ad:00:ac:e4:11:fa:37:ea:32:a4:48:b1:f8:
                    25:0f:97:ca:d8:16:4f:27:a0:0f:6b:f0:b6:d2:85:
                    26:98:07:2b:06:97:cb:16:a5:5c:24:c2:57:5d:78:
                    29:ff:49:39:c6:b3:63:1f:36:de:e4:34:e9:58:bc:
                    f8:e9:48:6e:27:87:0a:5f:6d:27:0f:69:a8:6f:d2:
                    a7:73:8c:40:40:49:68:5e:24:34:2e:68:4e:5e:03:
                    7b:85:99:0b:9c:6b:8d:99:da:a4:49:53:cf:30:e9:
                    b3:90:09:15:16:cd:20:d2:32:21:88:90:d5:60:78:
                    48:e1:1e:fd:40:fe:8b:33:bb:e0:2f:d1:92:35:7b:
                    61:65:95:03:55:4d:3c:6f:6b:c9:03:90:3e:be:47:
                    48:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D9:7E:80:15:C6:AE:42:58:DD:D3:75:CE:1E:A4:51:4C:3F:DA:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a6bed749-eb09-31b9-8a54-181cd3e43899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.60.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e8:87:c5:d0:e5:03:77:6b:33:70:70:f8:85:71:bd:30:3c:
         74:c4:81:00:4b:8a:6f:c6:7b:33:d6:4f:8d:91:4d:ea:fc:ff:
         08:11:c3:7f:2a:c5:68:f9:3a:33:dd:67:fa:0d:26:66:bc:51:
         95:fa:cd:a9:3e:33:5d:f8:b1:24:da:12:d5:1e:5a:76:24:fa:
         a5:c1:f8:54:07:ae:c2:2a:94:f5:34:18:bf:09:69:54:81:61:
         da:58:93:18:f5:18:8f:e8:21:fc:86:0b:49:dc:8a:fb:2e:be:
         69:17:f3:dd:74:f7:51:5b:49:91:52:5f:5f:f0:f1:a7:4e:39:
         39:1c:d4:65:b4:9f:44:c9:36:bb:7b:a3:5c:36:98:be:dd:60:
         0b:79:43:9f:98:77:64:88:7c:97:1d:7f:08:23:e6:e4:a0:1c:
         ae:fc:fc:03:96:70:bd:7b:84:b4:a5:9e:bc:08:2d:58:3e:3a:
         27:74:b1:b2:6c:c2:e4:97:2b:81:27:19:73:a7:5d:13:d4:74:
         01:5d:19:d6:9e:76:b2:2c:18:b3:16:9a:61:3f:fa:38:48:e6:
         59:f0:5f:84:e6:e1:b4:c1:5c:6d:25:2d:1d:61:98:22:db:98:
         0a:a2:6d:04:c3:28:f1:ce:18:fe:55:68:bf:26:1d:6d:37:6a:
         04:f5:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:07 2026 by rpki-client