Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b7425900-332d-3a03-9ce3-e45b79bee266.roa
File:                     b7425900-332d-3a03-9ce3-e45b79bee266.roa (raw, json)
Hash identifier:          ykckO+3ubbxvuM6KBTKHAv7y4lw1zSv2uayDm1WdrQw=
Subject key identifier:   6C:DE:02:37:7C:A4:9D:94:81:C0:51:B0:1D:B4:1E:B9:07:47:B6:33
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037CF8A65C64886E30E18AC0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b7425900-332d-3a03-9ce3-e45b79bee266.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.57.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7c:f8:a6:5c:64:88:6e:30:e1:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=686b1da9-718f-4d8b-bde8-16e6e5b5fd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:7b:02:3f:32:9e:50:45:2d:10:da:1b:d0:
                    59:b0:fb:33:16:ee:d9:40:9f:cb:28:06:6e:98:63:
                    e5:06:42:13:b6:3f:0b:2c:94:1a:fc:41:53:22:44:
                    f8:13:8a:0f:d1:40:75:ef:21:0d:7f:1e:13:4e:c6:
                    6d:fa:bd:53:ec:8f:be:e5:9c:e4:41:18:63:fb:dc:
                    cf:6e:06:ee:eb:a9:71:fa:38:e8:e6:26:d2:a4:f5:
                    22:3a:cc:cc:84:d0:4f:d6:0d:37:28:80:19:37:31:
                    9e:fd:40:d6:23:1c:fa:b5:60:b3:50:70:5e:92:fb:
                    48:c5:74:fd:b9:f2:b5:de:8a:11:d6:fd:d6:c5:bc:
                    9a:fd:f8:1b:36:62:cd:24:40:9b:05:e5:22:9b:e9:
                    c2:b5:ec:ba:3f:23:9d:fc:12:ee:8e:11:92:bf:d1:
                    17:9f:c6:75:b2:f4:11:d3:cb:72:50:8f:6e:28:7a:
                    c3:0e:e6:11:99:10:bc:7b:8c:fb:f4:e1:2e:5f:81:
                    15:0e:16:87:33:95:fc:f0:54:4d:4c:93:84:dc:bb:
                    c7:86:39:86:e3:93:9e:bf:d0:cf:45:75:be:6d:71:
                    5b:c6:0e:22:88:56:cf:20:6d:ab:ca:aa:58:0b:2e:
                    cb:cc:28:97:97:e3:b9:a4:32:a9:7c:80:bd:b2:98:
                    c7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DE:02:37:7C:A4:9D:94:81:C0:51:B0:1D:B4:1E:B9:07:47:B6:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b7425900-332d-3a03-9ce3-e45b79bee266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:80:02:f9:c0:b2:e9:c4:76:75:32:9e:b1:8f:f4:da:d4:9f:
         eb:08:7d:68:43:eb:99:39:f4:d8:c0:4f:8e:33:43:8b:8e:4a:
         5c:6e:52:cc:14:45:4a:4e:e0:30:8c:d2:6c:66:9e:a2:03:42:
         e7:ea:a6:5b:a9:90:1e:d9:fa:cc:19:ef:31:1c:c2:26:97:c8:
         97:56:87:61:e5:9e:df:17:b0:66:f9:56:fc:41:d6:22:12:56:
         a8:04:3f:bc:92:87:b4:68:bb:17:c9:84:0d:62:fa:46:d9:ff:
         8d:86:0d:41:a0:a2:d0:e0:f7:fd:94:d7:eb:22:d7:09:65:3a:
         82:32:46:f7:ee:7e:c2:53:7f:e6:05:98:91:a4:c3:9e:f6:73:
         be:59:58:ee:c5:9d:76:7f:e3:36:1a:89:b5:78:79:1a:2b:79:
         ae:69:f9:bf:f6:3c:b4:cb:82:21:f4:25:35:9d:d6:d6:25:43:
         f4:d9:a3:2a:6b:ac:e3:7c:cc:3d:c2:2a:28:a2:0c:41:02:73:
         6b:57:d0:eb:9a:c6:70:6c:ec:a9:6e:6f:be:a1:4b:e9:42:d9:
         08:29:f6:1c:18:52:d7:6f:d3:aa:d5:bb:12:a7:3d:d6:f4:1b:
         74:08:ef:c1:63:05:03:52:8f:df:85:64:3a:89:f7:04:24:08:
         84:0f:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:46:19 2026 by rpki-client