Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa
File:                     b968a0f5-a9a4-37a1-ae22-297830d659f3.roa (raw, json)
Hash identifier:          mWufKC4Y2hbwH3i7+oTyWvTdmp6WEuLAKcJQrdd8/84=
Subject key identifier:   47:96:6D:F4:F3:09:64:E4:2D:2B:77:36:00:60:53:07:86:07:D3:F6
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA79132F598787589D6272A80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.56.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:32:f5:98:78:75:89:d6:27:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=65ac7ccd-a109-4bad-bec1-e1a5d9352975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e2:c2:c2:9b:2f:ec:4a:60:33:c0:0c:a4:7e:
                    47:aa:6b:07:bc:08:9e:ea:e3:24:4d:e8:7c:ea:26:
                    b9:89:89:46:00:01:e9:15:c6:c3:b4:6a:e0:ad:aa:
                    e0:b5:f9:d2:51:56:c1:f0:37:cc:23:4c:97:18:49:
                    fd:38:34:d5:c8:1e:55:ad:fb:f4:79:3a:a3:b0:b8:
                    51:07:84:ce:c8:b4:d5:1a:39:48:0e:a5:42:ef:37:
                    d0:df:70:65:58:41:8d:d6:b4:0b:a1:d1:f1:fd:34:
                    39:ce:10:fe:1a:b6:c2:57:c3:b2:65:e2:cf:43:ff:
                    30:0b:6a:9a:28:1f:83:fd:45:09:15:26:b7:cb:6c:
                    a7:1d:45:b8:5a:b1:78:15:86:09:eb:fb:6a:ee:3c:
                    2c:e0:e8:a3:e8:d5:7a:46:a8:eb:0a:88:71:eb:7b:
                    39:99:fb:ee:74:8f:6c:4c:9c:ab:7a:b9:5f:4a:07:
                    9e:06:27:17:81:dc:19:8a:8f:c0:2c:d1:ce:9d:11:
                    35:8f:71:c7:3b:c3:29:81:f9:0a:d9:79:14:92:50:
                    18:88:db:ce:8c:96:1f:26:e0:75:ba:8c:96:ff:c7:
                    79:46:6b:89:36:d7:73:c8:5a:bd:b2:2d:47:f4:f5:
                    9e:05:4a:e6:be:e2:f2:df:04:e5:17:c9:9e:d1:cf:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:96:6D:F4:F3:09:64:E4:2D:2B:77:36:00:60:53:07:86:07:D3:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.56.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ea:dc:08:dd:22:d8:5c:81:e1:10:e6:1a:e4:84:07:d5:31:
         f3:db:ef:55:15:78:dc:7f:13:cd:b8:d3:74:58:7e:6c:e6:92:
         4d:bb:4c:73:c4:92:51:ca:70:36:34:9f:7f:e9:62:20:3d:2b:
         03:0b:77:38:ab:20:c8:8b:e0:ac:eb:40:e8:53:05:4f:48:98:
         c6:78:39:58:dc:04:91:2f:94:b4:b7:cc:54:2d:ab:fb:de:7e:
         a7:e2:d6:58:c9:08:13:61:7e:12:f5:34:77:40:71:c4:26:01:
         8b:f3:5d:9c:4a:c8:8f:10:67:bd:3c:10:be:99:53:c6:e7:1d:
         27:a4:5e:73:ab:95:76:ca:e0:c6:c7:29:33:8b:92:de:0d:2b:
         23:98:4b:0f:bb:87:9e:17:08:7c:d2:6a:3d:69:19:9c:af:5e:
         ca:ed:e4:5f:38:37:b7:5c:a6:3f:6c:7d:8b:38:b4:97:14:21:
         9e:b9:d0:2c:01:5b:25:17:f8:c8:fa:1a:78:a7:bf:75:af:48:
         c8:76:3e:63:93:ec:7b:84:e6:9f:a2:66:4f:a5:76:57:f4:90:
         7e:3b:86:e0:5b:ea:8a:e9:00:ed:51:29:e9:c5:92:46:d3:2c:
         d5:30:84:c6:81:0d:d4:da:d7:6b:bf:0d:e2:47:24:97:35:13:
         6b:4e:f4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:31:50 2026 by rpki-client