Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa
File:                     bbf034e3-220c-355c-83ad-7b03291b912c.roa (raw, json)
Hash identifier:          F5FBbf7C2V8jfLwr5pxlawpURe3MRZMFyZ5HZAF8Skw=
Subject key identifier:   C1:D2:74:05:EE:25:F8:1F:9D:40:8D:B0:5A:C5:24:F1:74:E7:B1:46
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D13CD31F9D1D1D9555680
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.36.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:13:cd:31:f9:d1:d1:d9:55:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=81271a97-c7de-484d-82b8-3baa31105e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:cd:ea:70:d3:d5:eb:d5:48:c6:29:33:bd:
                    84:9c:fc:c7:7f:5b:e5:90:06:f1:42:48:8a:89:53:
                    eb:e4:c3:c2:a5:75:af:aa:88:d5:fd:d6:68:0c:f8:
                    67:78:df:91:ea:09:a7:1c:0e:d2:25:60:00:4f:e0:
                    c9:45:73:9d:c6:18:86:ba:6e:96:55:6b:b1:7d:ef:
                    c9:10:9e:a5:4e:43:02:5d:4e:22:93:7a:b6:11:ec:
                    d9:15:22:8f:5a:c3:86:83:12:17:a9:a1:de:a3:81:
                    16:9c:ea:90:77:20:53:fe:e4:1f:f4:4b:87:d7:b3:
                    cb:fb:1c:85:1e:d3:d9:4b:6f:ca:ca:cf:50:6f:45:
                    74:de:91:0c:ae:fa:ff:8f:63:d4:8e:ee:78:99:30:
                    1a:35:50:54:32:3a:35:74:fd:b8:68:5f:bc:ae:42:
                    92:02:23:07:d6:e0:80:14:36:9a:9c:f5:71:1d:35:
                    2e:fc:6a:da:0a:6f:82:39:ec:7f:0e:e5:b8:0d:e4:
                    c4:a2:88:95:48:0d:2d:22:af:8c:88:72:e9:bc:12:
                    3c:81:ac:2c:ae:91:94:30:a7:bb:49:61:fd:48:34:
                    23:ce:fe:ff:2d:63:bc:8d:c0:ac:9e:43:ba:10:4a:
                    b2:5f:2b:05:d2:40:67:81:6d:b4:28:d2:77:f5:9b:
                    c1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D2:74:05:EE:25:F8:1F:9D:40:8D:B0:5A:C5:24:F1:74:E7:B1:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.36.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8f:4d:7d:85:67:38:26:f4:d5:e0:ee:56:bc:b8:a9:48:e4:
         f2:cf:af:30:b1:f7:be:9c:d5:5f:de:96:95:18:07:56:bb:13:
         a3:a2:dd:ad:b8:0b:9d:69:20:78:e1:1d:90:7d:2f:16:28:17:
         50:3f:c0:49:cc:43:30:4a:da:22:18:b8:2e:c0:af:09:59:0e:
         57:be:92:26:10:79:69:a9:a9:2b:b6:af:27:a0:c4:2d:73:cd:
         e6:74:09:1d:96:11:b0:0a:f2:7b:3b:e4:f9:5f:a7:5b:17:44:
         81:d2:c7:18:06:7e:55:3e:4b:8e:49:39:65:e5:eb:64:f5:c9:
         c9:db:06:ab:50:64:0e:d7:7f:8e:b3:39:eb:b8:2f:2a:fe:f0:
         e8:bd:a1:f4:be:2a:a9:52:6a:8c:d1:75:a5:3f:95:78:50:21:
         5f:68:9d:a0:6d:00:c5:14:1d:3a:2a:1d:28:f1:8f:d4:52:37:
         a3:84:18:1e:ab:a8:de:91:4e:d1:4c:c1:30:6b:8d:8a:07:4f:
         54:27:9d:d8:78:c8:05:12:00:b8:fc:ce:4a:b5:de:72:78:d3:
         30:e2:07:38:30:63:3f:c1:b5:99:ed:c3:b4:bb:b5:dc:36:06:
         f4:0c:78:d3:19:fc:c9:2d:70:7e:bf:ad:77:56:5b:ad:4f:41:
         d8:e0:bf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:46:46 2026 by rpki-client