Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c1226114-ac52-3467-82e8-02f6e8f05664.roa
File:                     c1226114-ac52-3467-82e8-02f6e8f05664.roa (raw, json)
Hash identifier:          wEVBNEMHBq1GNFfMEncq4VCppJO37pCp83777RUNGis=
Subject key identifier:   82:45:64:33:6A:01:6A:5E:A1:FF:33:9B:28:B3:5D:1A:59:98:6E:B7
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA79119F1BEB5C46D0D9A2700
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c1226114-ac52-3467-82e8-02f6e8f05664.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.37.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:19:f1:be:b5:c4:6d:0d:9a:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=97971371-2948-43bb-b55f-8913658d347b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:93:a7:18:c7:67:46:21:0c:c2:e3:ca:93:
                    25:14:01:0f:c9:fe:1c:4e:52:0a:3b:83:49:8e:78:
                    c3:0f:f6:1b:86:b6:b1:08:57:57:21:5f:99:fb:ad:
                    09:09:cd:9e:95:8a:5e:e2:00:87:b8:05:1b:86:26:
                    48:9a:54:31:1d:3b:bd:54:be:cd:57:77:7f:f6:0b:
                    cc:10:03:88:55:a6:89:18:4d:fc:d7:19:fd:1c:99:
                    a4:a0:75:95:43:e6:79:c6:cc:a7:1f:95:a6:3a:be:
                    0e:55:83:2d:43:d3:83:af:33:62:a3:e2:4d:69:99:
                    9a:2c:a0:5f:c8:b0:93:ee:65:67:4a:e1:70:cf:e6:
                    03:bb:aa:8c:d7:5d:12:b2:c8:fd:e6:2e:12:a5:b4:
                    6a:42:c9:21:bc:d9:86:3f:c7:1a:b9:dc:93:19:f6:
                    ed:91:6d:f2:a3:c8:08:39:95:a1:95:ed:9d:48:93:
                    64:ef:1c:7d:7b:11:6b:21:ac:24:0f:11:6b:b0:b8:
                    f5:14:b8:23:5f:c1:91:b6:fd:48:40:29:e6:82:cb:
                    ba:e7:5f:29:ca:e5:14:77:b8:b9:c9:c1:ae:1e:b0:
                    bc:b2:da:05:98:4e:df:11:4e:e1:ec:5d:24:3e:90:
                    3f:c1:8b:94:eb:68:4a:55:1c:dd:34:4e:3d:4e:d9:
                    1f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:45:64:33:6A:01:6A:5E:A1:FF:33:9B:28:B3:5D:1A:59:98:6E:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c1226114-ac52-3467-82e8-02f6e8f05664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.37.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:27:f5:fb:34:44:02:44:50:5a:94:1c:35:f5:61:2f:70:ce:
         d6:c4:76:33:43:31:c9:34:a1:f7:19:41:67:73:9d:00:bd:f4:
         0e:f9:b1:f2:8d:39:f6:fc:9e:b1:13:67:59:ac:6c:c7:2a:01:
         1f:a2:90:27:1d:50:39:c7:55:02:a9:94:49:ec:e7:92:b3:b2:
         e4:9f:a7:22:26:27:cd:ca:ac:5f:ee:a2:a3:bf:33:8a:5b:9a:
         8b:9d:0e:bb:27:8a:ed:0a:0e:e1:58:fa:bc:af:fc:93:c3:22:
         bd:b1:ea:14:8e:31:c3:3e:01:7c:61:eb:b4:fc:48:0d:70:0e:
         f5:aa:f1:63:39:14:f8:fa:40:61:e8:da:a1:f3:ef:7d:cc:16:
         35:8e:cd:72:4e:a2:39:39:a5:fe:ef:6f:cd:80:c7:9e:63:a6:
         30:56:28:0d:e5:66:ec:06:f2:8f:98:85:56:aa:70:ac:f7:db:
         a8:23:e3:3b:04:70:a4:72:94:82:34:33:b6:d0:6a:e4:f8:32:
         9f:5f:56:52:eb:35:20:f9:ec:7a:ca:ea:44:67:cd:11:92:4f:
         a7:76:a1:1f:c5:4d:67:a5:96:64:77:1b:0b:86:52:fc:4b:d4:
         1f:fb:fe:7d:f6:9e:e4:4d:b1:a2:8c:48:15:e0:e8:e4:1c:d4:
         99:bf:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:35:51 2026 by rpki-client