Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c6274218-8329-3cd3-8939-6c250a64b22e.roa
File:                     c6274218-8329-3cd3-8939-6c250a64b22e.roa (raw, json)
Hash identifier:          MP1E1xb7ENxMLGX+nqM9UVkHt1DXLXYLbxRM6Tedywg=
Subject key identifier:   79:6F:D7:5E:40:63:04:11:36:2E:38:F2:4D:0C:D8:DD:CE:B8:14:04
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA790A1FAA6998739604DAE80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c6274218-8329-3cd3-8939-6c250a64b22e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.62.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:a1:fa:a6:99:87:39:60:4d:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=56255017-2066-4c86-9d13-4e369a244c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:77:0f:d0:2a:8b:8c:a2:6e:1c:7a:05:3e:
                    48:01:f3:b8:20:c2:7e:c3:2b:06:a7:dc:8a:54:2b:
                    3f:69:b7:7c:8f:bf:bf:af:d6:15:2a:96:d4:a6:c1:
                    93:7b:dc:0a:f2:3a:7d:03:8a:ad:e4:57:13:72:82:
                    e2:4c:4c:08:14:cc:e0:ec:1d:c4:31:df:f3:0a:36:
                    ed:d8:0b:ab:a7:7d:29:31:78:7e:13:dd:96:a5:6c:
                    fc:13:e1:46:0a:ee:73:a8:71:13:bb:e1:5e:a3:fe:
                    1a:45:66:4f:cc:61:ac:3e:ca:a6:06:a6:28:99:80:
                    81:cf:4a:f6:02:9e:d5:cc:dd:7b:91:35:07:55:b0:
                    7a:66:b5:8a:ff:db:ee:a7:0f:5d:31:26:34:23:2b:
                    52:a8:61:2f:9c:e3:ca:da:df:f3:d2:b9:11:34:a2:
                    05:01:77:fe:c3:39:5b:f5:bb:66:e1:5c:83:25:1f:
                    7d:00:85:c4:cc:ec:84:55:29:58:08:ee:e8:56:f0:
                    8e:86:aa:9c:9a:15:8e:13:52:92:cc:18:e2:49:71:
                    df:88:20:5f:c2:50:f8:de:62:86:ce:a2:d9:be:bc:
                    8e:ee:28:8c:24:c1:6d:c6:05:94:38:af:a9:2b:72:
                    57:50:2c:85:28:eb:b5:11:a2:6d:f3:45:c5:ca:37:
                    63:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6F:D7:5E:40:63:04:11:36:2E:38:F2:4D:0C:D8:DD:CE:B8:14:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c6274218-8329-3cd3-8939-6c250a64b22e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.62.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e7:8c:07:81:c3:14:c1:bf:4c:d5:c3:d7:7e:c4:ed:98:a6:
         31:1b:12:10:8a:c2:05:eb:ae:78:ff:87:24:e9:56:c1:69:6a:
         99:37:5d:4d:c0:48:2c:1e:81:53:d8:c3:ea:f1:b3:58:a0:2b:
         de:5e:c4:d0:22:fa:23:bf:b5:cd:0c:67:b5:3a:30:e6:64:ec:
         62:46:b4:22:fa:d0:37:88:ff:f3:11:95:f8:e9:18:82:5e:b4:
         57:7a:2d:46:18:13:85:4d:97:40:aa:ba:77:41:52:9e:c9:9d:
         91:b6:a7:4c:e4:ac:96:04:36:81:a8:ae:c2:2b:29:aa:69:81:
         f3:8f:4c:02:ee:0a:6f:eb:34:de:95:62:73:97:e6:9a:8e:31:
         ca:84:d9:d7:2b:0f:7f:af:33:66:9c:17:64:54:76:c8:07:4e:
         8e:ef:fe:80:25:0f:b8:26:44:8a:0d:7d:fd:72:7b:91:3b:f9:
         bc:c9:be:26:4a:21:00:b2:6d:47:62:b1:43:20:86:01:e3:71:
         fa:f9:1a:6e:8a:20:93:85:2e:67:98:62:89:7f:34:fc:83:b7:
         f0:61:c0:c2:14:06:a3:6c:43:0b:e9:b3:68:3a:58:6c:f3:28:
         53:fd:01:30:25:8d:9e:a9:67:58:cb:dc:14:0c:4a:17:ba:3d:
         58:bb:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:34:17 2026 by rpki-client