Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cbb58716-62dd-3fd0-86b5-7080a91f9ee8.roa
File:                     cbb58716-62dd-3fd0-86b5-7080a91f9ee8.roa (raw, json)
Hash identifier:          gHp/2K/AQMgEhi0USzvha/sJa0QNMaOnKRLk3sVuPK4=
Subject key identifier:   6A:C0:6B:1D:23:7A:B8:67:9F:D5:3D:F9:B5:91:D2:F8:66:A2:16:89
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037CFCCF973BE6ACE91F0C80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cbb58716-62dd-3fd0-86b5-7080a91f9ee8.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.36.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7c:fc:cf:97:3b:e6:ac:e9:1f:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=d0de67be-791d-4201-bec7-01c056de4764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:43:c4:0e:4b:7f:d4:c7:01:2e:da:ab:10:
                    8a:e1:fd:f0:e9:4e:b7:89:d1:f0:0d:f8:df:f5:0a:
                    06:52:3c:e1:a9:22:21:73:d0:51:9a:43:32:3c:6d:
                    e3:2c:ff:af:f8:c9:b5:dc:91:21:e3:53:90:94:7e:
                    6a:99:75:df:f6:ea:74:9b:81:e4:30:7e:07:0a:1b:
                    09:95:f6:29:41:65:92:01:a4:76:18:48:29:a0:04:
                    9f:d7:6f:b6:76:e8:5e:8c:06:49:0e:b6:5e:dc:58:
                    9b:85:25:9b:8e:e7:e0:a9:a9:73:c4:f2:19:dd:34:
                    c4:f7:08:a3:b1:8b:0e:35:70:0f:d4:02:a5:89:e7:
                    4d:d8:d1:7c:44:f3:1a:ab:3c:40:3d:b9:6e:fd:63:
                    ec:94:06:9e:ca:ad:aa:90:75:ac:75:b6:de:b6:03:
                    1c:ec:3d:07:52:d7:2e:55:25:3a:b6:43:50:47:fc:
                    38:8e:98:b5:89:57:34:06:5d:61:c3:58:03:7d:50:
                    f5:12:97:7e:74:60:c1:8e:5d:98:7c:7e:ed:d0:fb:
                    54:31:69:3c:fa:13:dc:c0:9a:bf:1f:c9:a9:73:bd:
                    fc:65:b8:59:87:9a:75:c2:37:f5:bc:25:25:1f:1c:
                    1c:3c:f1:d4:97:6a:d0:dc:fd:8b:4c:1e:60:c9:46:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C0:6B:1D:23:7A:B8:67:9F:D5:3D:F9:B5:91:D2:F8:66:A2:16:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cbb58716-62dd-3fd0-86b5-7080a91f9ee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.36.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:54:6d:2d:1d:50:e4:38:c1:61:e1:26:ed:3c:ab:94:a3:c6:
         7b:6a:88:bc:ef:63:59:ee:0d:93:61:63:6c:24:53:c1:e9:27:
         45:79:92:ea:1b:19:8c:cf:d5:46:1b:27:39:22:40:74:31:d3:
         1d:e7:e5:5f:97:21:4b:a5:76:88:48:fe:a8:1d:71:d3:7f:a4:
         53:e5:8b:8d:a1:f4:eb:74:00:b8:05:07:b6:27:1e:2b:2d:b7:
         92:35:0c:11:36:bb:b9:d9:5f:29:fd:6a:52:29:32:bc:47:9f:
         11:8d:a5:36:ca:e6:f2:e7:83:1d:6a:d2:19:c6:16:95:c7:88:
         7a:d5:7a:e8:31:2e:73:8f:6d:46:87:47:4f:62:5c:37:f0:a6:
         d0:f6:3c:0c:99:6d:83:c0:cf:00:bd:be:d9:ab:1d:42:77:0f:
         e4:f6:6f:27:7a:a5:e0:81:7e:03:61:2a:35:bd:16:d1:ab:ee:
         50:be:69:49:d3:55:2f:a8:57:1d:47:14:d2:5e:4d:d2:55:13:
         a2:2a:1e:f7:1d:98:29:20:b8:da:c0:f2:72:d2:e6:77:c8:41:
         e6:98:cb:85:92:3e:0a:2d:1d:8e:22:a0:4d:f1:4e:31:ef:08:
         1a:f1:5c:94:40:ab:bd:31:6f:2a:01:76:b0:4a:e3:20:03:63:
         6e:36:9a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:38:10 2026 by rpki-client