Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa
File:                     cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa (raw, json)
Hash identifier:          S8wjuOm9Gix1BU2mZx/fDsHqKNhEHhGwWGq7zd616So=
Subject key identifier:   02:2B:0C:88:D2:AE:D8:F7:57:6F:4F:23:30:47:9D:A5:75:6D:FF:64
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D51B8BCFF2E8C08D09600
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.49.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:51:b8:bc:ff:2e:8c:08:d0:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=9a359b28-c5b2-4ae0-9dd8-adfe9af453f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:80:ef:25:18:89:fd:31:87:d7:3d:f7:b8:
                    98:05:72:26:4a:10:73:99:80:56:54:b5:8a:8d:b2:
                    a5:f0:da:d7:0f:a0:24:01:5b:e7:51:43:73:7c:3c:
                    ba:c4:e6:2b:8a:6d:51:8d:8c:1d:c8:7a:3e:3d:dd:
                    9a:7f:57:d0:ad:ff:34:70:53:7f:79:75:58:e8:1f:
                    87:5e:1e:25:fd:b4:30:0a:82:49:af:d0:af:53:fc:
                    a2:b3:e9:47:82:fb:d1:f5:11:5f:87:2b:ff:b9:47:
                    66:6f:90:8d:85:14:d8:fc:e9:35:ad:c6:3a:4d:84:
                    34:08:be:ba:c6:20:0b:0b:84:bd:51:ab:e6:34:33:
                    79:6c:c3:89:73:2e:d4:55:f6:5f:d4:44:f0:3b:fe:
                    09:59:f4:e0:a7:90:8b:d1:fc:8a:c1:af:56:a9:56:
                    63:1f:c4:7c:e1:c6:c3:c9:ab:84:0c:93:b4:85:9e:
                    c1:fb:b7:f3:1e:58:39:a6:77:0d:c5:7b:17:4e:9f:
                    63:66:2e:1e:73:f4:d4:a4:68:c8:86:81:b5:3f:b5:
                    31:8f:cb:e4:60:b8:68:0d:aa:c8:6a:40:ff:63:9b:
                    c2:f7:d0:1f:54:ff:ab:6a:1d:ca:68:fe:ce:b7:90:
                    06:07:56:e6:e1:83:a8:8a:a7:9e:65:d4:4e:0b:fe:
                    9a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2B:0C:88:D2:AE:D8:F7:57:6F:4F:23:30:47:9D:A5:75:6D:FF:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.49.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:35:4a:d9:2c:64:f9:98:23:12:4e:13:33:71:dc:e3:20:2c:
         d1:66:b4:fe:c2:ed:fb:68:bf:d9:a8:dc:cb:93:08:2b:8f:02:
         c0:af:40:0f:d4:6a:d5:ff:0d:8e:99:08:e5:b1:d9:25:c2:96:
         6c:75:44:0e:36:da:8c:46:a0:3b:39:c2:a1:2a:d8:03:de:6b:
         52:cf:e1:01:f2:61:b5:9d:79:ee:df:84:be:3f:7b:45:b5:f6:
         c1:ed:05:8a:c5:fd:4d:ac:33:50:26:0b:5e:fb:36:77:00:e4:
         4a:2b:6e:09:60:ad:43:25:5e:25:b0:78:b2:99:4a:b5:32:bb:
         96:64:3d:a8:1c:a8:b1:2c:38:03:b9:f4:29:65:c8:de:ab:15:
         73:19:09:d0:c7:7d:07:68:a9:ac:8a:fc:62:a2:ea:81:49:4d:
         c8:f3:30:5a:9e:b3:c4:5f:99:49:e4:63:6e:4d:bf:50:24:bb:
         dd:1a:59:74:8b:98:f0:ba:84:1d:0a:d0:80:a6:ce:bb:81:7e:
         ae:d3:fc:92:e9:a3:5c:18:c7:5d:a9:99:33:ab:41:bc:55:69:
         4b:3e:34:b2:36:04:34:75:53:a4:2d:18:97:43:65:7d:39:d0:
         6d:ae:98:eb:81:cb:66:c0:03:5b:f5:52:f9:e6:ec:e7:24:18:
         fd:41:26:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVG4vP8ujAjQlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
OWEzNTliMjgtYzViMi00YWUwLTlkZDgtYWRmZTlhZjQ1M2Y3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+yA7yUYif0xh9c997iYBXImShBzmYBWVLWK
jbKl8NrXD6AkAVvnUUNzfDy6xOYrim1RjYwdyHo+Pd2af1fQrf80cFN/eXVY6B+H
Xh4l/bQwCoJJr9CvU/yis+lHgvvR9RFfhyv/uUdmb5CNhRTY/Ok1rcY6TYQ0CL66
xiALC4S9UavmNDN5bMOJcy7UVfZf1ETwO/4JWfTgp5CL0fyKwa9WqVZjH8R84cbD
yauEDJO0hZ7B+7fzHlg5pncNxXsXTp9jZi4ec/TUpGjIhoG1P7Uxj8vkYLhoDarI
akD/Y5vC99AfVP+rah3KaP7Ot5AGB1bm4YOoiqeeZdROC/6aLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAIrDIjSrtj3V29PIzBHnaV1bf9kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2Y1ZmI2MGQtMmY2Yy0z
ZWRkLWI1YmYtMzc5MmIwZTRlNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDFgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEk1StksZPmYIxJOEzNx3OMgLNFmtP7C7ftov9mo3MuTCCuPAsCvQA/U
atX/DY6ZCOWx2SXClmx1RA422oxGoDs5wqEq2APea1LP4QHyYbWdee7fhL4/e0W1
9sHtBYrF/U2sM1AmC177NncA5EorbglgrUMlXiWweLKZSrUyu5ZkPagcqLEsOAO5
9CllyN6rFXMZCdDHfQdoqayK/GKi6oFJTcjzMFqes8RfmUnkY25Nv1Aku90aWXSL
mPC6hB0K0ICmzruBfq7T/JLpo1wYx12pmTOrQbxVaUs+NLI2BDR1U6QtGJdDZX05
0G2umOuBy2bAA1v1Uvnm7OckGP1BJgo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:26 2026 by rpki-client