Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa
File:                     d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa (raw, json)
Hash identifier:          ZtseCKUsUZ3zK1UgRRI5Y8c6am9KK58mw7QGo9V+FCU=
Subject key identifier:   48:FF:44:1D:52:BF:8D:FE:CD:65:E1:AF:40:F6:E6:3E:17:8B:76:1B
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA79117366E22D6F750D8B940
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.62.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:17:36:6e:22:d6:f7:50:d8:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=71215eb7-c720-47a4-977b-ac37560ca7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c8:fb:93:01:98:60:bf:1c:a3:8e:cd:28:15:
                    85:64:45:69:c6:8c:04:c7:aa:c0:37:63:c8:07:ee:
                    c5:b4:6b:98:b8:d6:c3:24:53:7c:7b:bc:55:e4:69:
                    37:7a:51:64:a5:2e:fa:4b:8c:dd:83:7d:37:be:d5:
                    33:18:b7:34:c9:09:9d:96:70:97:b9:25:8e:2c:be:
                    73:70:7b:a8:01:26:ee:ca:9d:e0:70:7b:80:5c:9e:
                    86:7b:b2:5b:6c:7d:61:33:a1:b1:d6:2d:39:ce:d2:
                    d0:f4:1a:a7:67:bf:dd:17:69:7d:57:c5:2f:a6:ce:
                    23:50:17:fa:55:80:e1:7b:45:7b:da:6c:95:67:aa:
                    fb:41:8a:b1:13:96:86:f6:dc:ef:fd:c0:c1:8f:92:
                    14:03:b8:b3:75:3a:dd:bc:76:9d:a0:67:b7:ad:61:
                    1d:a6:44:af:e3:43:c8:9c:bf:e4:a9:d9:db:fb:da:
                    60:85:ed:b3:85:62:a3:dd:c1:55:07:59:6a:6b:cf:
                    b2:b2:5e:7b:59:cd:b3:8e:9f:b1:6b:f5:ca:58:ac:
                    ca:1c:29:e2:52:ad:21:1e:81:5f:a2:98:84:76:63:
                    03:b4:f5:7c:f4:0b:ac:31:03:c4:1f:bf:56:8c:bc:
                    08:70:69:e0:70:5e:38:ab:37:79:fe:e6:e4:e8:c5:
                    15:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FF:44:1D:52:BF:8D:FE:CD:65:E1:AF:40:F6:E6:3E:17:8B:76:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.62.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:9c:fc:87:61:eb:54:8a:7d:31:76:74:36:be:e1:fd:6c:de:
         c6:d5:4e:8a:dc:4b:83:54:89:84:56:03:22:ac:4a:91:a9:fa:
         6d:8c:e3:d7:b7:3e:b2:a3:08:81:7d:d9:95:e5:d2:f5:6c:36:
         5b:10:5e:81:f2:ce:d1:b2:18:24:c0:9a:ef:ac:e1:b3:23:7e:
         be:fd:5c:48:ed:b0:95:50:ec:de:02:48:94:8f:07:41:c7:a2:
         64:af:6b:89:40:f7:f2:a0:9b:22:7e:e9:00:43:0c:55:0d:4b:
         75:d1:a6:62:80:9e:7f:f1:d0:79:c8:b4:54:18:cc:86:d6:10:
         19:ca:a2:64:1b:54:9e:e3:fc:0d:5f:41:95:bf:b9:2b:e6:2d:
         fa:ac:fe:be:2a:ef:a6:69:98:d6:59:98:c1:38:e1:66:66:a0:
         3f:35:7e:e0:72:8d:a7:c4:c7:83:14:7d:9b:5d:38:46:6a:25:
         c3:48:c4:ec:0d:71:59:b6:9b:cd:bf:4e:b7:33:d9:cf:0f:8f:
         80:e2:42:c2:59:cc:41:d6:74:47:62:97:f4:77:50:57:17:57:
         d6:e0:89:80:5b:3a:b0:f5:6b:f5:35:d3:df:9b:c5:2d:a9:f9:
         f6:eb:31:8b:6c:9d:68:60:af:bf:8b:da:ad:e4:33:07:10:29:
         df:8f:6b:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkRc2biLW91DYuUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzEyMTVlYjctYzcyMC00N2E0LTk3N2ItYWMzNzU2MGNhN2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMj7kwGYYL8co47NKBWFZEVpxowEx6rAN2PI
B+7FtGuYuNbDJFN8e7xV5Gk3elFkpS76S4zdg303vtUzGLc0yQmdlnCXuSWOLL5z
cHuoASbuyp3gcHuAXJ6Ge7JbbH1hM6Gx1i05ztLQ9BqnZ7/dF2l9V8Uvps4jUBf6
VYDhe0V72myVZ6r7QYqxE5aG9tzv/cDBj5IUA7izdTrdvHadoGe3rWEdpkSv40PI
nL/kqdnb+9pghe2zhWKj3cFVB1lqa8+ysl57Wc2zjp+xa/XKWKzKHCniUq0hHoFf
opiEdmMDtPV89AusMQPEH79WjLwIcGngcF44qzd5/ubk6MUV5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEj/RB1Sv43+zWXhr0D25j4Xi3YbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDBhZDQ0Y2ItYWU1NS0z
NWYyLWJkOWEtNWYyNDkwMGVkYTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2c/Idh61SKfTF2dDa+4f1s3sbVTorcS4NUiYRWAyKsSpGp+m2M49e3
PrKjCIF92ZXl0vVsNlsQXoHyztGyGCTAmu+s4bMjfr79XEjtsJVQ7N4CSJSPB0HH
omSva4lA9/KgmyJ+6QBDDFUNS3XRpmKAnn/x0HnItFQYzIbWEBnKomQbVJ7j/A1f
QZW/uSvmLfqs/r4q76ZpmNZZmME44WZmoD81fuByjafEx4MUfZtdOEZqJcNIxOwN
cVm2m82/Trcz2c8Pj4DiQsJZzEHWdEdil/R3UFcXV9bgiYBbOrD1a/U109+bxS2p
+fbrMYtsnWhgr7+L2q3kMwcQKd+Pa8k=
-----END CERTIFICATE-----
Generated at Thu Jul 30 00:31:33 2026 by rpki-client