Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6da37e0-2997-3ea5-9b4c-ec60c0045ca9.roa
File:                     d6da37e0-2997-3ea5-9b4c-ec60c0045ca9.roa (raw, json)
Hash identifier:          CClIdoJ/sio60oaD/csRqGZw804CcoZfj6shNW55C64=
Subject key identifier:   EB:B1:72:B3:DD:6D:2F:DC:CC:87:50:79:8F:E9:A4:88:96:1C:93:55
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584CB121AB6C37990C641FF14800
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6da37e0-2997-3ea5-9b4c-ec60c0045ca9.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     16591
IP address blocks:        136.48.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:ab:6c:37:99:0c:64:1f:f1:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=dbe0989f-95f8-4506-bf1e-5cb7375f7e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1a:40:a9:da:f5:4b:ca:56:5b:19:41:56:fd:
                    1e:8c:82:3f:2e:dd:0b:b7:fd:8f:eb:60:07:71:63:
                    8c:d8:4b:23:b1:c8:31:d6:4d:00:d4:b3:d2:71:99:
                    03:0a:f2:f9:2b:b8:ca:c9:74:27:0a:e2:4d:c9:fb:
                    52:ef:aa:a4:78:b0:5c:bd:46:7e:60:86:d4:b5:15:
                    20:52:0e:fb:0e:96:de:8e:fb:37:b8:76:28:f3:a1:
                    f9:4d:c2:2c:4b:00:cf:11:b0:2b:ae:2e:98:64:bd:
                    57:c6:23:a6:2c:44:81:08:5a:1f:9b:8b:ab:66:0f:
                    77:ee:73:e7:77:36:d5:8b:2e:19:72:88:cf:fb:b4:
                    0a:6a:c3:e1:35:84:97:89:58:6c:fe:19:c0:31:6b:
                    7e:7e:6a:27:b7:47:52:43:fe:eb:ac:d6:84:7c:c0:
                    f2:cc:52:3d:0e:e8:fb:24:c7:b2:b8:56:a8:42:fe:
                    1e:b2:52:4e:f7:e1:82:08:bd:8d:cd:b7:ef:b8:0f:
                    43:49:ec:ae:26:62:60:ee:e2:90:48:7a:8a:d8:b7:
                    09:c4:dc:d5:82:0e:35:21:9a:91:b1:b9:cb:9b:40:
                    46:e0:83:14:cc:c4:91:ad:6e:a1:3b:ff:d8:6a:7a:
                    71:81:39:a9:b4:14:9f:4c:dc:04:3b:12:d8:96:67:
                    1b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B1:72:B3:DD:6D:2F:DC:CC:87:50:79:8F:E9:A4:88:96:1C:93:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6da37e0-2997-3ea5-9b4c-ec60c0045ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.48.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:88:50:b5:45:11:2e:b9:57:49:a9:64:35:f2:20:32:f0:d2:
         8b:38:65:d3:44:c3:75:32:db:de:29:34:ff:b4:ab:d0:ba:6f:
         37:64:7d:de:d1:e5:05:61:bc:fd:f9:81:33:14:2d:cc:b9:09:
         72:ed:f5:7e:fe:47:af:e8:b0:d6:dc:d7:21:36:53:da:a3:0e:
         9c:c6:0d:e9:65:33:28:d5:3a:57:f8:ed:42:c0:58:db:3c:a2:
         54:b3:fc:5b:6b:9b:6a:62:8d:e1:da:e3:27:c5:14:b3:01:c9:
         7f:8f:d1:b3:09:9b:e0:f9:80:7a:bd:63:98:7d:9f:9a:34:d2:
         c6:6e:4a:ec:e4:9a:d0:2f:cf:d0:d9:d2:7e:2d:cb:97:79:96:
         28:87:bd:0f:12:8c:d1:3d:82:05:90:ff:95:71:9a:5c:14:2f:
         3d:a0:88:f3:43:af:24:ee:85:ce:ab:8c:d6:32:45:cd:09:41:
         31:0b:50:27:87:4f:5b:d9:f0:bc:a1:23:cf:b1:e5:4f:d3:a1:
         42:7a:48:f4:f2:fd:6e:f6:1f:76:fc:e9:a3:e4:a6:3f:dc:33:
         6a:7d:d9:48:5f:8d:7e:7a:12:39:62:35:a1:fd:6d:2d:74:22:
         e4:4f:24:8a:1b:cf:d7:57:ff:0e:f3:21:bd:a0:32:4f:83:99:
         24:95:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:45 2026 by rpki-client