Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e154c747-9125-3a61-99c4-3be4782201e7.roa
File:                     e154c747-9125-3a61-99c4-3be4782201e7.roa (raw, json)
Hash identifier:          h93kfKg2H0EbynahcTPb4QCzDf2soFfvbj8NcZh2hS4=
Subject key identifier:   6C:88:F6:8C:38:33:DA:08:1E:5B:36:74:74:24:A9:65:79:1C:6E:5B
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA7907363D914C43533261760
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e154c747-9125-3a61-99c4-3be4782201e7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.51.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:73:63:d9:14:c4:35:33:26:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0da76b44-8087-4f67-bc12-f0b75071b45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:ae:92:40:96:5c:d2:5f:79:f7:d3:8a:90:
                    b6:64:c3:0e:22:4f:ca:87:64:95:83:e0:bb:e1:95:
                    57:b1:f7:bb:e0:5a:9a:85:91:de:3f:13:d3:40:0a:
                    ed:14:e3:58:6a:50:0e:63:e6:b1:d6:c7:10:b8:90:
                    0b:3f:60:7f:24:19:28:14:0b:09:8d:8b:92:5b:56:
                    5f:45:20:c5:27:85:a4:2d:81:1f:20:87:92:c9:83:
                    18:d0:7a:52:22:5b:fa:ed:7c:2f:1e:fe:df:18:89:
                    93:5b:15:bc:b3:71:38:b8:a1:5c:16:0e:f8:63:52:
                    de:7d:ae:19:f2:a6:b4:1a:04:5b:c1:5d:49:1c:0d:
                    25:b6:c4:9e:be:0a:5e:cd:ae:af:e5:5c:a1:5b:a3:
                    fa:d5:c4:b1:e7:c6:1f:f4:18:79:10:5b:a7:87:47:
                    4e:56:09:bb:c5:40:80:8f:1f:28:6c:be:2c:9b:01:
                    f8:a1:80:3e:43:0f:76:bf:44:ae:64:2f:81:7c:3c:
                    8e:0e:b0:aa:5b:cc:a0:ad:b8:d4:d2:0e:cd:1f:60:
                    c2:81:24:f8:6c:65:24:a8:94:72:15:75:05:a6:8a:
                    63:77:16:21:31:01:1a:16:ab:86:e6:8a:8c:42:55:
                    fa:64:e4:03:16:aa:28:10:93:f2:b3:57:cd:76:e0:
                    a2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:88:F6:8C:38:33:DA:08:1E:5B:36:74:74:24:A9:65:79:1C:6E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e154c747-9125-3a61-99c4-3be4782201e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.51.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:09:91:c2:4a:dd:5a:d1:23:ca:f4:e4:f8:d6:45:f5:8d:7b:
         e3:57:2b:dc:49:db:58:22:3c:08:9b:49:d5:af:71:b7:0a:4c:
         23:69:72:fb:6d:b3:bb:0e:68:07:78:93:a9:57:ce:9b:ea:d7:
         44:6b:35:b3:fa:0d:7a:03:3e:ad:a4:1c:1c:84:b0:2c:c7:d8:
         bf:0d:07:ce:a6:d7:9b:2a:2e:a6:a0:fe:02:c6:9d:5e:96:fb:
         ef:ba:3d:5f:12:f4:2d:21:9a:7c:82:0a:45:ba:cc:8f:ab:c5:
         3c:5e:41:67:1c:a4:0c:46:53:d6:4c:a6:91:dd:84:5a:7a:c1:
         fd:ef:61:74:9d:1e:5b:74:3b:15:9d:fa:ed:bb:bd:ea:39:1a:
         9a:91:9b:04:b3:94:2d:81:0a:f2:03:95:b7:8d:31:35:4e:d6:
         2e:66:b5:70:e6:ff:da:cd:d7:e7:04:f0:a6:85:9f:bc:56:10:
         0f:2d:f3:fe:b7:3c:d1:b2:07:b6:21:16:05:38:87:95:b1:54:
         6d:07:9f:5d:31:3d:cb:87:00:2a:7e:c9:81:83:ca:88:64:91:
         d0:e7:1b:76:48:bb:08:18:95:01:36:44:f9:98:d1:f1:ec:c4:
         f5:4e:78:94:b1:d3:b2:48:07:c3:2a:bb:8f:8e:a3:47:95:e7:
         83:80:2a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:32:51 2026 by rpki-client