Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eaccb886-48b5-3574-bc7a-5165e9a58e3a.roa
File:                     eaccb886-48b5-3574-bc7a-5165e9a58e3a.roa (raw, json)
Hash identifier:          EO79JhKa35sLcwmLo0UijJy53dCb6OH6dVOkK8Mm4MA=
Subject key identifier:   67:29:F9:A7:4F:82:D8:3F:26:D6:6F:9D:F5:CB:14:90:90:7B:1A:94
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D5CCA57F5C4C93EC35080
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eaccb886-48b5-3574-bc7a-5165e9a58e3a.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.50.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:5c:ca:57:f5:c4:c9:3e:c3:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=32de6bf3-6c41-4cb7-b686-c015396a5fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:e4:62:79:c2:97:20:72:e5:1f:c4:df:fc:
                    3b:0a:e5:57:df:90:76:b6:28:ca:1a:a9:32:74:b0:
                    ac:25:2e:78:6c:f0:af:f0:0a:de:76:55:e4:1c:2b:
                    e0:3f:7f:c1:10:6f:9e:b5:8d:22:60:c3:e8:65:92:
                    b5:2b:41:bf:9c:65:c6:5c:ec:a1:1b:62:ee:83:55:
                    89:28:01:72:1d:5c:b0:84:7d:e9:0a:74:c8:cb:95:
                    31:b2:86:be:3b:5d:11:03:c0:8d:78:9f:17:1d:f5:
                    0d:f7:81:bd:00:f1:58:eb:69:bf:70:67:fd:fa:43:
                    80:47:ae:80:55:08:26:3d:15:44:0b:37:3a:41:95:
                    7c:63:e8:fb:7d:d0:3f:70:37:3e:5b:2d:31:55:52:
                    31:62:86:9f:0c:9b:c0:6d:0d:29:e5:ab:50:ed:2d:
                    87:30:62:a1:9d:75:41:43:4f:06:67:74:62:7b:a6:
                    26:70:7e:df:85:b3:63:67:dd:d6:5c:39:30:fd:81:
                    ec:e4:04:fe:45:e9:89:0e:0d:df:4f:0b:72:0f:17:
                    f5:05:f8:48:7c:d4:2d:cc:ed:7b:f3:03:03:eb:19:
                    d0:98:1b:61:ac:34:02:12:aa:c8:cc:da:c1:58:50:
                    38:a4:d5:25:0d:a0:b6:bd:3d:48:8f:34:d6:7b:83:
                    ae:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:29:F9:A7:4F:82:D8:3F:26:D6:6F:9D:F5:CB:14:90:90:7B:1A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eaccb886-48b5-3574-bc7a-5165e9a58e3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.50.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:42:74:cb:66:cf:16:23:23:7d:39:8c:91:2b:02:18:c8:b9:
         4b:24:8a:1a:68:47:55:d3:9b:97:57:c9:65:b8:d6:24:54:d7:
         22:46:f7:54:18:06:b7:43:2a:46:e5:d7:21:06:ef:b9:71:e6:
         5c:06:68:3d:09:b4:94:1b:67:ac:e5:67:33:5f:ea:99:17:4c:
         0a:bf:b9:70:48:55:a5:a2:bd:5a:17:0c:c0:75:fa:63:bd:54:
         c1:03:1c:45:fc:71:b0:23:bf:91:c4:08:02:0f:be:aa:65:ab:
         f0:3f:ba:fa:7c:8e:1a:71:24:cd:35:aa:75:d5:3a:ea:15:20:
         e7:0e:d5:fd:34:9e:de:a5:1b:67:1a:3e:50:b3:09:29:d5:2c:
         52:fd:cf:bb:71:db:00:e1:b8:ec:d2:a0:23:dc:5e:60:1f:48:
         c2:d6:30:d4:d8:76:8c:09:b0:b4:95:0b:2f:2c:54:7c:45:3a:
         aa:3d:ca:02:62:01:ea:d2:8d:f9:1f:6e:9a:b8:8d:e7:07:24:
         4a:a7:23:20:87:55:a9:8c:6f:81:86:a3:97:cb:83:db:a9:4e:
         17:78:d2:37:78:55:ef:4f:45:cf:72:29:13:d6:5e:5c:a4:d8:
         1c:04:ff:c3:69:6c:c9:91:0b:57:16:a1:a1:08:53:de:0c:b7:
         5e:2b:7c:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVzKV/XEyT7DUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
MzJkZTZiZjMtNmM0MS00Y2I3LWI2ODYtYzAxNTM5NmE1ZmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnLkYnnClyBy5R/E3/w7CuVX35B2tijKGqky
dLCsJS54bPCv8AredlXkHCvgP3/BEG+etY0iYMPoZZK1K0G/nGXGXOyhG2Lug1WJ
KAFyHVywhH3pCnTIy5Uxsoa+O10RA8CNeJ8XHfUN94G9APFY62m/cGf9+kOAR66A
VQgmPRVECzc6QZV8Y+j7fdA/cDc+Wy0xVVIxYoafDJvAbQ0p5atQ7S2HMGKhnXVB
Q08GZ3Rie6YmcH7fhbNjZ93WXDkw/YHs5AT+RemJDg3fTwtyDxf1BfhIfNQtzO17
8wMD6xnQmBthrDQCEqrIzNrBWFA4pNUlDaC2vT1IjzTWe4Ou1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcp+adPgtg/JtZvnfXLFJCQexqUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZWFjY2I4ODYtNDhiNS0z
NTc0LWJjN2EtNTE2NWU5YTU4ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDKgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRCdMtmzxYjI305jJErAhjIuUskihpoR1XTm5dXyWW41iRU1yJG91QY
BrdDKkbl1yEG77lx5lwGaD0JtJQbZ6zlZzNf6pkXTAq/uXBIVaWivVoXDMB1+mO9
VMEDHEX8cbAjv5HECAIPvqplq/A/uvp8jhpxJM01qnXVOuoVIOcO1f00nt6lG2ca
PlCzCSnVLFL9z7tx2wDhuOzSoCPcXmAfSMLWMNTYdowJsLSVCy8sVHxFOqo9ygJi
AerSjfkfbpq4jecHJEqnIyCHVamMb4GGo5fLg9upThd40jd4Ve9PRc9yKRPWXlyk
2BwE/8NpbMmRC1cWoaEIU94Mt14rfMw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:37:56 2026 by rpki-client