Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ee9adef9-382f-3ef3-afd2-0352faa51252.roa
File:                     ee9adef9-382f-3ef3-afd2-0352faa51252.roa (raw, json)
Hash identifier:          loDuxb+FX3WMpGN8xmaFIxI8quoaui7apUvpbYhKJDw=
Subject key identifier:   78:2D:3E:35:D5:9C:31:85:5C:FC:FB:39:F0:2B:71:B0:5F:79:EE:26
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D51A903F61D739C817B10
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ee9adef9-382f-3ef3-afd2-0352faa51252.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.61.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:51:a9:03:f6:1d:73:9c:81:7b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=7118c361-88a3-4dce-831f-69333cd762f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:f5:94:e3:61:3e:ec:61:8c:d5:af:45:5e:
                    98:39:1b:f7:65:d1:65:20:2e:e1:5d:6c:0b:9e:0b:
                    c3:ee:26:90:38:66:e5:45:b4:f7:e4:27:d5:4d:29:
                    ff:f3:82:08:a9:fe:5f:5f:1a:08:cb:7a:71:25:c5:
                    fb:57:d1:54:55:f2:7b:48:8e:73:14:d7:6b:21:08:
                    de:c9:f5:d2:d2:6f:13:d6:a5:e3:62:c2:c5:4c:c0:
                    f0:46:19:9d:70:07:d2:d5:de:16:1a:2c:15:87:8e:
                    3e:cc:1f:45:e3:7f:c3:93:cd:76:8e:6b:e7:99:c7:
                    d3:81:e7:69:f0:bc:60:cc:69:68:ef:b9:73:3c:06:
                    76:34:23:a4:c6:7e:e8:43:b8:39:a9:f0:d6:a5:3a:
                    45:34:c2:6c:cd:0f:79:8a:ff:a9:f5:f3:01:6d:2e:
                    f9:16:fa:6c:ad:35:61:40:cc:11:78:8a:c8:d1:3a:
                    66:6a:a6:a5:d6:1b:27:26:12:9d:a3:02:6f:e9:2d:
                    9e:e5:c3:54:53:17:a3:29:66:71:7a:d1:bb:2f:0d:
                    f5:34:24:b2:9f:50:ab:2c:0d:c7:bd:00:dd:c4:7d:
                    ef:67:ce:8a:eb:61:ba:bf:f1:19:ef:9a:f2:9c:34:
                    f5:37:4b:3f:76:eb:22:38:e9:c2:a8:58:a7:42:29:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2D:3E:35:D5:9C:31:85:5C:FC:FB:39:F0:2B:71:B0:5F:79:EE:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ee9adef9-382f-3ef3-afd2-0352faa51252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.61.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d2:18:e8:ed:7d:44:1f:58:bf:b0:3f:92:3d:f5:b8:89:ab:
         88:36:3c:42:fd:c4:b0:c5:c7:2e:ba:53:0f:a1:99:00:3d:67:
         0d:2e:7b:43:af:9f:db:c9:fc:a2:89:c0:a8:69:89:8c:b4:db:
         74:da:9b:ac:45:4a:6b:26:db:0d:b6:7a:65:59:82:d3:02:ac:
         bd:0c:a6:1b:e7:5d:3e:a8:74:4f:52:8a:60:bc:fb:07:db:c3:
         7a:65:61:db:43:bd:78:1d:1b:55:a8:e2:ba:1b:c4:93:ce:9f:
         cf:0c:cd:9c:37:63:5e:ad:37:7d:59:e2:c9:b1:7e:ec:77:31:
         8b:0d:da:7a:82:a0:f3:98:74:42:50:ce:42:b8:ec:f6:7c:ae:
         8b:9a:da:08:8e:44:92:6e:19:12:75:23:62:e4:aa:fd:6c:97:
         9c:14:00:e8:09:8f:b8:76:68:6a:4f:c3:44:18:c7:51:ad:78:
         e3:8a:a8:82:76:87:94:b8:6b:ff:d2:26:db:aa:0c:74:f3:9a:
         71:ee:a2:d9:f5:79:d2:63:16:2a:cd:3c:aa:d9:6e:28:83:fd:
         27:17:f7:68:c5:fb:a9:2f:53:76:48:a8:75:10:dd:68:42:97:
         b6:fe:93:c3:91:15:6f:91:18:3e:73:e4:e4:c6:b5:08:af:a4:
         f8:5b:73:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:41 2026 by rpki-client