Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa
File:                     f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa (raw, json)
Hash identifier:          Jt3ejBRAKYbskPsjH1Bm68wh2bKyEXxxqBM+hphOifs=
Subject key identifier:   96:DD:7C:22:B0:6B:76:4C:EA:79:7E:0D:3D:83:E3:97:74:AF:A9:CA
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037CF6BC4C88F6C302F73E40
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.33.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7c:f6:bc:4c:88:f6:c3:02:f7:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=2273af7f-0db5-4522-ba38-eaeb55981142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:11:32:7a:c9:a7:89:f1:17:6e:56:dd:4b:
                    f5:49:f5:12:bf:94:62:ef:d9:d0:7a:d8:85:9b:27:
                    0c:a0:b3:45:b4:1c:a8:65:4c:83:f7:28:9b:df:65:
                    6e:3c:09:d8:9e:ea:5a:45:89:cf:c8:5b:93:9c:39:
                    52:f3:5d:da:fa:5b:8d:24:55:e0:84:b2:29:43:64:
                    fe:ab:28:74:ff:b0:15:0f:0b:93:16:8d:19:01:62:
                    73:92:a4:4e:70:42:2c:c3:eb:cd:ad:95:4b:0b:4c:
                    6b:3a:57:35:3d:37:63:ef:cc:2e:53:f2:4c:aa:dd:
                    fd:7d:44:ee:1e:9f:c4:aa:d8:f9:7c:f4:00:68:f0:
                    35:74:a4:d9:93:a5:8a:13:2d:c0:f3:77:83:9c:6f:
                    da:26:89:b4:2b:28:0b:7f:e8:d5:e5:65:e9:0b:29:
                    ef:9f:7d:81:5e:24:3e:a6:e0:4a:5c:ba:fa:10:34:
                    5d:3f:79:ee:88:67:4f:19:03:1e:92:e1:4a:76:08:
                    2b:62:ee:85:ea:49:51:5b:74:da:75:1e:7f:6f:34:
                    87:ab:18:ec:d8:1e:26:d7:bf:48:35:d9:76:9a:7e:
                    9b:41:0a:ff:dc:d5:81:8a:3c:03:81:71:75:26:5d:
                    22:06:86:84:3b:a0:62:42:d7:a1:1a:0a:c7:90:33:
                    e3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DD:7C:22:B0:6B:76:4C:EA:79:7E:0D:3D:83:E3:97:74:AF:A9:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.33.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:23:6f:f1:1f:3e:97:43:e5:7c:fb:dc:24:ef:fb:ca:69:9f:
         a3:d1:0f:5a:60:dd:bf:77:a7:f9:19:d2:19:7f:b4:0a:18:a4:
         b7:93:aa:58:7e:a6:09:d2:cf:52:00:79:6b:e8:dd:ee:d1:59:
         f8:5a:1a:81:48:75:c1:fa:cf:d0:b5:82:02:de:42:ee:e3:82:
         1b:f5:ec:76:ec:25:18:cd:ea:14:d5:7e:6c:f2:10:d4:2f:7f:
         c9:80:0b:b5:46:33:74:34:4c:dd:a4:d8:8d:22:3e:35:14:9f:
         bb:f8:2b:74:c5:61:b3:79:7d:ad:e3:fe:a8:68:cf:29:aa:01:
         b8:6b:34:12:09:d3:25:eb:d0:6d:fa:80:93:1f:18:47:b4:ed:
         56:9a:91:ca:11:9a:8d:80:c7:39:32:74:be:92:69:9b:be:08:
         c4:15:84:24:08:ff:6a:cd:1e:6d:d7:3a:af:cc:d2:c0:26:9b:
         75:a9:69:59:b8:0c:57:ed:a7:de:b7:cc:95:da:79:a7:58:25:
         56:e6:74:ac:87:38:33:dd:dd:72:8b:42:64:02:dd:c4:7f:22:
         85:b2:15:ef:66:58:1b:1d:34:14:00:a5:a1:ee:45:bd:d8:88:
         f7:26:61:12:9c:59:c2:42:0c:f8:93:03:c8:5d:56:af:56:a7:
         b4:3d:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:51 2026 by rpki-client