Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9f83642-2862-3b8b-a6ca-e7ce0ad6d4fa.roa
File:                     f9f83642-2862-3b8b-a6ca-e7ce0ad6d4fa.roa (raw, json)
Hash identifier:          3i6enKN4NqcIJVPfE0sQSmhv2iehXfBHxLPHRvO20mM=
Subject key identifier:   77:50:EE:60:11:81:A3:78:94:06:BA:90:5C:08:75:1D:B1:AF:3D:98
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA79127AC29641F925BEB22C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9f83642-2862-3b8b-a6ca-e7ce0ad6d4fa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.58.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:27:ac:29:64:1f:92:5b:eb:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8fe398bc-38e2-437a-8b36-6551277d2b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:87:cc:d1:68:b1:9a:11:37:5b:a9:1d:10:
                    6c:58:c7:4d:6a:82:24:69:5e:d6:ae:82:50:ff:bc:
                    cf:25:ee:18:74:88:10:7f:2f:4a:ef:9b:1e:e6:a3:
                    79:a9:15:e2:72:18:ee:5b:93:00:b7:06:f4:d0:1b:
                    26:05:ec:8f:d1:ad:ee:f7:75:77:48:ec:d4:db:a8:
                    fd:54:e9:32:99:68:2c:84:4a:c9:75:19:50:1c:e8:
                    3d:b7:f6:28:35:79:eb:ce:a2:24:6f:c5:e4:2c:14:
                    76:9b:b4:a6:3e:8b:c3:3c:55:71:2d:68:dd:c2:d6:
                    1c:c8:f2:d3:fa:1a:0d:11:96:36:a9:d0:35:33:c3:
                    f2:37:df:69:d1:d3:e7:14:c5:64:17:42:6f:cd:c7:
                    d4:96:13:ff:85:9f:36:74:d3:93:8f:35:fe:e8:2c:
                    24:42:d6:f8:e6:34:8d:77:5c:fc:f3:35:81:bb:f8:
                    e7:20:f2:a5:71:82:b7:84:89:d0:91:6c:d7:90:78:
                    31:1d:60:0a:27:af:2a:0f:f3:68:d2:f5:f3:cb:d2:
                    3f:62:d1:c3:f4:af:5a:12:1f:a0:81:e2:3d:b1:84:
                    6d:61:83:19:72:c0:e2:09:b1:c2:dc:44:95:a9:72:
                    06:a9:12:c1:8d:e0:15:fc:16:bf:c4:83:4f:2d:de:
                    13:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:50:EE:60:11:81:A3:78:94:06:BA:90:5C:08:75:1D:B1:AF:3D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9f83642-2862-3b8b-a6ca-e7ce0ad6d4fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.58.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ff:3d:c2:c9:5a:de:a4:ba:b9:35:41:c4:d5:b5:df:33:4e:
         b7:53:90:c3:c9:2e:14:af:93:00:d5:7a:bb:c6:fe:0b:78:72:
         4f:9b:b9:b9:b1:09:f8:fd:58:1f:a3:f8:f3:57:bb:a7:06:32:
         98:08:0b:58:a5:b0:99:e7:01:23:b5:44:6f:70:e7:2f:b6:ff:
         07:db:a6:97:ca:df:e2:c0:e0:98:21:68:30:47:33:89:a7:2e:
         55:e2:02:3c:3b:71:06:6c:b1:c0:43:51:87:9d:28:4b:26:5a:
         06:8c:21:a0:21:11:e9:a4:ef:1b:af:22:7d:80:49:47:8f:d0:
         72:e4:f5:08:a7:37:16:95:14:1a:a7:03:fc:6a:33:92:7a:2a:
         94:7f:5c:9f:01:9f:60:85:2a:f6:c8:2f:b7:89:f5:bc:14:78:
         0e:be:f2:31:42:87:27:49:0f:25:ad:9b:95:f4:2c:54:e7:c5:
         05:cc:ae:ba:4e:47:88:19:4b:d0:5d:00:00:53:ab:11:45:1b:
         09:07:88:d7:fb:2c:69:6c:00:f9:7a:21:ff:51:0c:b9:9f:bb:
         1a:52:ac:6e:3a:15:d3:05:aa:c5:89:e9:ed:fa:d0:c5:9e:f1:
         9e:6a:d8:10:62:b1:71:5b:99:a5:14:b6:c6:4d:db:17:de:35:
         ed:d7:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:30:00 2026 by rpki-client