Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fc2dcc6b-eba2-3f26-b649-f1dfaedebd27.roa
File:                     fc2dcc6b-eba2-3f26-b649-f1dfaedebd27.roa (raw, json)
Hash identifier:          WbGLMdnFyfSeSeXG5KRKEf0jb+yXSxfjZdXI1rMfoBc=
Subject key identifier:   CD:54:E9:05:B0:E8:EE:F6:DB:5E:DC:EF:30:2E:94:DA:1D:EE:CD:A3
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA7909A9A804477F376242E80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fc2dcc6b-eba2-3f26-b649-f1dfaedebd27.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.35.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:9a:9a:80:44:77:f3:76:24:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b33eb774-f653-4419-aa9e-97dcf0ca7552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:72:e9:62:b4:5a:a4:a2:75:48:18:23:02:02:
                    f3:05:b7:af:d1:32:9a:55:6d:b3:ae:80:0c:f6:ef:
                    3f:72:b4:17:dc:fb:08:6e:10:22:2c:3f:4c:67:c1:
                    b4:bf:df:2c:aa:eb:c3:ba:45:39:2b:c3:99:dd:59:
                    12:03:bd:b2:43:b3:f1:68:46:04:f6:c3:93:39:70:
                    0e:88:ce:6e:8c:f5:da:f4:b0:60:e5:13:64:34:06:
                    dd:ef:53:9f:4d:b0:32:91:79:d8:a0:f5:ce:a9:be:
                    ad:91:c5:2b:8f:da:ad:a6:93:e1:a4:9b:64:00:4a:
                    d5:5a:c2:ff:03:23:4a:54:db:61:aa:fd:0d:4c:cd:
                    e8:73:fa:ca:03:3d:33:c5:ce:29:5b:e9:fa:8f:00:
                    44:34:eb:e7:ac:ed:41:99:38:0b:99:10:76:4c:99:
                    74:a0:23:19:23:d8:3f:e6:4a:9e:5e:7b:30:61:9f:
                    99:92:be:82:26:df:7e:cd:19:68:82:45:1f:28:98:
                    e9:08:b5:94:17:1a:db:a8:25:a9:18:08:14:20:e7:
                    39:b8:a5:38:17:00:53:a0:af:a6:7e:12:ec:fd:18:
                    74:39:2e:d4:14:2f:12:8b:e5:88:8e:84:0f:ed:fb:
                    fe:ac:e2:f5:f7:0b:c5:7c:60:81:d1:16:ac:4d:dd:
                    65:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:54:E9:05:B0:E8:EE:F6:DB:5E:DC:EF:30:2E:94:DA:1D:EE:CD:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fc2dcc6b-eba2-3f26-b649-f1dfaedebd27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.35.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8e:4d:c1:e6:10:cd:a1:86:c7:9c:f6:f9:c6:e7:28:e5:a5:
         dc:99:b6:11:44:9c:ec:87:48:41:bb:3c:2f:90:9d:16:dc:8e:
         0d:38:27:3d:d4:9e:c5:94:31:71:ca:2f:3c:36:8f:3e:f7:b1:
         8d:01:93:f1:7a:8c:96:9b:ee:44:0d:8e:43:56:00:f8:65:b9:
         ef:a7:89:0b:fe:c4:67:de:e9:cf:94:2a:45:af:1e:c0:07:88:
         af:dc:fb:ee:23:1e:f6:db:fd:13:b4:03:a7:6a:d9:b0:54:77:
         0f:29:a9:e3:4e:b8:b3:ea:6b:4f:9d:cb:72:04:a3:1b:8e:7f:
         95:48:f6:7b:db:6b:02:52:42:06:d4:94:ad:42:c4:0d:cf:52:
         a1:04:0e:d5:cc:e7:51:54:05:86:4d:64:22:d1:7e:3c:29:50:
         0e:4b:3b:7b:b5:cb:c6:1c:2c:7d:76:a2:fa:8b:de:35:98:ae:
         88:1d:1a:7b:43:97:36:6d:92:c7:2b:62:17:2d:fc:55:83:90:
         1a:b8:c4:23:7c:fe:11:21:73:cb:49:20:fa:dd:80:ac:19:aa:
         1b:29:de:e7:cc:ce:e0:e4:0b:ae:9e:03:47:9a:dc:28:86:18:
         68:33:38:ec:c2:bf:ff:1d:4e:35:c1:04:de:ec:c9:07:72:15:
         96:b2:b3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:30:13 2026 by rpki-client