Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c2b6c31-b131-3373-a252-3605cb811b06.roa
File:                     1c2b6c31-b131-3373-a252-3605cb811b06.roa (raw, json)
Hash identifier:          DhuFt+FYSxqw8a8X1R+tSjugmrfOdvFo0i9je+G0XDM=
Subject key identifier:   07:5C:91:A8:09:BB:E5:B3:E7:7F:1C:E2:16:4F:4E:06:4C:4D:1E:A0
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584E97B50E787B669CFA0DFEFE92
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c2b6c31-b131-3373-a252-3605cb811b06.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     16591
IP address blocks:        136.54.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:0e:78:7b:66:9c:fa:0d:fe:fe:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=1c859d23-896e-4819-a969-b57aea5641f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1b:97:ad:ab:93:15:8f:60:1c:80:fd:68:4f:
                    7c:9f:6b:69:77:3c:af:1a:0f:df:fd:e4:98:62:a7:
                    95:1d:de:f0:4f:09:8c:d9:b9:95:86:12:d2:1a:29:
                    4f:7b:91:62:89:9f:82:c7:72:ca:6e:dd:de:55:be:
                    13:6b:79:32:3d:ac:0d:58:29:c2:f0:fb:89:5a:6a:
                    a1:5f:19:e9:4a:de:ad:ed:b2:30:af:a8:0e:66:6a:
                    82:ab:65:55:29:43:3d:c2:aa:1b:c4:c0:3d:5f:ae:
                    18:5f:1e:95:53:a2:28:89:e3:ab:80:c4:8b:8e:a9:
                    d2:00:8b:f3:77:fb:d0:cf:e3:3a:1f:06:55:b8:76:
                    6e:bb:c5:65:9e:28:ce:04:21:85:f3:49:48:f5:e7:
                    c5:06:18:ab:b1:84:ab:73:87:f4:24:67:c3:68:d2:
                    50:7a:56:fd:18:b6:8d:b8:c6:5d:b5:11:8b:b6:61:
                    20:fa:f5:eb:eb:2c:2e:fd:89:15:66:13:64:d8:24:
                    4a:f9:f1:21:eb:4d:04:4d:84:81:1d:63:89:35:49:
                    b1:c7:cb:60:04:bd:2c:b6:74:6a:20:fa:d2:d1:0a:
                    20:fa:7e:20:07:9f:3b:09:d7:6a:fd:38:3d:6a:ae:
                    36:9f:82:52:3c:91:15:14:c0:1d:73:dc:73:0c:36:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5C:91:A8:09:BB:E5:B3:E7:7F:1C:E2:16:4F:4E:06:4C:4D:1E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c2b6c31-b131-3373-a252-3605cb811b06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.54.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:45:4f:03:69:2c:23:cf:a3:0a:aa:2c:28:82:50:b9:ce:3c:
         02:b3:7b:30:c0:28:ea:1f:f4:05:4e:c1:69:b0:65:23:9e:2f:
         7b:85:60:8a:65:1f:d6:89:d0:7d:cd:29:5c:9b:45:e2:74:55:
         a2:9b:3e:b3:89:d8:b7:48:34:d8:1f:22:64:8a:28:0e:f8:db:
         75:4a:a0:ee:8c:eb:bd:37:3a:5f:4f:d5:ee:64:b9:9c:6f:12:
         e5:64:b1:bc:c2:57:4e:41:ea:06:58:de:b7:33:ea:e9:61:2b:
         be:80:56:1a:03:b1:3e:32:9f:13:21:d2:0e:62:cc:06:2a:9a:
         15:20:70:c6:20:5f:97:05:2a:93:eb:e5:0e:48:d9:06:b6:9b:
         68:5e:62:e0:c3:86:11:00:9c:01:36:ca:97:15:4b:bf:a4:d9:
         e8:9b:3c:00:3f:dc:08:04:5b:0f:eb:a0:d4:e9:84:34:04:af:
         b8:dc:0a:bf:8f:30:53:4b:6a:3f:7c:b5:db:b3:23:df:23:e2:
         8a:4d:4e:01:ba:9f:6b:8e:85:0a:98:b3:89:3a:90:c6:ca:e5:
         bf:5e:4f:5b:7d:4a:ed:6c:a4:c7:71:c6:e8:0c:21:9d:59:8d:
         65:81:2e:6d:6a:b4:aa:f7:57:ac:a8:e2:62:e5:04:24:fc:93:
         bd:ab:97:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:42:15 2026 by rpki-client