Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4073fced-abc2-3f30-b22a-c763af1adda6.roa
File:                     4073fced-abc2-3f30-b22a-c763af1adda6.roa (raw, json)
Hash identifier:          3EjVAxP86QdD2s/ufX1C3wvc7HvctrvhzKWYFgoH/OQ=
Subject key identifier:   19:C7:25:ED:47:D4:B9:89:74:D5:8F:EF:FE:9E:12:05:B5:FB:62:B3
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584F4974470DFA7444F4AD5E25E0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4073fced-abc2-3f30-b22a-c763af1adda6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16591
IP address blocks:        136.62.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:47:0d:fa:74:44:f4:ad:5e:25:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bffd419e-331f-4888-9beb-1e46681797f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:63:c7:a4:e3:b2:bf:15:10:b2:ab:3e:d8:
                    3c:2e:a6:ec:c3:b6:69:64:40:e9:b4:a1:72:34:f6:
                    03:52:58:db:48:f5:59:6e:b8:ca:58:41:5a:b9:6f:
                    68:c1:c2:f7:27:6e:c8:77:fc:84:06:c4:43:5b:18:
                    ee:a0:39:4f:e9:e5:a1:38:99:53:33:90:4e:0f:b0:
                    39:99:60:84:96:16:c9:aa:f7:7b:e2:88:f0:2e:6b:
                    a3:41:97:d2:0d:72:bf:a5:07:92:93:35:2d:99:46:
                    5c:a6:45:45:ae:53:4d:12:ce:0c:a1:7c:eb:a3:b7:
                    ee:01:cf:3b:58:fc:6e:bd:d6:5f:1a:88:7c:c9:d7:
                    81:17:ea:72:43:04:fd:1c:f1:53:0e:9e:3d:9c:32:
                    ac:c4:2d:58:4f:ec:bb:61:c7:28:de:d7:dd:0e:21:
                    23:9a:bd:ac:da:81:e1:54:86:76:34:e9:0f:ea:89:
                    d0:9e:03:0b:33:bc:02:47:82:10:25:d0:a7:81:b5:
                    37:28:3b:98:e1:e5:94:94:cb:8c:df:43:8f:d5:61:
                    fc:45:9b:4a:de:f3:60:9f:bd:bb:34:d0:9e:3b:08:
                    64:74:49:82:52:a7:70:c1:50:97:0b:b0:f7:f4:f9:
                    d2:95:a6:cb:d5:64:64:61:df:47:2b:91:b5:c6:55:
                    d9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C7:25:ED:47:D4:B9:89:74:D5:8F:EF:FE:9E:12:05:B5:FB:62:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4073fced-abc2-3f30-b22a-c763af1adda6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.62.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5f:2c:82:b3:0f:a5:0f:c2:48:17:9b:9b:d4:99:a6:61:37:
         49:36:63:ab:b5:1b:c8:82:14:c5:d7:42:49:e3:24:c9:b4:8e:
         87:6a:28:67:71:38:5d:07:23:fc:b9:07:94:4f:46:90:8e:2a:
         65:83:b4:4a:a5:94:bb:93:56:3f:1c:bc:d8:26:45:f3:cf:74:
         b5:21:5f:dc:35:d9:5c:36:76:b1:7c:4c:c8:b7:46:ea:6a:78:
         d3:e4:04:52:d7:5b:77:e4:41:da:a2:9b:0e:52:04:d8:fa:96:
         36:0f:20:0b:f4:0c:36:31:30:a5:97:61:3b:6e:a1:67:ed:b5:
         d1:b2:66:59:56:a5:d8:c5:99:53:5c:eb:c5:17:a0:cd:a4:41:
         e1:25:d8:c3:ca:e7:d2:ed:b3:48:50:f4:b5:92:2e:07:24:06:
         15:a8:80:32:b8:d4:c3:a8:30:16:43:e7:a4:70:34:4d:94:6c:
         ec:17:e6:1e:12:fe:71:2a:5f:2e:ae:6a:cf:76:bd:3e:b6:af:
         7b:51:17:08:16:d9:b4:24:e5:f1:16:4b:ad:45:e7:de:34:67:
         bc:9b:72:3f:1d:51:ae:fd:20:94:3a:86:bb:34:66:e0:c9:4d:
         b0:11:db:be:3f:75:91:e8:40:01:c7:98:a0:7e:13:d0:64:78:
         86:ae:10:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:12:17 2026 by rpki-client