Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/497d53dc-1fae-3b1d-96f4-fd0efca81ac6.roa
File:                     497d53dc-1fae-3b1d-96f4-fd0efca81ac6.roa (raw, json)
Hash identifier:          t6khgC16CbsKKzT8mLXKJxL5mrqVNp0f1hAi2ThOpGM=
Subject key identifier:   E1:57:28:B0:72:5E:E7:90:95:45:F4:FC:83:C6:2E:8C:90:BB:8B:5E
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EF18203BE67F0F220D7792A00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/497d53dc-1fae-3b1d-96f4-fd0efca81ac6.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     16591
IP address blocks:        136.39.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:03:be:67:f0:f2:20:d7:79:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=71e7bbdc-f06a-488b-9315-b24924b4a707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:af:43:54:0e:15:cc:f2:9c:01:f4:e2:19:57:
                    da:b9:77:e8:42:9a:d9:79:dd:fd:81:59:c2:97:eb:
                    11:b8:1d:21:20:64:83:11:6d:f7:17:9e:2b:5d:00:
                    35:65:04:66:e0:d7:4e:da:28:14:b0:8b:cc:94:ca:
                    85:02:f2:6a:d8:c8:d5:7d:5d:5b:b1:fd:9b:02:f9:
                    fd:00:dd:b1:48:39:24:34:f6:61:26:11:c7:83:ff:
                    8f:25:ad:b3:ed:ff:d0:df:a6:94:07:2e:35:3c:ba:
                    c3:e8:56:7a:ad:e2:09:ed:89:61:9b:30:17:12:64:
                    96:78:83:39:37:56:f2:41:e1:a2:02:77:18:86:67:
                    48:17:fb:a6:78:13:ff:8f:19:47:49:5a:a9:12:62:
                    20:90:e3:3e:8f:06:e3:4d:d1:11:0e:3e:69:c2:fc:
                    e4:d2:21:c6:ab:81:49:01:ad:cb:68:52:74:d6:67:
                    32:3c:2f:ba:11:e1:94:5c:1d:cb:60:a8:38:bb:d3:
                    e1:91:62:8a:61:b5:b2:ca:28:88:55:5a:c5:b6:bd:
                    96:ea:96:db:fd:5c:a8:96:19:b2:3e:53:2f:2b:19:
                    45:5c:ac:2e:4f:dd:7f:1e:a6:6f:fa:1d:53:26:46:
                    27:39:f4:26:62:56:f3:c0:fd:66:43:95:47:72:45:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:57:28:B0:72:5E:E7:90:95:45:F4:FC:83:C6:2E:8C:90:BB:8B:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/497d53dc-1fae-3b1d-96f4-fd0efca81ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.39.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c9:f7:08:aa:39:d5:43:64:0d:10:60:fe:e7:12:17:4c:c7:
         d8:9d:7b:c8:fd:00:22:5c:3c:ee:2b:7e:c4:1a:b5:08:c6:fe:
         c4:0a:74:3b:93:1f:90:fe:9f:04:0e:d5:63:69:72:bf:8f:21:
         0b:ff:0c:64:de:d5:03:e6:3e:77:7a:bd:8c:5d:f1:58:b0:9f:
         45:3e:da:93:64:aa:f6:47:8d:33:c2:51:aa:99:60:92:6a:10:
         a8:bf:3c:13:6d:e7:80:e4:da:1e:93:de:15:fb:0e:b2:f3:c7:
         03:6a:42:dc:39:09:39:46:64:22:a4:56:44:55:63:65:0c:22:
         2c:18:b2:0e:17:16:88:2a:d6:be:05:9c:9c:5f:53:5f:e4:a4:
         53:25:62:a6:83:46:98:c9:58:1a:5c:f8:ad:06:96:b2:47:50:
         e7:ea:08:cb:33:23:ee:a1:13:0b:8d:e3:9c:e3:49:0b:39:42:
         be:dc:3d:e3:82:e8:ad:0d:13:fa:ff:82:fa:85:5f:a9:da:34:
         f1:18:2e:5d:91:3c:d5:46:e6:c3:ba:a2:1b:82:f7:d4:d8:fe:
         d6:70:85:5b:d4:1d:c5:fb:05:af:62:f6:44:33:d7:89:1f:fb:
         06:1a:e0:14:d9:63:3c:11:da:13:96:2e:80:6c:db:c9:f5:b1:
         19:c8:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:51:57 2026 by rpki-client