Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/501181e8-d1df-3f50-a008-152c6bbc5501.roa
File:                     501181e8-d1df-3f50-a008-152c6bbc5501.roa (raw, json)
Hash identifier:          lHyjNJMvLJFVIm3BBxi7t16H2akfqkGRgWich5NWUG8=
Subject key identifier:   7E:4E:40:27:FB:F2:D3:E3:8A:BD:69:9D:AF:E0:F0:3B:CA:EB:8C:D1
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DB7704012C936700F71657700
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/501181e8-d1df-3f50-a008-152c6bbc5501.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.59.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:40:12:c9:36:70:0f:71:65:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=2ff84a4c-6bde-48ad-acc8-c0d7401e82fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:47:53:5f:c7:2e:9c:1a:79:6d:3c:aa:10:
                    11:dd:a4:41:02:15:06:66:39:16:b6:9e:c3:e7:0e:
                    8c:b1:5f:09:ed:be:26:2a:cd:b5:8d:0a:4c:78:c9:
                    95:44:f7:9d:36:1e:3f:d8:1f:4c:56:43:b0:b6:05:
                    97:3b:ea:8c:0a:62:81:1b:8a:46:9a:e1:1f:10:7a:
                    d4:3a:fa:d5:a9:c6:f0:5b:88:32:29:42:df:76:d3:
                    66:01:c7:38:d7:8c:a5:cd:d9:c6:17:ea:c9:b4:c6:
                    9c:98:ef:ba:22:6a:63:06:86:fd:80:c4:23:7f:c1:
                    92:73:d4:6f:ed:f8:3b:12:83:ea:99:f8:d3:64:c8:
                    44:a9:ba:2b:c0:81:98:b5:81:9a:f5:50:f8:b8:da:
                    95:5c:9a:60:fd:54:20:ef:d5:7b:b3:84:e5:f9:8e:
                    55:1d:40:25:e2:b1:6c:0b:3d:91:19:2d:2d:d0:3f:
                    68:ae:db:eb:84:66:68:fc:d7:d0:a8:27:b8:8a:48:
                    2f:63:e8:b2:f2:3b:48:00:1b:59:d6:40:ef:6d:0d:
                    29:63:2f:97:12:7a:07:e3:f8:20:77:f7:99:fa:07:
                    23:b8:4b:fb:56:57:1a:06:6e:30:72:52:53:a3:0d:
                    d9:1e:52:39:6e:95:02:f6:56:5d:ee:bb:c4:f4:57:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4E:40:27:FB:F2:D3:E3:8A:BD:69:9D:AF:E0:F0:3B:CA:EB:8C:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/501181e8-d1df-3f50-a008-152c6bbc5501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.59.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:93:a7:e1:a2:b5:34:08:b1:f5:f9:bf:4c:01:e2:3a:c3:2e:
         b9:27:16:86:ca:15:de:7a:a4:d0:70:05:7c:1d:f2:af:13:6c:
         5b:a7:70:c7:15:9b:fc:ba:b3:88:ad:e7:2a:62:8b:d7:25:2f:
         0f:cf:f1:c3:02:6f:b3:9d:a4:13:2d:8f:21:f7:cf:13:4b:e8:
         b7:b5:25:48:80:38:1f:5e:f0:c1:11:55:8c:da:fd:ca:a7:c9:
         65:1b:22:47:1e:0b:da:54:7b:d4:84:c3:d8:6a:a0:8d:72:a8:
         51:32:e0:4d:8c:d3:08:b2:de:66:fd:10:0d:a0:fb:94:09:9f:
         c3:4b:0b:72:c1:4b:b2:3c:1f:82:ab:d8:3b:ee:62:2f:18:9a:
         cb:39:ae:2b:fb:1e:80:a9:f8:df:d7:97:f7:7a:96:56:6d:cd:
         fc:0a:53:8b:46:97:c5:56:c6:7e:44:56:1c:0a:f1:1c:23:1a:
         0a:1b:27:8f:4a:49:f9:ac:f9:34:58:12:a5:51:d5:6c:09:b4:
         78:7e:79:d4:1e:3a:b2:37:6d:27:db:cf:6d:56:20:f5:10:00:
         42:36:51:32:38:5d:28:f4:eb:07:d9:30:94:a6:e3:77:72:2b:
         f9:f4:aa:6f:58:94:91:01:0c:25:d7:f7:9c:97:5c:fc:32:0c:
         9f:92:1e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:23 2026 by rpki-client