Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7a7c7082-67e5-3be4-b00d-ab9b02f70527.roa
File:                     7a7c7082-67e5-3be4-b00d-ab9b02f70527.roa (raw, json)
Hash identifier:          RKQZHCb9itfeQaVVjk0opsL7zKH2t6XxCMDh+Id+aeg=
Subject key identifier:   2F:DE:84:4D:80:3C:12:6C:75:E7:96:F6:D2:ED:1B:3B:C4:09:5D:A7
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584F498936A979ED6FBDD0C35500
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7a7c7082-67e5-3be4-b00d-ab9b02f70527.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16591
IP address blocks:        136.37.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:36:a9:79:ed:6f:bd:d0:c3:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=26dc960a-1072-412f-b19c-cdefe8b7b31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:6a:1e:05:73:af:61:a8:b8:d9:80:74:a7:
                    a5:bb:18:33:99:05:4f:65:61:ae:68:cd:1c:50:c6:
                    26:c4:2e:47:c5:30:5d:59:0c:57:9d:9c:d4:4d:93:
                    b9:04:b7:02:57:aa:44:00:b6:e7:d8:e0:ba:59:ea:
                    7f:af:8c:21:54:e1:d5:22:67:be:c8:9e:01:f5:36:
                    5e:33:c3:01:95:d5:04:ac:f1:b1:77:02:f7:2a:1f:
                    e1:b8:4d:5f:69:49:ce:20:e6:a4:bd:31:31:69:df:
                    bd:c3:ab:dd:ae:f7:f0:fa:98:78:ad:27:1e:a6:42:
                    dd:3a:c3:be:6d:35:43:94:7e:44:20:11:c6:e1:2e:
                    b8:a0:96:35:f3:8f:a2:1c:18:a9:93:5f:43:8c:01:
                    d9:9b:70:5a:6d:25:8e:77:b2:c3:8d:be:86:2d:e9:
                    a8:4b:38:ad:06:88:65:4e:40:8d:9b:66:4e:4f:0e:
                    95:fd:b9:98:8c:40:a6:f5:4b:97:4e:c4:62:d7:a3:
                    64:db:e7:40:e4:a1:9d:f4:1f:46:a0:39:6b:0b:6d:
                    ca:df:38:08:1e:da:a3:9f:1c:50:16:be:29:57:55:
                    58:41:6e:20:44:9b:a1:85:bd:22:01:dc:8d:99:e7:
                    78:c0:cd:67:57:4f:87:3f:74:7e:36:00:bd:3a:98:
                    31:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DE:84:4D:80:3C:12:6C:75:E7:96:F6:D2:ED:1B:3B:C4:09:5D:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7a7c7082-67e5-3be4-b00d-ab9b02f70527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.37.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:8a:d1:a6:91:0a:fc:ec:49:b0:3c:18:5e:b1:a4:a6:45:45:
         d3:24:79:70:ee:a2:cb:7b:a4:12:77:bc:4a:dc:71:be:30:03:
         34:8c:20:46:b7:27:37:6d:e6:2a:11:fb:21:55:4f:87:15:9f:
         1f:04:4d:83:40:f8:71:9b:22:d7:13:cc:bf:f9:bf:2d:3e:da:
         d1:54:ae:a4:0f:ec:18:33:3a:5b:dc:96:ac:10:81:f0:49:f0:
         94:70:20:2e:c8:23:a0:20:e9:e9:d1:93:d8:b3:ee:2a:36:94:
         58:2c:d5:2b:b2:38:a3:e5:cf:37:be:59:21:9b:65:03:c7:b6:
         ec:92:d1:9a:03:b3:fc:38:50:ce:59:12:b5:be:2a:e4:dd:88:
         e7:7a:27:a9:f8:65:c3:9b:01:88:23:da:75:e4:93:99:a9:09:
         22:49:a1:72:d4:8c:02:0f:f1:fb:31:3c:89:8e:e3:75:6d:48:
         f7:bb:53:f5:e9:15:a7:61:28:c2:9b:27:f7:81:2e:41:1d:ae:
         e0:bf:d6:81:b5:97:a1:89:64:1b:e8:75:e2:8c:53:4c:8e:f5:
         9c:45:ca:6c:df:86:3f:d3:7b:e4:e5:1f:4b:02:66:15:92:5a:
         d2:85:76:ad:d6:7b:62:d1:5b:ae:80:4f:56:ab:dd:57:6e:9a:
         72:a4:42:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:48:31 2026 by rpki-client