Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83cab256-8777-301a-bbc1-8725f7926792.roa
File:                     83cab256-8777-301a-bbc1-8725f7926792.roa (raw, json)
Hash identifier:          emNcK1YPzPF9rVkRbZXbmyUYGGQtv5B/AubmCt5NHAg=
Subject key identifier:   F4:CC:71:C4:64:C4:E4:EA:15:B2:9B:8A:7F:0B:3E:66:CB:F3:CB:00
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584F49748007C242505B15A92440
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83cab256-8777-301a-bbc1-8725f7926792.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16591
IP address blocks:        136.50.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:80:07:c2:42:50:5b:15:a9:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f6ae7ce0-f3d2-4d53-9de3-471633c79c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:10:e3:22:80:8e:56:8f:59:43:a1:49:8c:
                    61:5f:6a:56:a3:ac:aa:a0:88:af:b6:30:0a:c1:03:
                    d8:88:22:fa:4b:5c:db:28:58:80:51:33:e7:b0:a6:
                    49:b9:90:7e:97:40:71:4b:ac:24:58:42:38:f3:ee:
                    6f:45:0e:7f:ad:c2:4a:c5:06:83:99:bc:37:df:42:
                    d6:b8:4c:c2:e3:c8:ce:3b:3c:3f:cd:88:dd:a5:f4:
                    3e:bf:80:fc:1e:cc:ac:d3:1e:06:f6:8c:67:4e:51:
                    6b:05:14:90:1d:34:90:55:5b:e5:53:53:c3:bc:44:
                    50:8e:50:3e:c9:4b:a9:17:42:c3:2f:16:3d:ee:69:
                    fc:e8:b0:9e:e8:40:6a:f6:fd:5d:7e:fd:8b:4b:f2:
                    98:a5:f2:2e:6d:c6:03:46:ee:46:a7:9c:7f:12:dd:
                    ef:6f:56:f1:57:cb:b8:16:f9:3a:ff:ff:10:23:c8:
                    04:47:46:7b:5b:ed:c8:8d:cf:a8:d4:40:f6:4c:23:
                    17:06:ed:af:ea:5e:a6:21:3b:14:fa:55:a0:e4:92:
                    7e:35:c5:65:db:64:52:ad:61:00:71:4b:33:7a:7f:
                    69:61:35:e7:1a:38:91:83:1c:d3:eb:26:66:5b:0f:
                    9b:a6:b6:8e:ac:66:8f:a6:c2:72:ab:64:3a:c1:ae:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CC:71:C4:64:C4:E4:EA:15:B2:9B:8A:7F:0B:3E:66:CB:F3:CB:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83cab256-8777-301a-bbc1-8725f7926792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.50.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:35:63:eb:7d:27:b5:d1:c6:79:14:b1:7e:3b:f4:21:fa:b2:
         7b:66:12:0f:16:20:e1:4d:7f:63:69:ee:41:40:51:bd:e0:a3:
         dd:db:7c:98:57:49:ca:22:53:7d:e2:0b:e2:be:0d:e2:cf:23:
         18:49:33:c9:d3:8a:0a:dc:8f:b9:4f:58:1d:22:ec:d1:92:b1:
         04:a3:04:94:ff:65:5f:b3:a9:38:dd:ab:b9:4f:3f:50:8f:08:
         17:4b:7e:b1:5e:d4:42:be:55:b5:47:f3:f3:4b:7f:93:5d:6d:
         44:41:f2:85:ee:66:b7:c2:96:c7:00:c7:05:93:fa:50:f4:3c:
         f9:26:f1:1d:42:ae:5a:04:93:12:d6:48:e3:6a:66:d6:35:d3:
         df:b5:24:e5:b4:c8:7e:29:c0:85:48:57:07:91:8f:61:fa:a9:
         30:06:40:b1:93:72:99:c7:65:d8:1d:31:22:25:31:6f:3b:51:
         00:73:b4:02:65:c8:9d:15:e8:bf:1d:e4:33:58:d3:07:74:61:
         38:d9:61:72:5c:96:88:ad:a6:05:96:dc:80:46:c9:54:7a:0e:
         4d:a6:0f:e9:2d:80:85:6b:fd:cb:01:5b:f8:21:88:42:34:d8:
         98:11:38:c0:7c:28:fe:4f:3c:85:22:b0:d0:8d:2c:d7:23:32:
         e0:a1:4a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:00:13 2026 by rpki-client