Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8baccbe7-1913-3453-9a69-a902ed035ba8.roa
File:                     8baccbe7-1913-3453-9a69-a902ed035ba8.roa (raw, json)
Hash identifier:          WBbyuIVRgfpwmm/MFPhWPir530Cs0El7vJaXDESyskQ=
Subject key identifier:   FA:5C:8C:B5:31:27:08:FD:77:1B:66:58:69:C6:DB:DC:1B:7F:ED:80
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584F497476CC328B7EABA15BC7C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8baccbe7-1913-3453-9a69-a902ed035ba8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16591
IP address blocks:        136.47.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:76:cc:32:8b:7e:ab:a1:5b:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=200472dc-d821-488f-9bb9-969ab50b7446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2c:ee:49:7c:b6:0f:a9:e9:ca:bd:2a:37:0e:
                    c7:44:9b:c4:ba:4c:e7:26:0a:9b:56:f4:1f:50:b9:
                    37:1e:64:8a:ef:4c:70:bb:4e:e2:62:18:26:60:4e:
                    f0:2f:fc:ea:66:0f:e4:de:21:0c:83:13:4b:9c:12:
                    b3:5f:e8:18:bc:fd:13:39:de:68:ca:10:f3:4f:4c:
                    49:95:0f:4f:5b:7e:9e:89:08:c3:d5:fc:1e:ad:80:
                    b6:98:05:34:25:58:40:1a:a2:48:7c:60:88:fc:0d:
                    b4:43:78:6f:d1:22:7c:04:a0:36:3b:41:67:e6:57:
                    dc:04:ce:e2:35:2b:8c:f0:1e:a1:12:bb:90:7f:23:
                    63:1f:b4:70:7f:6a:fe:84:46:f2:1d:32:d0:c8:ff:
                    11:8d:ec:70:59:d1:50:bb:58:7d:35:31:12:d0:a4:
                    6b:48:96:27:4f:86:41:ae:19:96:d1:61:9d:93:19:
                    04:44:2f:b7:6c:ad:24:c8:5a:a7:79:d6:5f:98:0f:
                    b5:7f:bc:f5:1b:73:56:dc:24:3b:3b:2d:ac:71:ec:
                    0f:d4:ee:a3:ec:5e:8e:6c:6d:cc:c6:e5:d4:fe:1f:
                    ef:7b:70:a3:2b:9c:c2:10:4e:fa:03:61:98:9f:58:
                    cf:a0:6f:85:13:25:d5:64:6b:eb:5d:87:b5:71:fd:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5C:8C:B5:31:27:08:FD:77:1B:66:58:69:C6:DB:DC:1B:7F:ED:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8baccbe7-1913-3453-9a69-a902ed035ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.47.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:8b:39:cb:47:e8:91:6b:ce:24:a7:28:6f:9c:1a:e3:f6:c9:
         9f:3e:22:79:8c:90:8e:90:c1:29:9e:75:20:82:24:e5:36:66:
         aa:c3:c6:83:84:13:30:77:e7:a0:1a:6b:a4:96:76:c5:8f:d5:
         f7:f4:d9:75:29:a8:5a:1b:52:8b:5d:d5:11:f4:b1:98:c3:da:
         2e:e5:3d:0d:a0:a7:82:13:cf:17:99:da:2c:f1:24:3f:b3:d8:
         68:4c:19:a3:a3:2b:9e:b6:7a:36:de:2d:cf:1e:5f:b6:52:29:
         aa:0c:88:be:ea:90:5f:c2:90:c1:e1:14:9c:06:1b:22:7d:18:
         f5:12:74:2b:eb:5e:a8:ec:f3:25:20:7b:0c:d5:cb:7f:3e:76:
         3c:73:bb:ae:8d:7c:f9:52:a6:9d:8a:78:1d:4a:d6:16:c6:09:
         7b:f0:cd:e4:f5:81:b7:19:f0:81:6a:43:3f:54:3c:97:c1:6f:
         c4:14:2a:11:8e:94:03:94:91:6a:0f:6f:72:78:3d:e7:71:c1:
         aa:63:5c:9f:35:64:37:93:b0:d9:1d:b7:2b:71:d1:b6:8c:a2:
         ba:49:02:cb:8f:04:b3:90:72:62:1a:17:e3:fe:1a:cc:21:ad:
         a4:55:f5:49:16:e1:7d:8d:be:dc:8e:34:3f:74:db:61:96:9b:
         a4:23:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:49:54 2026 by rpki-client