Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96274b94-74ed-3d67-9ac2-ce24f87a9057.roa
File:                     96274b94-74ed-3d67-9ac2-ce24f87a9057.roa (raw, json)
Hash identifier:          wBiuXX5F42M4SUzCbn53tumulSkkzA4vcP9EpIagxKo=
Subject key identifier:   F3:F9:F2:9F:D8:A3:9A:3C:76:20:C8:CB:11:B9:BE:2F:A0:BD:F7:D4
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584F49879D5C6047623E06303240
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96274b94-74ed-3d67-9ac2-ce24f87a9057.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16591
IP address blocks:        136.56.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:9d:5c:60:47:62:3e:06:30:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6cea76b0-f9a0-46dc-8218-750daa4f1656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4d:f2:0a:21:1c:4d:7e:bd:bb:15:c4:94:94:
                    42:51:72:cd:2b:18:79:a2:9d:f6:9b:2f:3b:ee:ff:
                    0a:d1:44:8e:e8:8f:2d:45:33:cc:13:34:01:01:80:
                    09:89:16:ff:c1:d7:09:15:93:e1:90:e7:50:ac:0e:
                    26:6b:ab:67:bc:66:e6:3f:87:80:3e:1b:6d:09:da:
                    47:5a:bf:37:57:e2:2e:b7:d2:60:41:de:80:f2:7f:
                    d9:56:b1:b2:8b:28:36:a8:65:d6:2b:f5:cc:76:18:
                    07:b7:67:90:90:cd:23:fd:ec:96:b8:5a:90:43:a3:
                    e9:b3:91:d1:37:53:85:3d:46:0d:6d:d4:4b:a6:d3:
                    45:66:ac:80:84:59:8f:8b:54:66:b2:dc:90:c7:46:
                    06:84:0e:75:be:07:c1:b5:93:e9:70:ec:66:35:5a:
                    61:e2:30:88:42:b6:c8:76:03:77:5d:83:4d:92:ba:
                    e3:ed:e6:b6:60:6a:3d:24:4f:b5:98:a8:83:3a:74:
                    45:6f:ba:23:29:d9:02:da:5f:ac:57:7e:f5:22:5c:
                    2e:7e:c9:74:8f:d2:2c:d9:ec:6d:e8:6a:6f:c2:ab:
                    b6:04:02:3c:89:00:02:e2:39:09:fb:0d:26:2f:4e:
                    23:f2:2f:43:73:26:8a:94:fa:93:56:e7:9d:f9:8c:
                    95:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F9:F2:9F:D8:A3:9A:3C:76:20:C8:CB:11:B9:BE:2F:A0:BD:F7:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96274b94-74ed-3d67-9ac2-ce24f87a9057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.56.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:86:36:83:86:0d:3e:5f:3e:bf:bb:20:70:1d:3f:d2:fe:96:
         32:30:11:63:c2:3e:59:a2:5e:3b:95:cb:ff:cf:d0:10:71:30:
         13:65:e5:bf:af:94:c7:25:b6:bc:a3:e5:ab:c6:b0:2c:ac:8f:
         8f:d4:0f:f0:7a:9d:bd:2f:aa:9b:18:c6:c4:87:9c:7a:5a:36:
         c6:34:3b:99:38:0f:2e:f1:f4:84:15:16:cb:31:25:bf:8a:24:
         d9:c1:f6:95:db:12:7e:68:81:c2:d4:24:ff:8a:82:6e:88:34:
         31:6e:af:d5:ed:d2:8c:38:ef:26:7b:90:60:88:a3:56:ed:4c:
         3f:a2:23:4d:f5:6b:a1:be:46:46:fe:7e:ab:11:cc:d3:9c:e5:
         92:9e:a6:35:cd:cd:84:2e:a2:2a:bf:44:c0:3b:b5:42:20:ea:
         57:fd:f2:09:b3:85:c8:05:b6:91:de:a2:55:9b:a3:91:e8:67:
         59:e5:41:d0:44:ec:79:7a:13:28:4a:4b:2b:7e:d4:e0:46:27:
         f5:de:e0:cb:ad:e7:b2:95:93:bf:92:72:4d:07:60:84:22:9b:
         42:02:c6:ce:62:5b:74:b8:2d:c4:e8:4f:5b:71:93:6f:c3:de:
         50:37:46:4f:89:6e:92:12:64:04:1f:ba:d1:5c:cf:43:b4:49:
         f7:21:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:42:18 2026 by rpki-client