Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa
File:                     96c60abd-645f-326f-b5a5-66908173a9c0.roa (raw, json)
Hash identifier:          gyUglqvr8ekouSh4UbfSm20+BH8RRJMAIE7Dh6RucGU=
Subject key identifier:   B0:1D:D0:90:1F:92:64:3F:E4:56:40:C5:9A:48:86:E4:15:58:E5:82
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D32D4D1090DE4A61E50827FA0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa
Signing time:             Tue 17 Mar 2026 13:00:41 +0000
ROA not before:           Tue 17 Mar 2026 13:00:41 +0000
ROA not after:            Mon 15 Jun 2026 13:00:41 +0000
asID:                     16591
IP address blocks:        136.52.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:d4:d1:09:0d:e4:a6:1e:50:82:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Mar 17 13:00:41 2026 GMT
            Not After : Jun 15 13:00:41 2026 GMT
        Subject: CN=90f62b0d-5c73-4078-b004-0dd1e9a06036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:77:43:d5:60:cc:94:67:45:56:c8:df:43:
                    f3:b4:22:e0:c8:0e:b2:c5:e4:3e:76:a0:5e:78:f2:
                    ef:d9:a4:a8:33:3a:a4:1d:cd:7c:4d:9e:42:7e:57:
                    6a:e7:12:a3:62:e6:7d:5d:c7:16:56:ac:c1:d3:e6:
                    cf:e6:e8:c3:61:b9:8b:37:b1:98:3f:6e:be:04:65:
                    a6:99:db:17:39:c9:3d:35:1c:0d:b1:82:40:0c:03:
                    e3:b0:05:80:0b:de:35:85:e4:22:00:23:8a:15:e5:
                    aa:f7:c2:58:5d:c7:87:de:f3:4e:3e:9d:20:50:73:
                    ae:9a:b1:b2:cf:a3:07:79:57:89:a8:23:91:a2:8a:
                    20:31:58:9e:07:e0:eb:ab:70:2c:8a:3d:44:97:4f:
                    76:68:f1:e5:79:34:4c:01:39:0f:5b:57:b9:98:af:
                    00:b0:fa:64:25:d1:f9:ab:d2:73:e9:ce:bc:10:32:
                    07:ad:14:4d:bf:7a:5b:16:00:19:38:8f:e5:d3:f9:
                    df:48:83:6d:3e:91:8b:14:3e:9f:c0:71:5c:df:21:
                    b1:b7:71:87:94:86:a7:d8:ce:66:05:9f:71:3a:ad:
                    f9:a1:09:0d:3a:9b:e1:f4:34:0e:fe:87:5b:2f:50:
                    13:cd:30:13:4d:7c:12:47:52:02:e3:26:2f:19:79:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1D:D0:90:1F:92:64:3F:E4:56:40:C5:9A:48:86:E4:15:58:E5:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.52.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:03:fb:49:1d:63:07:e1:4d:98:1c:d6:e0:59:39:85:88:65:
         52:cd:ce:b3:73:04:42:e6:38:d0:92:fd:1f:d9:d4:68:33:d6:
         84:b8:ef:88:28:8e:44:f7:6a:f0:59:f0:55:e1:0f:c7:9b:ab:
         75:e7:76:41:04:6f:0b:a6:5b:0d:2d:6d:c6:2c:ca:6d:02:32:
         e9:d3:43:d4:2b:b5:fd:6d:1d:11:87:06:1f:9a:e7:99:76:3a:
         ef:71:0c:b0:bb:56:94:17:d7:c9:81:65:45:94:4c:b2:3e:cf:
         6c:12:9b:13:f7:41:ce:29:9f:12:a0:b0:2c:82:4c:ad:b9:60:
         2c:47:0b:3e:1b:0c:c4:60:f7:e3:f2:ca:ac:66:48:bb:ca:64:
         04:9a:e4:d1:f1:98:0b:25:dc:96:a9:c1:1c:c0:98:8c:9a:65:
         bd:c3:b8:bd:55:cd:ea:9b:94:73:fb:68:70:ab:74:bb:46:b8:
         fc:d4:d9:7a:a6:4d:d8:55:ec:73:2f:cf:49:5e:9b:84:35:6a:
         18:57:51:17:87:84:4b:71:e3:13:56:02:51:52:f5:12:3d:d8:
         79:f9:18:2c:ae:ba:92:b2:f2:bd:04:5d:69:d1:71:81:a5:53:
         88:4f:10:39:ef:ad:87:a8:ca:3f:a4:89:5b:4b:75:3c:d0:f3:
         55:65:20:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:09:23 2026 by rpki-client