Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa
File:                     bbf034e3-220c-355c-83ad-7b03291b912c.roa (raw, json)
Hash identifier:          Bs4i2pE8seG2P6QZW/Qsl+IWWk/RbjSFKVU5JA4rFc8=
Subject key identifier:   00:FF:D1:BE:A2:30:D3:0A:7F:21:EA:25:E9:FE:C8:64:37:22:A2:CE
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584F4974B9E87A973C36E7F6F700
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16591
IP address blocks:        136.36.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:b9:e8:7a:97:3c:36:e7:f6:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=94f409e9-59c1-42e9-88e6-b904876c4512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:32:08:f8:4d:03:31:af:a2:02:dd:33:d0:45:
                    b0:21:56:0d:2d:19:6f:88:d2:fb:b6:88:ff:60:4d:
                    e7:74:b0:01:e6:cb:ea:e3:b0:9d:c9:93:07:40:51:
                    7e:7a:24:50:1d:0d:12:97:03:40:74:93:74:71:e3:
                    53:90:f3:6d:91:f3:65:b4:66:87:23:d9:b9:a9:e3:
                    64:a1:d9:ab:48:32:b7:e5:78:d3:58:c4:c1:30:be:
                    f7:30:45:54:7a:e7:11:fa:e2:b5:c1:9a:45:7e:51:
                    d7:b7:a4:37:cf:da:8b:8c:d8:88:f8:08:4a:b2:dd:
                    ad:fc:fb:50:9c:f6:82:be:1b:84:cf:2b:b7:f1:6b:
                    e3:77:58:eb:2b:aa:9e:2d:d0:e9:47:f9:b1:d6:5f:
                    2c:85:00:6a:23:5f:7e:95:07:35:e4:91:d9:7c:ff:
                    d3:d3:05:c2:45:29:76:52:c8:d9:da:2c:7e:90:fd:
                    8c:67:c9:3a:76:ca:1f:47:19:a5:0b:67:c6:67:b1:
                    4f:10:84:dd:db:e1:2b:e2:e5:7c:f7:83:55:45:28:
                    4a:89:d9:7f:90:3e:6e:52:23:76:6b:31:eb:43:17:
                    ce:6d:77:08:46:1b:34:93:86:ce:32:f2:7a:41:1f:
                    8a:11:7e:17:75:30:0a:8c:86:bd:56:75:a7:88:65:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FF:D1:BE:A2:30:D3:0A:7F:21:EA:25:E9:FE:C8:64:37:22:A2:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.36.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d3:51:98:6f:e7:c4:8a:86:b9:61:e5:65:2d:2d:c3:93:be:
         e4:99:e5:f1:b8:06:ff:60:60:ef:04:a2:fd:ad:4e:b1:dd:e8:
         11:ee:bf:77:aa:24:53:fb:f9:0a:0b:19:c8:7c:d3:98:1c:e6:
         b1:ab:a5:00:59:b8:b9:81:0c:a8:0f:0a:72:b2:b6:fc:d1:97:
         64:7a:ba:dd:a6:9f:0c:4f:10:9b:44:21:38:3e:71:ac:23:89:
         0d:ef:91:62:3f:80:59:bd:65:45:93:ff:b8:82:c2:b8:b4:bc:
         0c:35:1e:48:46:f4:f0:a0:00:17:d3:2b:11:93:3c:24:55:a9:
         1f:ae:4f:45:b2:98:46:f8:90:e5:4c:4d:0b:d2:e2:57:44:6c:
         ac:cf:07:39:83:33:47:f4:11:8a:3d:0e:d5:e8:b3:86:44:87:
         98:fd:b8:d7:8c:6f:42:bd:73:94:c5:c7:98:1d:38:73:f1:89:
         03:6b:6b:ac:20:33:02:a8:3a:3a:eb:e8:4f:b8:01:17:5b:de:
         ea:94:b2:4d:d7:09:57:d0:b7:94:63:13:94:20:90:4e:07:5c:
         c6:a3:80:92:99:c8:19:d9:36:b3:dd:20:c0:9f:c6:e6:cc:e4:
         98:44:db:03:bf:0d:2a:e1:c9:6f:9d:ad:04:34:1f:e1:fb:ea:
         f3:ad:e8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:24:35 2026 by rpki-client