Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa
File:                     ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa (raw, json)
Hash identifier:          +YWtNFFNHM1zbU9ahKhkvabdGxnkOzJPTRvZz7pBYoo=
Subject key identifier:   53:EC:06:1B:A4:6B:6C:9C:61:F2:4B:22:BF:76:93:A4:F8:AA:EF:3A
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584F4974A512BDC847F380EE00C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16591
IP address blocks:        136.60.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:a5:12:bd:c8:47:f3:80:ee:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=438bc513-76d2-4a1b-a545-b47289376339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:f2:70:8e:73:a5:6b:8b:22:92:ac:bf:a2:
                    a8:48:f5:cb:63:47:f9:74:6e:65:92:f3:a0:3e:82:
                    00:17:4e:9f:82:b1:99:15:06:d7:a4:45:a0:74:1c:
                    47:c0:26:6f:74:30:5c:f2:91:38:0c:b3:df:f2:35:
                    19:82:c4:12:7c:a9:6e:4b:17:36:4a:dd:83:61:30:
                    55:7e:68:d5:93:67:60:3a:2c:62:f9:12:f0:46:19:
                    11:b1:87:98:8a:b7:dc:32:10:57:c2:82:ff:59:bc:
                    8d:1c:4b:74:34:f3:f0:76:bb:46:b5:8b:b3:53:8f:
                    1e:7f:5d:ee:dc:28:bb:1c:71:08:13:4b:f4:e3:8a:
                    3e:91:44:42:a5:bf:84:12:d7:dc:95:0f:88:80:58:
                    de:ae:e9:6b:8a:3b:14:fc:f7:c0:32:16:b6:5d:d9:
                    35:65:5f:72:4c:99:52:3f:90:9e:59:21:21:33:8d:
                    54:b3:dc:91:04:37:b0:91:a8:de:05:2e:59:cf:76:
                    da:21:4c:de:40:39:ba:c6:b5:b0:ad:15:bf:e7:5e:
                    09:ac:bd:ea:7c:9e:7d:a7:4c:b4:28:61:54:2b:54:
                    4d:67:7c:a8:60:26:be:a4:63:ee:19:ab:0f:88:80:
                    10:74:ef:2c:12:ba:f0:9d:cb:d6:8b:36:47:85:fe:
                    51:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EC:06:1B:A4:6B:6C:9C:61:F2:4B:22:BF:76:93:A4:F8:AA:EF:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.60.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:21:e4:dd:30:00:25:9f:a6:c9:24:a5:df:c7:10:6e:60:42:
         27:f6:94:a9:bd:1c:b2:69:d1:a6:82:77:63:91:4d:e0:91:7a:
         49:26:d3:fa:7e:fd:38:42:3d:6d:0c:5d:34:de:39:ef:89:5c:
         0f:fb:80:a7:f2:c0:08:34:4e:38:7c:07:02:d3:b8:f9:50:62:
         6d:91:fc:49:52:08:6b:09:46:e4:a6:fd:b6:1b:51:07:23:47:
         7b:ff:c3:2a:fb:36:60:2b:1d:0b:a7:77:da:a4:3a:61:cb:88:
         54:72:60:e0:09:87:6c:ae:c6:93:74:29:d6:82:9c:d5:72:5b:
         7e:86:33:cb:23:8d:f7:1c:87:ea:a3:f2:2d:f3:89:e4:de:03:
         02:55:07:93:6e:18:b1:a9:86:1c:ed:2e:15:25:dc:ff:55:c0:
         e7:a6:94:54:3a:6b:da:c5:cf:5d:1d:46:bc:b4:ce:cd:12:b2:
         7c:12:cc:40:40:de:0b:d8:6d:bb:fd:8b:39:d9:79:db:8b:18:
         7d:c6:81:f7:a5:f2:b2:cf:11:ee:e2:6d:b0:bf:52:88:1e:9a:
         a9:b0:a8:93:5a:2a:84:37:19:fd:7d:81:c0:d0:da:b4:a2:87:
         5d:5e:f6:12:ee:73:0d:6d:e0:13:29:5c:af:65:21:cc:e2:af:
         37:8e:e8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:03:05 2026 by rpki-client