Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eaccb886-48b5-3574-bc7a-5165e9a58e3a.roa
File:                     eaccb886-48b5-3574-bc7a-5165e9a58e3a.roa (raw, json)
Hash identifier:          aqyqqAWFXF1vpQnHOrgyBtb6JMVHoTQ4Axg2LFc5R44=
Subject key identifier:   AE:DD:96:AD:61:C7:E5:AA:C0:9C:7D:FD:D5:08:A4:62:4E:E7:46:78
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584F498C213479E7D0CEF3FB9A40
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eaccb886-48b5-3574-bc7a-5165e9a58e3a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16591
IP address blocks:        136.50.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:21:34:79:e7:d0:ce:f3:fb:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4947361b-c315-4a2b-b157-4d1aee938134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:7e:94:c5:e0:ab:14:40:b7:26:5c:7b:4c:
                    94:07:87:84:7a:cf:55:7f:91:d7:16:b7:ee:8f:f8:
                    c3:eb:57:8c:5b:0d:4c:2d:d9:47:e5:28:4a:04:e4:
                    13:30:ce:03:19:f3:d8:68:09:ed:64:1a:87:32:57:
                    66:ee:41:41:1b:99:1e:e0:fe:79:39:d5:f1:0d:b9:
                    ef:38:00:ef:ce:6e:4c:ea:2b:60:a6:90:9a:ac:ce:
                    ec:9c:d6:e6:a2:7f:d3:ea:62:18:ee:57:19:53:fe:
                    0c:10:30:c3:b9:5a:eb:7d:bd:8e:1b:3e:07:f7:2f:
                    19:35:7b:0e:d7:2a:5d:c0:33:7c:f9:91:19:f0:5d:
                    32:6c:2d:9f:28:57:53:02:02:e8:6b:82:10:dc:c8:
                    b5:91:f7:05:88:fb:a7:bc:15:46:c2:71:28:d1:f4:
                    d4:83:ce:41:50:68:ef:de:a2:11:83:61:79:c3:e2:
                    99:49:d8:8a:dd:d7:70:b3:48:87:0b:c0:74:76:2c:
                    0c:c4:7a:59:68:00:85:e0:b0:e9:fa:a9:82:c4:25:
                    75:2a:f4:4b:fa:28:02:e3:14:17:21:54:2a:20:e0:
                    cf:cd:e5:f9:a5:b2:a4:26:ee:b5:39:d1:b1:eb:ab:
                    5e:ca:5a:21:5d:10:10:f6:1b:f0:4b:16:56:65:90:
                    9a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DD:96:AD:61:C7:E5:AA:C0:9C:7D:FD:D5:08:A4:62:4E:E7:46:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eaccb886-48b5-3574-bc7a-5165e9a58e3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.50.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:44:01:bb:a7:d5:a1:3a:ae:e6:7b:14:f3:26:06:82:a0:12:
         dd:59:cb:d8:73:47:f0:33:c4:22:b5:cc:9c:8e:17:37:6a:70:
         7e:29:e8:40:2a:12:8e:23:8b:8f:f9:20:e9:6f:b6:86:a4:66:
         e4:40:b1:f1:1f:1e:f1:bb:c6:95:51:3f:e3:a9:74:bf:34:36:
         f8:a9:68:e0:71:68:c3:3d:11:5e:75:05:33:b9:9c:06:60:f6:
         77:58:c1:a5:d4:84:0e:d9:4e:87:df:a8:1e:40:46:22:2d:86:
         e0:09:3a:0f:06:60:34:3c:74:a1:7f:83:99:0c:e5:23:a0:f2:
         f7:79:c9:f1:4b:bd:10:75:25:bb:49:30:0b:b1:d3:12:09:46:
         86:0d:f9:64:50:fc:8c:11:88:60:a2:ca:6e:8f:6c:3d:df:22:
         11:d5:32:1d:5d:cd:49:c9:fe:e9:d0:48:57:cd:32:1a:0a:e5:
         2f:ce:cc:9a:e2:da:88:10:77:e5:d5:58:6b:03:9a:e1:16:fe:
         ca:42:68:33:fb:6a:d4:0e:ea:7c:59:8f:f6:49:95:6b:e9:9f:
         c2:84:b7:5e:90:48:ff:0f:f9:ca:75:35:21:64:9e:0b:73:c9:
         be:15:c4:e8:4a:43:99:31:4a:1d:ec:f9:2f:cf:3e:c8:6a:6e:
         51:79:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:47:25 2026 by rpki-client