Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa
File:                     f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa (raw, json)
Hash identifier:          wwFvmngAaJI8uWlnsgvIEiIJRSKhcVIC+tAvvgyovAk=
Subject key identifier:   EC:F6:05:FC:58:48:95:5D:F7:2D:55:A5:57:A5:2B:BC:B0:28:98:3F
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584F4972E10FFF0FC88818A9BF80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16591
IP address blocks:        136.33.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:e1:0f:ff:0f:c8:88:18:a9:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cfdca1ed-598a-4226-ac27-fccf66bde3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:ab:fe:6b:4e:76:2f:08:96:0a:99:4d:ee:
                    75:e8:86:84:30:50:0f:61:2c:ed:73:2f:66:e7:75:
                    25:5a:05:79:d8:86:e4:12:7e:0a:6f:c2:bd:23:f8:
                    b2:8f:dd:be:64:71:37:46:32:ac:80:d6:9c:57:21:
                    f2:46:6a:7f:94:d2:91:d4:89:b3:8c:34:0f:c2:c0:
                    14:57:c8:6a:c7:b2:da:21:d2:05:37:a3:de:4a:17:
                    ff:ae:38:1b:97:b8:e0:cb:87:4d:43:bd:19:d7:35:
                    99:fc:6a:29:eb:0a:2b:e8:85:72:57:52:66:69:c8:
                    7e:42:f9:ae:c1:2b:67:da:33:67:cf:8f:0e:50:fb:
                    b2:f3:bf:5d:68:5d:39:1b:2b:94:90:93:06:f6:38:
                    ff:d6:ef:a3:ba:1f:40:30:50:fe:8c:97:b1:e2:b7:
                    60:ff:b6:70:c7:0d:be:6c:5c:53:d3:9b:a9:f5:2f:
                    f0:fc:a6:9b:54:35:7b:54:06:d5:0e:4c:82:e1:71:
                    17:b4:92:61:03:9e:c7:47:bf:18:b7:8f:ac:36:4e:
                    8c:4a:2b:eb:01:c6:02:e0:8f:f9:4f:25:4a:36:b3:
                    bd:2f:28:69:9c:e0:83:ac:21:e7:3f:b3:62:b5:48:
                    bd:af:d2:3f:2d:a8:1f:bc:7d:2f:be:0c:95:01:2e:
                    c3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F6:05:FC:58:48:95:5D:F7:2D:55:A5:57:A5:2B:BC:B0:28:98:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.33.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b3:e6:81:5f:18:cb:f7:c2:ed:2d:e8:b5:72:e3:ec:9a:88:
         2a:90:79:bf:c0:7e:af:d1:e9:50:ae:15:9e:0d:8e:61:e1:4f:
         52:47:7d:0b:9e:49:67:b0:d9:45:a0:31:aa:29:25:88:73:2c:
         69:f3:b3:df:f6:61:63:7a:c0:a9:9a:e1:fc:ed:06:f1:e4:ad:
         46:77:ce:c2:0d:d5:57:95:49:0d:f4:18:2b:3e:4c:4c:2c:85:
         82:3d:b1:ca:9c:8c:7f:55:e6:d7:94:50:f8:8e:8c:69:3c:d1:
         82:89:7a:cd:5b:87:d7:fc:83:a0:0b:c1:74:bb:74:26:88:a9:
         ea:bf:f6:8c:ec:0c:fc:24:ff:b8:db:3e:6b:eb:0d:bc:30:30:
         4b:db:5d:bd:88:50:df:47:79:c5:74:af:8c:c0:27:bc:a8:00:
         29:9a:ee:ae:80:01:55:0e:26:64:4f:13:70:33:06:fb:28:87:
         3a:44:aa:be:ba:55:fc:34:0d:c5:b5:e7:fd:72:ef:6e:43:d5:
         b4:97:17:91:a0:b4:35:34:3a:a2:ff:08:57:d6:3a:9d:9b:ee:
         94:06:48:3b:1c:88:76:b6:30:80:d6:9c:38:d9:62:be:85:e6:
         5f:58:55:c6:7b:8e:a1:62:68:f3:0f:86:5d:d5:fc:63:ee:ba:
         5a:ab:3b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:45:33 2026 by rpki-client