Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/acdf3822-d640-37df-a648-cd40a51d2266.roa
File:                     acdf3822-d640-37df-a648-cd40a51d2266.roa (raw, json)
Hash identifier:          zZVUx5cx6eWsUjlV9UmX33auhsy0K0eA6sQaugdgA10=
Subject key identifier:   F2:D8:8F:50:C8:8B:9B:FB:2B:F1:C8:87:07:0F:16:11:72:DD:A1:82
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FADCDA752F7DABB679320
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/acdf3822-d640-37df-a648-cd40a51d2266.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     62044
IP address blocks:        136.226.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:ad:cd:a7:52:f7:da:bb:67:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=00e8f212-cd58-48d2-8426-1942803d2c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:50:a3:1b:d2:82:f3:4f:4e:88:3e:67:cc:
                    8d:c1:b7:5f:8d:94:dd:74:1b:80:92:8a:82:f9:20:
                    d2:67:a0:13:76:65:01:7c:db:74:3c:ca:a4:28:fc:
                    47:65:6f:dd:d6:20:45:78:53:8e:fd:19:eb:61:4e:
                    e7:ec:3d:a3:83:3f:79:53:ce:ff:d3:7f:b5:ba:9f:
                    0d:25:89:7e:4f:11:7f:b9:4c:d4:1b:33:3d:b6:c9:
                    1b:f3:60:32:78:d3:c6:08:7a:fa:e5:e1:f6:22:1f:
                    af:08:41:4f:86:72:e1:68:aa:49:e6:ab:24:6d:31:
                    44:14:42:be:af:03:aa:5f:22:ee:84:d6:1a:8a:b2:
                    dc:81:3f:93:da:29:f7:46:22:e5:02:b6:8d:a8:31:
                    ae:7b:6c:7f:b8:5e:43:26:29:64:43:48:fe:8c:2b:
                    80:5c:d8:a5:3f:09:39:99:dd:c0:7b:ee:8f:14:ee:
                    d1:a8:d4:fd:43:c5:e5:f7:1c:2e:ba:53:fb:d5:09:
                    fb:ca:f5:6b:76:1a:92:7e:87:1b:7a:cf:4d:97:82:
                    1a:4f:04:07:d6:3d:18:54:d9:76:30:07:b4:b9:fe:
                    ce:fe:7b:46:7e:f5:fd:a7:95:f1:4a:d4:b3:8d:7d:
                    d3:82:36:b1:6f:5d:ff:e3:45:ad:46:08:22:73:f7:
                    ce:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D8:8F:50:C8:8B:9B:FB:2B:F1:C8:87:07:0F:16:11:72:DD:A1:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/acdf3822-d640-37df-a648-cd40a51d2266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:d5:7d:ed:fa:bb:1f:f1:86:ac:67:c0:84:a5:7e:2f:65:f2:
         17:05:6b:fb:c9:d8:0c:fc:ca:79:e0:8e:f7:6a:69:22:79:03:
         67:f0:aa:37:f9:b3:cf:f7:66:f5:da:c4:59:0c:63:72:5d:7e:
         1a:fe:27:da:40:f8:2c:2c:5e:30:82:b2:2e:eb:29:7b:8b:76:
         59:1d:d8:a9:d7:65:5c:72:ff:d8:8a:a8:bc:c3:09:d3:36:53:
         40:0b:98:8f:7e:dd:09:8d:27:7b:25:98:79:f8:4d:1d:5e:14:
         11:76:1a:cc:4b:ed:1d:75:8e:f7:bf:a3:c7:0a:3d:80:2d:d3:
         7f:dc:fc:68:ec:d5:d6:fd:53:60:9a:fe:40:68:2d:a2:38:be:
         77:7d:e2:fb:03:c5:05:c5:97:6a:68:b2:35:1d:7d:a0:9a:ff:
         78:b2:0b:e7:de:09:b2:5f:62:46:c8:20:17:e2:c7:7c:98:d6:
         4f:da:08:3d:4e:2d:7f:86:dc:03:41:04:86:f6:01:96:81:28:
         e6:29:4e:ce:95:96:e3:ee:5b:8f:6f:a0:00:cb:c2:f8:45:fd:
         60:09:51:9e:30:36:f8:4d:b1:b5:fd:5c:dc:b0:e6:b0:8a:a6:
         b6:dd:d0:9a:ba:7e:7e:1d:8d:99:ef:db:34:35:ab:a9:62:0c:
         27:c0:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:07:27 2026 by rpki-client