Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa
File:                     e969eb6b-84bd-33ed-adf5-6a299076b70f.roa (raw, json)
Hash identifier:          tGyPEMiF9ev5VLsCpAkobngCZuton1tAtoyUmTOvF0E=
Subject key identifier:   B8:30:E2:D7:5A:17:5C:91:2A:1C:66:77:86:00:7D:FE:BB:3F:88:58
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584D6AAA79DAFDFCA069E3372820
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     32870
IP address blocks:        136.147.164.0/22 maxlen: 24
                          136.147.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:79:da:fd:fc:a0:69:e3:37:28:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=e3dba1d6-7661-4bd4-9b42-7de81bdf0e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b3:8c:8b:64:62:b1:fa:9f:4e:65:c7:fe:3d:
                    2b:27:3c:f0:f5:e2:81:e7:65:5e:e2:7c:6e:d0:19:
                    6c:b2:f6:0f:f9:f6:d3:03:cf:69:4b:2b:83:e5:82:
                    fd:dd:c3:02:1c:50:25:28:77:96:ab:f8:10:a8:b3:
                    d6:a7:4d:c4:a6:25:c8:38:10:98:f9:4b:34:ff:be:
                    5c:d5:05:4f:fd:fd:c9:35:64:73:d1:19:d0:b4:1c:
                    8a:8b:c3:e0:94:79:3b:19:4a:c7:de:f4:58:f3:83:
                    80:d4:be:e2:b1:b0:84:c3:23:9b:a9:e1:5c:7d:37:
                    91:ac:94:47:fb:82:c7:4f:f4:9f:f6:96:6b:fe:3e:
                    26:28:ce:a9:b7:b9:31:40:69:34:f1:2c:00:71:8a:
                    7b:9d:a2:a1:19:ca:9c:ab:c9:9a:e2:1c:65:7b:7a:
                    b0:ca:a2:89:62:2d:59:b0:b3:4e:f1:d7:2b:4e:de:
                    fc:8f:57:ae:ef:c4:b5:13:61:36:cc:70:d4:97:4e:
                    94:ca:e7:50:e1:ca:43:72:47:85:a0:d0:4e:51:c0:
                    d5:32:f3:c1:df:b0:10:60:1a:1d:10:04:90:d9:46:
                    c8:53:11:e5:71:34:fc:7e:5a:ef:de:f4:b1:86:dc:
                    93:bb:8f:7c:a4:d2:31:f2:16:7c:0a:e6:e4:48:50:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:30:E2:D7:5A:17:5C:91:2A:1C:66:77:86:00:7D:FE:BB:3F:88:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.147.164.0/22
                  136.147.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:36:21:e0:13:4d:a3:f0:16:b7:47:8a:90:b9:86:75:40:51:
         89:5d:fe:e7:67:57:a0:f9:37:fe:85:cc:7e:d7:fb:70:df:d4:
         4e:73:ea:80:03:06:b3:95:c6:ef:51:30:a0:a4:17:34:76:60:
         58:31:f2:51:e8:40:2c:05:5f:d4:28:ee:85:98:3c:9c:1e:14:
         e7:44:21:dd:c4:65:6b:a3:30:09:38:a6:ec:fb:f7:a9:53:7e:
         5e:6c:fd:15:eb:94:15:ad:93:fe:db:61:8a:34:21:d2:31:50:
         8c:8e:44:d3:a8:f3:78:8d:6e:5d:bc:97:23:ac:c5:b2:f0:64:
         51:61:b3:14:d8:86:d8:9b:5d:42:cc:d8:63:12:22:b7:34:11:
         27:5a:b8:da:64:99:47:ca:eb:91:40:9b:1a:5f:8d:ab:04:83:
         5c:dc:f8:43:7d:5b:f5:e0:bd:9b:e6:ea:a3:f9:b1:c1:cc:2e:
         b6:1c:a6:d5:da:ea:ab:10:f8:ca:53:73:af:9e:3c:d7:c6:ce:
         4a:33:dd:67:c2:d9:ad:a3:ca:b6:38:7d:f3:9f:32:03:12:4e:
         1c:01:27:c5:56:e4:be:c3:39:48:b4:92:4c:24:53:b0:40:55:
         e6:d7:4c:af:ba:1a:ba:32:4b:51:58:06:32:70:bf:b8:4d:61:
         44:2e:e2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:14:11 2026 by rpki-client