Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa
File:                     1b223cca-1417-3066-b397-805664ddda0b.roa (raw, json)
Hash identifier:          ffkTrM2N2KWaq2lnh3kZ2g4cVspvJ5HtRRpmD7n8fI0=
Subject key identifier:   7C:A5:DE:81:78:AF:9D:5A:54:87:06:E6:89:AE:34:51:2D:27:0A:A3
Certificate issuer:       /CN=836bd820-5504-47bf-baac-f0d3a943c97c
Certificate serial:       010D0C9F4328584D5E1A6BA20321B1F1B5071DF0
Authority key identifier: 45:EF:F4:68:07:3E:9B:CD:7B:59:64:3B:49:F3:9F:84:F8:68:2A:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     36419
IP address blocks:        64.239.0.0/22 maxlen: 24
                          204.10.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:6b:a2:03:21:b1:f1:b5:07:1d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836bd820-5504-47bf-baac-f0d3a943c97c
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=d10d104b-9528-4d9c-b496-d1d616a5ce1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:e3:20:c0:51:3c:9a:1e:09:8e:59:82:25:
                    d5:24:50:31:de:c1:86:12:83:e7:82:94:ec:ba:07:
                    4a:3e:2f:cb:e2:b8:26:8b:17:58:9f:4c:27:51:c9:
                    a1:cb:13:e7:fd:7f:5b:fd:89:70:21:8c:a2:a9:08:
                    36:ff:43:ef:65:40:47:fe:43:8c:29:0e:c0:27:84:
                    44:bf:3c:c0:e9:c2:f8:cd:2a:2f:d8:ed:00:c1:91:
                    aa:9f:17:9b:9e:81:97:60:cc:1f:79:f0:56:ed:8c:
                    10:5b:79:ef:a1:01:4c:a0:fb:d6:37:9b:3b:d0:84:
                    3c:71:55:02:41:2e:39:67:88:63:35:53:d6:f6:02:
                    ef:1c:ab:59:ca:fb:5c:27:83:72:d8:96:4c:b9:2d:
                    bd:99:e6:82:1d:bf:94:8e:9c:ad:09:33:5f:a0:02:
                    aa:63:2a:ef:60:a7:e9:ed:71:bc:2c:85:ff:d0:02:
                    2a:f8:53:7a:6a:4c:aa:73:72:dd:eb:52:dd:ef:79:
                    4c:01:94:78:c5:85:23:da:b4:06:59:10:51:a9:a7:
                    0b:4e:31:88:53:44:63:8f:3c:0f:57:78:e1:55:5b:
                    f3:1f:e1:76:0a:3a:c8:c0:ea:a9:42:a1:4e:94:4c:
                    91:09:e5:9f:ac:af:bc:95:03:aa:ca:d4:a4:88:5c:
                    e8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A5:DE:81:78:AF:9D:5A:54:87:06:E6:89:AE:34:51:2D:27:0A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.crl

            X509v3 Authority Key Identifier:
                keyid:45:EF:F4:68:07:3E:9B:CD:7B:59:64:3B:49:F3:9F:84:F8:68:2A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.0.0/22
                  204.10.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:70:4d:37:c7:32:62:60:bd:51:b1:52:14:f7:ba:53:fd:bf:
         75:7d:8d:ac:f8:da:11:8c:04:5a:be:5e:22:a3:1d:c8:80:9c:
         b4:eb:80:0e:7a:95:1b:b5:8e:4e:fc:bb:82:e4:d3:68:8b:c5:
         b6:19:60:5c:bc:c9:f7:c4:df:de:05:a0:04:85:9d:f2:8e:07:
         6e:e9:9b:92:61:d5:c0:7a:03:6f:09:a3:21:2e:1f:d6:f5:3a:
         c3:24:64:a3:29:18:8d:b6:77:84:d8:d8:12:bb:ed:c5:6d:76:
         27:c3:17:08:05:84:3a:ba:84:fc:ff:5c:a0:b6:47:a2:45:4c:
         52:12:6d:04:3b:dc:e3:c5:d2:4e:af:37:21:aa:87:8f:c2:2c:
         a4:ad:cc:bb:6c:61:bd:27:cc:57:6b:09:6c:5a:2a:e8:37:4e:
         86:87:c9:12:5f:75:d1:c0:ea:29:f2:3a:5d:71:48:d0:cd:cc:
         80:c9:5c:c9:90:bb:95:16:58:5b:e3:9c:f8:3c:f5:7a:67:7f:
         88:84:d8:af:1a:ea:09:c8:9c:5e:b6:35:89:66:82:87:e9:81:
         f7:e0:e1:9c:06:ba:f8:bb:0e:67:99:c1:dc:c4:dd:cd:86:ff:
         bb:e2:e9:26:60:f8:4b:58:0c:44:77:2f:d6:a2:aa:79:6d:2f:
         fe:22:9c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:37:30 2026 by rpki-client