Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/ad56ed04-b8a7-3dcb-aadf-3ee1d5541952.roa
File:                     ad56ed04-b8a7-3dcb-aadf-3ee1d5541952.roa (raw, json)
Hash identifier:          O3P9Yq1fWFzYfLhFNyPem+ahC0PZA1ShQwQGY2Vg86E=
Subject key identifier:   62:F5:5A:93:04:2C:68:AF:89:DD:2F:55:52:77:A6:CB:67:4F:87:45
Certificate issuer:       /CN=6c19ecdd-eda4-4041-9b92-0ac7a99fc631
Certificate serial:       010D0C9F4328584EA79428BE102B0E255F9938A0
Authority key identifier: E2:16:05:3D:59:79:3C:06:9F:1F:5D:37:57:BF:DF:69:62:35:DD:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/ad56ed04-b8a7-3dcb-aadf-3ee1d5541952.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399844
IP address blocks:        198.169.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:28:be:10:2b:0e:25:5f:99:38:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c19ecdd-eda4-4041-9b92-0ac7a99fc631
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=008fc351-1e74-46f7-944f-80ade0e3084a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:85:7c:ad:cb:63:e0:13:6c:84:f9:30:76:
                    8a:ec:8f:42:3a:4f:16:65:7b:ca:d9:2f:ca:e2:8e:
                    cd:65:7a:2a:d0:a4:ce:43:a1:1f:92:be:04:ef:92:
                    a5:52:ff:a4:b0:76:92:47:ae:13:23:90:07:bc:2d:
                    e3:64:24:99:96:f8:1c:8e:56:84:f6:7a:23:7f:e2:
                    6c:8e:01:e7:27:66:36:3d:ef:fd:28:96:1b:14:08:
                    88:0b:92:0f:e3:94:0a:1d:24:ce:c2:99:9b:85:44:
                    72:a3:de:5b:f5:4e:b6:90:e5:1b:0b:46:31:58:53:
                    24:48:ce:20:89:b4:3a:c2:86:5d:e7:e1:21:ce:d8:
                    92:cb:e6:fe:ba:11:83:35:d5:bb:1e:81:50:2b:ab:
                    41:60:53:6e:e1:dc:48:98:e1:45:e4:7f:d4:2d:5b:
                    ac:20:f3:e1:aa:b8:8f:9f:dc:22:e9:42:2a:fd:be:
                    dd:7c:09:34:34:f2:25:e2:89:e1:38:f2:b6:d9:d8:
                    58:53:4a:1e:b7:af:a7:ab:ba:80:dd:d7:a8:fd:b4:
                    19:2e:c6:cd:bd:8e:57:c8:f2:2b:bd:41:2c:a0:96:
                    e1:be:76:95:72:83:92:3c:05:af:df:ca:38:9a:d1:
                    8d:ff:45:b0:2d:54:58:d0:4e:f7:4e:63:86:2f:4d:
                    44:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F5:5A:93:04:2C:68:AF:89:DD:2F:55:52:77:A6:CB:67:4F:87:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/ad56ed04-b8a7-3dcb-aadf-3ee1d5541952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.crl

            X509v3 Authority Key Identifier:
                keyid:E2:16:05:3D:59:79:3C:06:9F:1F:5D:37:57:BF:DF:69:62:35:DD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:93:30:46:c6:bf:a2:5f:0d:2d:d5:63:86:50:dc:a1:1b:aa:
         97:46:ea:87:9b:63:57:32:b5:40:49:53:cb:33:b3:5c:e1:b0:
         e5:31:a5:a5:8c:84:4b:74:0f:e6:fe:3a:3c:75:be:5f:90:d2:
         24:90:5e:47:17:d1:23:fc:12:64:cf:e0:6f:62:83:f3:7e:e6:
         0b:d4:8e:d8:6a:22:94:f3:df:99:66:c1:e0:aa:05:92:b2:46:
         00:5b:d4:32:b5:1c:55:37:2a:72:15:cf:8d:ad:62:49:c8:64:
         39:68:cb:0c:64:a0:8c:93:0e:65:18:c9:51:37:39:4e:64:4f:
         8a:89:89:68:eb:5d:53:13:df:1f:61:9d:93:85:70:77:aa:16:
         7b:98:4f:0c:2a:87:6c:54:bb:5a:51:da:f8:7b:ad:55:c4:29:
         df:da:6c:a2:4d:0f:b5:6a:9b:02:c0:8b:de:b2:5d:c8:1f:40:
         91:91:99:3f:45:a1:4e:9c:6b:5b:8e:74:49:1c:fc:d2:d2:45:
         c3:94:13:0f:77:0e:9c:fa:73:eb:17:20:91:8a:7a:ee:ca:06:
         a1:f5:9d:22:64:fe:16:f3:35:9f:31:28:99:fa:44:c9:9a:b0:
         c4:60:60:54:7a:d8:5d:db:1d:73:17:d0:37:59:59:d3:82:63:
         0c:27:d5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:53:22 2026 by rpki-client