Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/836c40ca-190a-32f1-9d85-3ff48c452bed.roa
File:                     836c40ca-190a-32f1-9d85-3ff48c452bed.roa (raw, json)
Hash identifier:          2YEN+eN4liUPVtxN91Oeq/BBCneSV8HNvEzhKrI++So=
Subject key identifier:   2D:9A:78:57:60:05:A6:BC:79:11:4F:52:A7:55:8C:F5:1A:1F:09:53
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584D83CB0A46C12BEC67670E1D00
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/836c40ca-190a-32f1-9d85-3ff48c452bed.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     19901
IP address blocks:        208.161.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:0a:46:c1:2b:ec:67:67:0e:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=3b44eb34-670c-4dbe-aeca-111a6cae833f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:8e:86:cf:72:ed:09:66:49:d7:45:d9:13:
                    76:35:eb:cf:36:c4:15:a6:3b:90:4d:70:9b:45:91:
                    07:ff:7a:6c:ba:c8:62:84:87:3a:91:a8:92:dc:f4:
                    a7:6d:ac:d6:4b:b3:64:8a:05:06:8d:2c:ce:4d:fc:
                    26:a5:24:62:19:7f:95:40:de:2c:84:62:80:a9:31:
                    40:fb:b7:82:03:9c:3d:c4:25:93:3a:b6:c7:6c:23:
                    32:80:28:15:6c:cf:21:71:58:a2:c4:ad:21:86:c4:
                    13:64:28:e0:94:39:55:08:88:9e:8a:42:db:80:94:
                    ad:9a:9a:41:b3:2d:64:99:b0:10:64:56:7d:8d:00:
                    6a:fe:b6:df:24:69:ac:0e:a0:b5:99:a4:ea:fe:89:
                    2f:bb:6e:6f:6c:92:09:d5:a6:2b:0d:c7:e4:7c:e7:
                    57:b6:2c:77:ac:01:e1:da:35:b1:4e:5a:aa:c2:cd:
                    a4:09:d7:7a:79:43:e3:27:a1:28:44:fa:85:ad:78:
                    18:cc:b9:05:0b:ba:cb:8f:20:04:cb:a0:fd:28:3f:
                    a3:ea:cc:6d:d3:fa:9e:88:23:22:ba:5b:f1:de:27:
                    a7:70:e9:df:aa:59:64:6a:85:07:fa:a4:ee:eb:23:
                    65:de:f3:fc:9d:71:06:1f:ba:a6:88:6b:71:62:77:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9A:78:57:60:05:A6:BC:79:11:4F:52:A7:55:8C:F5:1A:1F:09:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/836c40ca-190a-32f1-9d85-3ff48c452bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.161.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:03:aa:7f:86:e5:74:ad:63:e1:d2:90:ac:f2:7d:25:94:6b:
         4e:01:06:22:3a:39:f2:04:9f:7a:07:a7:9f:9a:4d:68:6b:7f:
         72:06:37:22:92:cb:41:ee:01:98:a0:2a:f5:1e:94:f3:76:fe:
         fb:7b:cb:46:3a:83:47:b3:c6:21:d4:b6:13:5f:2a:3d:e2:17:
         bf:13:89:08:eb:8b:ca:f9:53:d5:9c:50:60:c0:69:4f:4f:6f:
         a0:d9:b9:60:22:73:a6:b3:e3:af:f0:68:ec:16:5b:9b:7c:8e:
         b9:8d:d7:a9:22:ba:68:e3:e4:df:c2:ce:32:4f:ee:b3:0d:ab:
         69:fd:f5:e1:24:1c:ea:16:f1:e7:dc:a1:31:02:e1:bf:0f:ec:
         ff:6c:90:d6:a1:0a:ca:a9:05:e8:99:59:da:0a:43:76:72:5c:
         e0:e5:a2:85:dd:c2:15:8b:43:f0:44:c7:1e:ed:f2:64:2b:72:
         74:86:11:71:41:93:a2:e5:64:56:58:d3:01:97:b5:6b:76:8c:
         62:c8:55:79:5b:c2:87:b6:18:d2:b0:11:b9:5c:72:09:91:a9:
         53:63:32:18:6c:98:0c:b8:a1:88:98:fe:ac:62:d8:80:a7:98:
         ec:fd:2c:f3:96:8b:7e:9a:0b:68:58:1c:7c:93:21:61:d0:d7:
         53:96:63:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:47 2026 by rpki-client