Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0d8fec9f-8cb4-3884-a230-e8ab6702d6e4.roa
File:                     0d8fec9f-8cb4-3884-a230-e8ab6702d6e4.roa (raw, json)
Hash identifier:          V+w9fJXrZzMitBWyld1Q7cuy4NsDM/IV4c/jCdXz/pU=
Subject key identifier:   21:DE:8B:98:13:B8:CA:36:CF:B4:0B:23:D3:A4:A7:D5:37:38:AB:92
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E059BBA4FC0012A22531001C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0d8fec9f-8cb4-3884-a230-e8ab6702d6e4.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:ba:4f:c0:01:2a:22:53:10:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=fa810473-b6c5-4957-b448-b984b79906fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7b:19:af:cc:d9:a1:42:38:0d:69:2a:ad:07:
                    6d:65:92:79:70:35:3b:87:9d:3c:3d:c2:40:39:47:
                    59:8b:91:dc:6d:a6:34:2e:ce:48:0d:a3:e9:48:11:
                    3e:23:eb:78:b6:d5:1b:70:24:55:5d:20:09:14:93:
                    a4:d1:8d:15:b0:23:00:c1:c8:ae:4b:4a:76:d9:1f:
                    56:d5:ee:b6:ab:74:8a:60:9c:dd:f1:78:40:20:c7:
                    d5:db:cf:30:0f:1a:c8:c5:da:88:b9:3c:77:29:a0:
                    23:dd:87:10:8a:e0:d8:60:43:16:19:04:0b:fe:f7:
                    c5:ae:3b:aa:65:72:ab:16:33:7e:e1:6a:64:03:f8:
                    b6:7a:99:d5:d5:50:d9:df:30:93:38:14:4b:12:f3:
                    16:f6:61:a7:6f:2a:74:14:20:89:8e:51:7a:40:96:
                    97:42:92:bb:90:e1:c5:29:09:0a:d9:58:2a:7b:3e:
                    d9:a8:60:8b:17:92:18:0e:32:2f:12:89:79:4d:68:
                    77:1f:74:22:d5:5e:0a:df:fb:d3:90:c7:74:0a:39:
                    ef:d6:20:c8:53:22:2e:97:2e:4b:ca:dd:59:00:83:
                    ea:43:21:a5:13:c3:8a:36:78:2e:a5:57:6a:2d:2a:
                    88:29:b1:e1:37:8a:7e:6e:ef:13:7d:06:98:12:52:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DE:8B:98:13:B8:CA:36:CF:B4:0B:23:D3:A4:A7:D5:37:38:AB:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0d8fec9f-8cb4-3884-a230-e8ab6702d6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:50:7c:29:93:34:89:59:54:ee:3f:ca:e4:fb:59:db:ed:fd:
         a8:45:c5:8e:76:f7:c5:2a:bc:6c:1c:ef:af:88:c4:ad:67:18:
         97:e9:77:54:3d:0d:c8:66:5f:5e:22:30:63:84:9a:83:95:8d:
         e5:b2:6d:95:d1:37:42:09:0f:e0:37:8e:c0:07:8e:be:0f:65:
         d6:a7:8d:30:21:87:97:cb:0f:63:3f:3a:af:17:4c:a2:c5:4b:
         db:7f:18:21:be:e7:68:31:65:f5:06:e9:15:60:0e:93:60:8d:
         eb:a6:2f:c0:90:cd:c6:86:86:5e:32:62:c1:74:1c:8b:ec:ee:
         9a:15:94:5b:59:f6:28:20:2b:5f:0a:e0:31:cd:25:90:8f:2b:
         37:40:75:29:f9:43:66:a0:90:00:2b:dd:e3:ca:5e:f3:f0:77:
         ad:d9:28:a6:6f:74:4a:80:bd:c5:6c:fe:69:27:0e:09:7a:11:
         95:de:24:31:ed:cb:5d:e3:7a:de:ed:1c:94:f3:31:70:88:87:
         19:dd:b6:78:ca:09:75:ae:d9:ff:02:6b:72:ad:dc:09:7c:3a:
         dd:2c:7a:cb:ed:55:2a:03:9b:a7:0e:99:12:28:25:8a:67:94:
         b4:ef:46:4a:e4:58:95:1a:95:71:4c:45:7e:00:21:49:d1:2e:
         7f:63:e0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:33 2026 by rpki-client