Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1874d847-1229-3448-8d81-30a2059e41a0.roa
File:                     1874d847-1229-3448-8d81-30a2059e41a0.roa (raw, json)
Hash identifier:          sRKpoEVchKvOXffCWDM3cAgSxydaQnNkPpQslmWT1dg=
Subject key identifier:   F4:83:2B:87:00:9B:5E:8E:15:85:EE:A3:4B:C8:44:F9:1C:72:D8:46
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E059C52A793BACC9C2C5882A0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1874d847-1229-3448-8d81-30a2059e41a0.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:52:a7:93:ba:cc:9c:2c:58:82:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=cab2b32d-24c1-4020-a4d5-5cfcce8b131f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:a9:ba:80:23:63:e9:56:70:8d:ea:87:33:
                    e2:ef:28:81:03:a8:41:77:d7:54:6a:77:72:e3:a0:
                    04:a2:55:e3:6d:68:56:cc:3b:c9:c4:ee:79:6d:b8:
                    b5:54:95:48:16:38:1f:5f:75:a6:04:3f:a4:40:bb:
                    ac:72:14:f2:a4:a9:84:13:f3:c1:4c:11:a9:a3:ae:
                    fe:a3:bd:6b:76:8e:52:0c:bd:40:81:9a:f9:5d:21:
                    47:74:ce:04:80:7a:13:84:30:87:f6:01:bc:bb:c3:
                    dc:fc:83:f3:1f:60:9a:af:d5:7f:1b:b1:a4:a4:5b:
                    1a:36:7f:d8:39:7f:4f:a2:f7:3a:ff:6c:06:f2:8a:
                    1f:9a:99:4e:6c:c5:02:4a:10:b5:3f:d0:64:26:51:
                    8a:28:dc:9c:ca:96:4f:31:98:88:a9:70:70:f3:f2:
                    5c:90:6e:0f:a7:a8:33:fe:22:12:b1:a2:52:ff:4e:
                    e9:cb:ce:ac:40:92:ca:0b:aa:63:54:ae:82:94:37:
                    89:f5:e3:16:e9:4b:ba:cf:e8:f9:52:b2:06:7c:54:
                    8c:7b:26:c6:e8:b4:71:c5:c2:67:09:44:ba:c9:3d:
                    f8:1c:38:a2:e0:ca:7d:93:f2:ef:6c:52:29:a0:13:
                    5b:2c:b3:76:ab:11:a8:e5:2f:0d:07:3c:29:5e:88:
                    eb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:83:2B:87:00:9B:5E:8E:15:85:EE:A3:4B:C8:44:F9:1C:72:D8:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1874d847-1229-3448-8d81-30a2059e41a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:46:c1:0d:d8:90:b8:1a:6c:4f:5c:f4:45:58:e5:2a:25:d5:
         08:2b:1c:14:8f:48:dc:e3:23:9f:c6:90:4d:c0:59:14:73:cf:
         78:ba:0a:e9:4b:a1:27:c2:ef:a4:e4:e7:8e:52:15:c2:68:55:
         64:dd:35:f9:69:a4:f2:05:11:a4:a4:3e:03:03:97:17:3c:78:
         27:f3:6c:b9:e3:0a:b4:f0:41:ef:39:d7:22:2c:d0:11:7e:81:
         69:fc:44:ec:c1:5e:56:7c:b4:e9:fa:ac:b7:20:30:9a:9f:66:
         b3:f8:6b:e3:97:3f:18:85:4d:ce:a7:55:53:ad:0e:dc:05:c5:
         60:bf:53:96:99:7b:e8:65:1f:13:b0:e3:f4:fd:fb:e8:6e:ae:
         7f:f5:c0:6b:75:a5:fd:cd:a9:3f:7d:eb:6f:b3:7e:76:d8:5c:
         62:f1:a9:5c:07:9b:35:16:e5:a1:f0:7b:bc:d1:10:a3:11:5e:
         a1:c2:ad:0b:3e:c5:1e:68:42:38:58:7a:8c:6b:75:de:ba:cd:
         67:8a:41:40:22:6d:4c:80:05:33:0a:00:db:47:e3:73:f7:29:
         65:83:e5:8d:f0:34:68:a6:1c:08:0e:f9:6b:61:f1:26:88:9c:
         75:34:bb:bc:17:23:ec:48:8a:39:33:e3:e3:b6:aa:1d:b0:56:
         55:97:71:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:15:40 2026 by rpki-client