Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4a0fe493-9adf-3b43-9795-7530d2a60861.roa
File:                     4a0fe493-9adf-3b43-9795-7530d2a60861.roa (raw, json)
Hash identifier:          D8geEAYiSTiXfWzHsDW+aM0Zg/ppIScICfQmGt5KgBU=
Subject key identifier:   43:5C:DC:C5:B7:F9:AA:56:B6:E9:B2:27:CF:92:4C:4E:AF:D3:90:20
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E059C52116C4DD7DF5D0D58C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4a0fe493-9adf-3b43-9795-7530d2a60861.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:52:11:6c:4d:d7:df:5d:0d:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=199314d4-9ae5-4a79-ac2f-5af4221fc918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:20:b0:f6:0c:12:16:74:9d:6e:46:d3:66:da:
                    10:8a:db:87:20:7b:f8:f9:aa:d3:50:12:5e:42:af:
                    1b:7c:ec:6b:59:8f:14:28:de:75:15:0f:d7:dc:0e:
                    6d:28:b8:2e:a2:c9:d6:d1:e1:be:b5:19:95:92:2f:
                    23:2b:86:ca:83:d8:49:90:bb:9d:ed:7a:4c:a6:3d:
                    64:3e:09:98:7b:d9:b4:bb:f5:fd:d6:76:b3:cd:b7:
                    dd:09:52:a6:3e:59:db:8f:9c:03:a0:52:af:9c:f4:
                    24:be:db:89:1c:b0:76:03:5e:60:59:ef:e5:bd:68:
                    db:84:47:91:ad:fa:31:de:9a:86:c0:6e:93:a1:84:
                    fb:40:5c:0c:fd:e7:85:98:6b:76:cf:0b:0c:f6:7e:
                    7a:10:f7:44:c9:22:cf:33:24:f7:f0:0d:93:db:08:
                    56:74:fb:31:08:d0:59:96:2d:17:70:05:fc:40:2a:
                    b8:ef:39:f6:ec:09:c3:1e:f8:99:2a:29:96:d8:2e:
                    05:e7:0a:b9:23:92:c6:ba:cf:5e:23:3b:29:b2:33:
                    30:37:a8:bf:c5:dd:41:bc:29:37:11:bc:4b:1e:bb:
                    82:0e:db:df:6c:df:62:12:6a:12:06:f1:37:f8:95:
                    6a:15:af:22:09:06:cf:61:2f:cd:0b:d8:72:72:c1:
                    0a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5C:DC:C5:B7:F9:AA:56:B6:E9:B2:27:CF:92:4C:4E:AF:D3:90:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4a0fe493-9adf-3b43-9795-7530d2a60861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:72:7a:c5:dd:08:c6:25:d4:d6:9b:81:33:dc:95:f8:17:b6:
         d8:9d:47:ab:17:ba:7d:d7:3e:e6:46:df:a2:bf:a5:4b:ad:c6:
         91:90:fd:fa:12:14:ab:44:3e:ae:95:e6:3e:cd:9c:49:87:ea:
         4a:ae:ac:9b:b1:4e:dd:dd:2f:76:7e:20:b3:57:4a:04:85:24:
         1c:f1:1e:a2:7e:12:86:b7:40:88:a9:d0:b1:0a:67:a9:a5:21:
         41:1c:08:9d:98:7b:f8:bc:a9:52:78:7e:7b:bf:db:3a:26:ef:
         cc:58:48:6e:f9:17:31:28:4c:b9:c4:14:b4:ab:9f:2b:69:33:
         c6:29:ec:64:b6:89:8e:2f:6b:44:25:3c:a5:66:b0:d7:d5:0c:
         88:97:ed:d0:01:1c:b0:03:95:54:65:23:fc:af:df:f8:39:b7:
         71:ca:c6:d2:e8:b4:37:64:11:fd:0e:78:89:82:43:f1:f9:2d:
         e5:0c:53:e4:33:80:df:d8:b9:2a:1b:7f:14:1e:fe:bc:9c:8d:
         ed:a3:81:03:9f:d7:9b:8e:e7:43:af:e2:0b:e3:15:85:b5:37:
         fe:5e:6b:34:ce:f8:23:8a:16:91:73:69:5a:37:9d:23:3d:c0:
         81:a9:86:2a:6e:7b:61:de:6f:1c:37:1a:79:70:d1:82:c8:cd:
         92:3a:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:07:46 2026 by rpki-client