Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/732447d3-06d9-3da7-b4cc-f499a609480b.roa
File:                     732447d3-06d9-3da7-b4cc-f499a609480b.roa (raw, json)
Hash identifier:          NdlchXGK94S7kxJyaWhZAPpcSf7qNmFCu3u86+K5J/U=
Subject key identifier:   E3:00:85:97:6D:C5:F6:40:93:7B:33:DF:6B:98:BA:6E:8F:97:EB:D5
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E059C40D540EA22638AD661E0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/732447d3-06d9-3da7-b4cc-f499a609480b.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:40:d5:40:ea:22:63:8a:d6:61:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=f33485c8-acf3-427e-af78-2b6ac4171632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:89:4a:ad:5c:63:08:9b:30:ad:85:da:96:
                    8e:a5:49:2d:65:7f:35:fc:7b:f0:12:7b:b4:8a:4e:
                    c1:34:81:d1:73:13:72:5b:7d:e8:9a:c5:58:d0:45:
                    98:86:d1:24:30:8e:6a:e2:e5:56:02:12:0f:26:fd:
                    1e:45:95:d5:97:66:cc:68:65:46:2e:f2:d9:95:f6:
                    0c:71:a6:68:8a:6d:8a:3c:7f:d9:c3:50:d7:21:70:
                    61:68:d3:70:60:8f:85:79:0c:a0:fa:47:39:25:5c:
                    d2:f8:11:ca:bf:2b:99:a6:f0:b5:f5:39:d8:d7:4d:
                    41:3c:3a:96:22:e6:54:a8:c4:40:4a:3a:0a:03:3f:
                    17:0d:21:76:de:90:e7:5f:d2:cc:c1:f6:0a:7c:27:
                    e6:7f:8f:72:6d:0c:1c:6d:62:b3:d3:11:ea:d4:b5:
                    7d:7e:b0:46:8c:fd:86:e0:bd:f6:8e:3d:5c:a3:3b:
                    ae:c6:84:17:7d:9d:bc:9e:fb:ec:a4:c0:fc:d8:87:
                    fd:33:e6:1d:ba:d3:ea:8e:f3:5c:eb:14:1a:7e:90:
                    6b:6b:41:d1:eb:a0:59:ff:55:42:18:c5:ef:5f:98:
                    7e:9f:15:4e:f8:f1:dc:b5:b3:b1:fb:c5:c5:4e:88:
                    aa:fc:7a:99:6c:72:15:b3:8a:45:e8:4a:5c:bb:22:
                    bf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:85:97:6D:C5:F6:40:93:7B:33:DF:6B:98:BA:6E:8F:97:EB:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/732447d3-06d9-3da7-b4cc-f499a609480b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9a:2e:84:a0:53:27:a1:b2:32:48:83:47:50:85:84:24:17:
         6a:39:62:93:b6:08:6d:b8:38:97:9e:90:26:1c:c1:dd:06:f4:
         7d:93:82:9b:a5:48:c6:db:ed:66:29:1b:fd:e1:0d:c7:10:54:
         2c:d5:b1:d5:7f:84:e3:82:41:ba:13:ac:03:e0:b5:86:d6:82:
         04:30:b0:84:04:f7:bb:14:63:7c:9b:a4:66:e4:2b:d1:54:c1:
         82:3e:3c:fc:a5:ed:20:24:54:b9:eb:fb:6b:ff:f1:55:0d:fe:
         3d:ce:55:f6:2b:f5:5b:41:98:6a:a8:6e:f4:e4:28:5e:7d:9d:
         40:c3:95:f2:d9:5f:f8:bb:30:93:56:08:16:c4:1f:6f:5b:bc:
         4e:e3:71:67:60:01:54:93:76:a6:27:f9:94:70:68:b2:25:ed:
         2b:f8:af:99:e7:37:d8:e9:7c:75:65:0a:3d:0e:33:3d:59:3d:
         a6:50:49:61:e8:51:37:5a:f9:8e:06:8c:9d:18:d7:62:f1:41:
         f1:b9:c3:cc:60:d5:a8:65:0b:01:c4:f7:1e:28:28:c7:bd:6c:
         1b:db:0d:d4:95:4b:32:49:74:06:c1:9a:ee:db:03:2e:cb:12:
         83:c2:70:98:7f:d3:54:f5:fd:25:0c:87:80:94:0e:51:f5:48:
         15:d0:63:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:30:50 2026 by rpki-client