Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e03e4c1-7a4d-3b74-8edb-6768c6d4c6f7.roa
File:                     8e03e4c1-7a4d-3b74-8edb-6768c6d4c6f7.roa (raw, json)
Hash identifier:          Bok87vzPTJKhyYJL1aQW0m8z11lCQQ/rDWNYeRc0OEM=
Subject key identifier:   89:BA:89:3C:6B:BE:EB:ED:0A:CD:54:B9:CF:BA:CF:0C:F4:E4:79:5A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E0005F3C98F36EA747EB65300
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e03e4c1-7a4d-3b74-8edb-6768c6d4c6f7.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:f3:c9:8f:36:ea:74:7e:b6:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=f73bfdb7-79cb-4b84-aca0-270af8e68b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:83:8c:7a:c7:7b:38:6c:69:cc:b0:37:de:cd:
                    93:58:b9:bb:2c:42:0a:d6:92:63:a2:d8:cd:46:d9:
                    56:4f:91:f1:c9:41:29:35:df:fe:75:db:ef:60:de:
                    78:ab:8d:58:9d:f2:fe:9c:d3:58:cc:fb:0c:3b:55:
                    3a:92:92:02:41:bd:29:4c:8e:b7:51:a6:22:d7:ae:
                    86:70:7e:e8:d6:09:55:de:4c:45:60:35:47:f0:aa:
                    ba:c9:f3:15:17:61:00:5a:6c:fc:4f:f4:9b:9d:d8:
                    3c:20:d2:4a:50:11:8c:98:76:9c:8f:5e:14:92:d1:
                    60:ee:4e:b5:0b:3a:55:55:36:2d:f9:15:60:d2:c6:
                    95:f9:71:64:3e:a8:57:72:7e:b7:01:2a:1a:c4:06:
                    05:4b:dd:8b:f8:61:f4:61:73:b7:77:40:94:d0:4a:
                    6e:44:04:40:85:de:03:f1:7e:76:a2:54:b6:81:bc:
                    e1:21:96:1a:d2:25:1e:c8:45:5f:1a:48:9a:a8:12:
                    55:5f:18:d0:7e:7d:65:0b:a4:99:9a:a4:fa:85:0a:
                    2a:5e:79:f5:9f:94:e6:29:53:c3:71:e6:05:22:da:
                    8c:eb:85:60:5c:cc:65:ef:bb:af:ee:a2:9c:c6:be:
                    66:1a:05:25:84:80:a4:f0:24:90:71:d0:82:0e:a9:
                    13:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BA:89:3C:6B:BE:EB:ED:0A:CD:54:B9:CF:BA:CF:0C:F4:E4:79:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e03e4c1-7a4d-3b74-8edb-6768c6d4c6f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:67:5e:e1:4c:9f:71:8b:bd:3b:6b:2b:6b:c6:09:e7:2d:49:
         5a:6f:00:e7:e7:9f:16:23:c7:e0:86:36:90:a3:cd:67:be:6f:
         7c:80:37:7c:83:d9:b1:65:62:04:64:21:cc:59:a6:34:a7:93:
         1b:40:c9:e3:1e:df:d5:da:b8:6c:45:eb:11:1b:78:20:16:f3:
         14:4a:c3:06:ad:63:76:72:7a:82:08:78:a1:db:72:ad:2f:a9:
         27:76:53:5a:39:39:40:14:6a:b2:7a:67:d3:53:1d:ff:82:ed:
         9a:8a:c9:3f:b4:20:0f:e6:9b:70:7d:7b:b1:53:dd:c8:e5:d3:
         4d:5e:60:32:4c:eb:06:4b:fe:11:60:db:b9:68:a2:67:00:f0:
         96:1a:e4:a5:6e:8d:7d:45:cf:6b:a3:b9:58:ed:fc:54:e7:d4:
         2e:7c:9c:0d:0b:30:67:e7:fe:55:b5:1d:13:4d:89:11:72:b7:
         0f:17:97:64:6d:c5:8d:61:bf:fd:83:a0:cd:2d:58:6a:6f:93:
         20:d6:c8:b9:85:71:9a:16:6f:e4:1d:57:fc:fa:09:d4:57:f7:
         10:27:84:50:bc:c0:2a:af:5e:97:a7:aa:a0:e1:15:79:d0:c0:
         cd:74:a2:03:ef:24:b6:f0:89:5d:f2:f3:92:d1:b5:f1:f8:8c:
         ea:10:4b:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABfPJjzbqdH62UwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
ZjczYmZkYjctNzljYi00Yjg0LWFjYTAtMjcwYWY4ZTY4YjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IOMesd7OGxpzLA33s2TWLm7LEIK1pJjotjN
RtlWT5HxyUEpNd/+ddvvYN54q41YnfL+nNNYzPsMO1U6kpICQb0pTI63UaYi166G
cH7o1glV3kxFYDVH8Kq6yfMVF2EAWmz8T/Sbndg8INJKUBGMmHacj14UktFg7k61
CzpVVTYt+RVg0saV+XFkPqhXcn63ASoaxAYFS92L+GH0YXO3d0CU0EpuRARAhd4D
8X52olS2gbzhIZYa0iUeyEVfGkiaqBJVXxjQfn1lC6SZmqT6hQoqXnn1n5TmKVPD
ceYFItqM64VgXMxl77uv7qKcxr5mGgUlhICk8CSQcdCCDqkT+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIm6iTxrvuvtCs1Uuc+6zwz05HlaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvOGUwM2U0YzEtN2E0ZC0z
Yjc0LThlZGItNjc2OGM2ZDRjNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtnXuFMn3GLvTtrK2vGCectSVpvAOfnnxYjx+CGNpCjzWe+b3yAN3yD
2bFlYgRkIcxZpjSnkxtAyeMe39XauGxF6xEbeCAW8xRKwwatY3ZyeoIIeKHbcq0v
qSd2U1o5OUAUarJ6Z9NTHf+C7ZqKyT+0IA/mm3B9e7FT3cjl001eYDJM6wZL/hFg
27loomcA8JYa5KVujX1Fz2ujuVjt/FTn1C58nA0LMGfn/lW1HRNNiRFytw8Xl2Rt
xY1hv/2DoM0tWGpvkyDWyLmFcZoWb+QdV/z6CdRX9xAnhFC8wCqvXpenqqDhFXnQ
wM10ogPvJLbwiV3y85LRtfH4jOoQS4A=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:44:45 2026 by rpki-client