Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ecbaf4bb-932d-35da-ba41-68c4f29b24d7.roa
File:                     ecbaf4bb-932d-35da-ba41-68c4f29b24d7.roa (raw, json)
Hash identifier:          G+fJC/oan7d3Mukox1OrSWpHvXR82AWUAvtmUgDr50U=
Subject key identifier:   14:00:17:FD:8B:92:AA:E7:17:1B:56:D5:12:DB:42:9E:7D:43:01:8C
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584D7CCFDD5168B411A021EB3500
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ecbaf4bb-932d-35da-ba41-68c4f29b24d7.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     15169
IP address blocks:        136.22.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:dd:51:68:b4:11:a0:21:eb:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=d5eb022a-ce6c-4ed6-87e7-219a2aad769b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:dc:de:cb:c6:a5:c4:d4:4d:67:ba:7b:8e:
                    03:bd:10:1f:3e:1f:db:10:47:2f:0d:73:94:c1:ec:
                    db:d7:6f:21:3f:2f:54:db:19:ef:99:8d:b9:5a:4a:
                    66:33:e5:03:df:08:19:ed:44:78:4a:87:5d:1c:b7:
                    83:51:9f:22:f4:be:a4:9a:24:2f:0b:87:88:68:11:
                    a1:46:00:0b:a3:cc:ff:f7:ae:37:c0:91:67:87:f2:
                    01:ed:24:1c:6a:13:a7:49:a5:73:17:31:27:82:b2:
                    c5:84:74:90:3d:9c:dc:af:f8:45:17:19:69:63:f7:
                    33:ad:b1:70:b4:15:a8:f2:67:33:52:fb:97:08:38:
                    93:21:bb:0b:09:af:50:f0:3a:4a:63:e9:48:df:90:
                    fd:4d:5b:d8:45:f7:aa:85:93:32:b0:64:cc:35:ad:
                    cd:94:c5:9f:79:a6:72:ec:3a:8f:e1:36:de:16:69:
                    e4:d7:7b:c8:7d:51:92:31:a5:88:38:90:07:85:f8:
                    e4:3e:b7:b4:13:71:bb:41:20:20:fe:d0:e2:38:38:
                    21:3f:7f:a4:d4:a4:b0:53:28:cb:f1:65:6b:98:0d:
                    48:fb:3b:cf:96:49:99:92:f4:e5:67:58:c9:c9:93:
                    f4:a8:5d:75:54:a3:e5:c6:58:d8:40:7d:0e:1a:42:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:00:17:FD:8B:92:AA:E7:17:1B:56:D5:12:DB:42:9E:7D:43:01:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ecbaf4bb-932d-35da-ba41-68c4f29b24d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:45:cf:cb:a4:55:b3:17:55:7e:71:5f:ea:b3:fb:e1:72:30:
         2e:cc:27:c3:8f:1b:de:14:0a:ed:b0:b0:f4:f6:f8:8a:e0:6c:
         cc:6d:ee:8b:d1:6d:21:f7:e0:bf:d7:37:71:1d:6c:cc:fe:e5:
         22:9e:dd:1d:43:93:c1:25:15:de:fb:24:71:0f:69:1b:09:8b:
         a7:96:b5:0d:95:98:14:b5:f6:84:9a:02:41:87:23:6d:72:56:
         7c:dd:eb:98:46:ef:4b:ea:57:9b:3d:83:c6:02:33:0e:83:56:
         ca:d4:a5:3c:9f:fe:48:3f:77:b5:70:2b:34:46:14:13:48:1f:
         d2:d0:e9:54:fa:9a:ab:dc:c4:d7:cd:4c:06:c2:58:06:0d:b5:
         c1:52:93:b9:3a:aa:5a:01:b1:ee:7e:2b:2b:2b:82:f9:9b:90:
         5d:af:eb:78:8c:aa:e1:ea:08:92:f3:bd:a7:e2:f6:5b:82:bc:
         2f:eb:07:28:24:45:b6:0c:30:b9:d0:bc:34:27:96:60:d2:52:
         4f:c4:33:3d:e3:29:7b:7a:39:15:53:65:4e:01:f7:77:1a:97:
         97:cb:ca:b5:09:51:56:28:96:77:76:0f:5d:7f:95:70:d9:32:
         c8:ca:7c:67:6b:8c:b3:b9:ec:58:63:12:a2:8e:3a:37:a4:94:
         0f:df:43:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:13 2026 by rpki-client