Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa
File:                     571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa (raw, json)
Hash identifier:          mh+dlVSL/4ge3vPfyMZAo6c2zYa9XLrS521tAVUdcCM=
Subject key identifier:   21:45:D6:0C:91:C7:BF:C6:52:B4:7C:3A:B4:FF:CD:DA:FF:0C:A1:9A
Certificate issuer:       /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial:       010D0C9F4328584F6F230825B81C73024D8B5200
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     36351
IP address blocks:        136.228.0.0/19 maxlen: 32
                          139.60.200.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:08:25:b8:1c:73:02:4d:8b:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=5a144a03-c13e-45a5-9231-0631ccf0aff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f1:12:15:04:15:c4:21:5d:25:89:c9:ad:19:
                    89:24:11:c4:24:e1:5e:e1:82:d9:7b:94:73:3b:31:
                    d4:14:9d:f8:4b:87:18:7b:80:2f:98:23:30:6d:33:
                    66:ba:36:56:b8:2b:ae:1a:ad:4e:2d:01:7c:a5:5a:
                    79:fe:a5:b0:ff:1e:38:eb:fc:cf:32:4f:1c:16:d2:
                    c2:10:db:ad:e9:8e:7d:ce:ba:9b:a6:fd:fa:36:c8:
                    45:f2:89:cc:51:3e:77:6b:df:47:1d:c6:70:2b:27:
                    26:e2:b7:a5:e8:1d:34:f8:8e:dd:aa:42:f0:ed:cb:
                    2c:a8:fb:8f:b1:82:c7:e0:b1:23:56:5d:a9:ad:34:
                    52:56:10:07:62:02:6a:b4:88:52:98:55:1a:b0:4e:
                    c4:ec:b4:f9:02:52:e6:0b:68:1e:4e:71:4a:1a:af:
                    47:d8:17:51:fd:53:e7:ec:a4:7b:51:3c:36:8a:aa:
                    43:72:c1:0d:4e:fb:5d:9e:a8:d9:a9:dc:80:a4:5a:
                    c6:f8:a9:68:8a:e9:79:c0:cc:1e:23:84:37:da:13:
                    88:32:ee:6a:09:11:c8:4e:8f:b6:fd:c2:59:79:d3:
                    60:8e:94:4c:3f:91:8c:74:09:52:58:3e:2e:c5:9a:
                    83:86:c1:05:db:af:66:da:83:e7:0d:6f:f2:cf:23:
                    c2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:45:D6:0C:91:C7:BF:C6:52:B4:7C:3A:B4:FF:CD:DA:FF:0C:A1:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.0.0/19
                  139.60.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:ae:8d:47:1b:f5:81:ba:69:ff:2c:ba:c3:89:80:64:d0:eb:
         5f:25:91:bb:df:b5:c3:79:33:70:29:f0:a9:47:b7:75:c6:91:
         af:9b:ac:b2:05:b4:37:15:aa:aa:01:6e:f4:2d:f8:55:ef:8c:
         fb:39:2d:00:33:85:33:8d:0f:08:31:0f:3e:ae:05:24:01:a3:
         f7:df:61:aa:58:c4:3e:a8:71:0a:04:2b:88:a0:ed:00:1b:3e:
         9c:9e:d0:3b:49:0d:2a:51:e2:20:65:d9:32:20:0f:7b:ef:31:
         93:d4:1a:5b:86:29:04:4b:a4:6a:d1:39:8b:16:7b:b5:8a:bb:
         9c:d4:e8:d5:4e:db:1c:bf:c3:8b:ba:ca:0f:53:8b:ab:3e:2c:
         ce:5d:d7:5c:fd:3d:bd:13:5b:07:7b:8b:b4:b2:c1:c9:9c:80:
         21:3b:f9:0c:57:61:70:22:a9:e8:16:7b:7b:23:fd:17:72:d9:
         37:b5:75:b7:92:e2:94:d7:98:fd:f5:b8:33:95:e5:58:9a:b1:
         d3:8d:d4:8a:8e:5f:2e:26:2f:6f:94:3c:a7:dd:83:32:cd:36:
         fc:75:85:c3:e1:81:76:39:7b:97:bf:30:2e:80:cb:b1:a2:bb:
         dd:1f:6e:79:be:06:83:4a:b0:a8:53:b6:66:3e:e9:f6:4e:05:
         8e:33:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 18:44:45 2026 by rpki-client