Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28e81f54-5d7c-388d-ac20-88cc5971c632.roa
File:                     28e81f54-5d7c-388d-ac20-88cc5971c632.roa (raw, json)
Hash identifier:          cqeZaFAon1/x3HKk7h1rnLkvZWbTeTA4TbEuTD+pzi4=
Subject key identifier:   06:C8:AD:30:86:10:2E:2C:52:20:16:E5:14:22:CF:B8:48:36:66:56
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2E730BECF38EB8312C780
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28e81f54-5d7c-388d-ac20-88cc5971c632.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     22616
IP address blocks:        136.226.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:e7:30:be:cf:38:eb:83:12:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=49a44cbc-95f1-428f-b7ed-4f1200be93e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:df:19:39:76:2a:ed:f1:7a:a9:66:08:9f:1d:
                    59:ee:0b:f6:31:39:a6:14:62:94:33:63:c6:3f:77:
                    fe:39:db:ab:a1:27:4a:c2:37:b6:47:9c:56:63:4b:
                    3e:9f:82:17:a5:c9:1a:76:2e:cb:98:30:88:59:a5:
                    dc:80:3e:6f:1f:a4:be:7f:e9:9e:67:77:7a:72:0e:
                    16:fb:82:d1:83:b2:1b:a9:1b:82:cd:25:3f:0e:31:
                    79:bf:e4:23:11:56:d9:0d:e8:0b:97:a4:88:48:fe:
                    66:0e:b5:5e:73:40:4f:c0:20:90:42:e9:8f:43:42:
                    c3:e6:d3:b4:73:51:05:c3:9e:f9:fb:5b:a5:45:2e:
                    91:26:b0:f1:e1:7e:f5:11:88:2d:79:3c:ec:36:50:
                    60:ba:1c:e6:a9:20:62:26:a5:fa:f9:2b:09:6a:db:
                    22:09:91:ca:d5:33:42:4c:f0:79:db:e2:3c:a8:6f:
                    4f:3b:d8:ce:99:cc:5b:e4:dd:f3:08:e6:66:cb:a9:
                    e3:6a:6c:9d:d4:1f:d0:9e:7f:98:08:32:5a:86:31:
                    82:c1:3b:f8:2e:7d:22:9c:b9:27:b7:2b:0b:77:43:
                    a7:3b:9f:c1:6d:14:38:8d:4d:88:c6:5b:e1:23:f4:
                    2f:d2:73:41:ae:3e:66:1a:f8:87:7a:9d:33:5f:30:
                    a3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C8:AD:30:86:10:2E:2C:52:20:16:E5:14:22:CF:B8:48:36:66:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28e81f54-5d7c-388d-ac20-88cc5971c632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b2:11:9c:72:6d:9c:54:b8:41:39:8d:f0:2d:c1:4d:c5:f4:
         63:d3:3f:35:54:36:fe:31:a2:ab:3f:d2:dd:f5:75:a7:cd:44:
         8e:b9:1a:22:b1:9c:56:5c:d0:0e:1a:f6:b0:2f:7a:89:64:b0:
         84:5f:4e:6b:ca:09:3f:9d:2f:aa:5c:1c:4d:38:ff:db:cd:0e:
         57:6d:cc:08:ed:57:97:9d:d8:23:a5:44:c0:b1:e2:d0:d3:47:
         87:29:6f:61:41:58:68:8c:da:69:2f:f2:4c:da:6b:ee:6f:fa:
         f0:51:d9:2e:38:6c:40:5e:8c:a1:bd:ba:06:f5:59:ca:38:1f:
         22:b2:8b:a8:23:06:a5:a9:9c:65:0f:81:dd:87:5d:a1:e6:b5:
         18:c0:3b:fd:c4:d7:75:d2:69:70:51:32:06:3f:8a:51:ae:b0:
         99:cd:8f:4a:68:03:af:30:a3:04:f6:9f:79:3c:b3:c3:e1:88:
         a4:ae:a0:af:10:ea:86:ca:bb:45:17:9f:8c:91:f6:ba:34:7d:
         1c:0e:65:fc:1d:4f:2c:a9:10:af:93:d8:0f:47:df:d2:30:0c:
         b3:47:1c:c7:75:77:d1:e2:41:81:61:5f:8d:84:44:43:9a:b9:
         c3:d9:eb:20:4c:bf:c3:6e:8b:02:d8:e9:9d:ea:1f:69:9d:42:
         e4:5a:8c:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4ucwvs8464MSx4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk
NDlhNDRjYmMtOTVmMS00MjhmLWI3ZWQtNGYxMjAwYmU5M2U4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN8ZOXYq7fF6qWYInx1Z7gv2MTmmFGKUM2PG
P3f+OduroSdKwje2R5xWY0s+n4IXpckadi7LmDCIWaXcgD5vH6S+f+meZ3d6cg4W
+4LRg7IbqRuCzSU/DjF5v+QjEVbZDegLl6SISP5mDrVec0BPwCCQQumPQ0LD5tO0
c1EFw575+1ulRS6RJrDx4X71EYgteTzsNlBguhzmqSBiJqX6+SsJatsiCZHK1TNC
TPB52+I8qG9PO9jOmcxb5N3zCOZmy6njamyd1B/Qnn+YCDJahjGCwTv4Ln0inLkn
tysLd0OnO5/BbRQ4jU2IxlvhI/Qv0nNBrj5mGviHep0zXzCjCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbIrTCGEC4sUiAW5RQiz7hINmZWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjhlODFmNTQtNWQ3Yy0z
ODhkLWFjMjAtODhjYzU5NzFjNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCyEZxybZxUuEE5jfAtwU3F9GPTPzVUNv4xoqs/0t31dafNRI65GiKx
nFZc0A4a9rAveolksIRfTmvKCT+dL6pcHE04/9vNDldtzAjtV5ed2COlRMCx4tDT
R4cpb2FBWGiM2mkv8kzaa+5v+vBR2S44bEBejKG9ugb1Wco4HyKyi6gjBqWpnGUP
gd2HXaHmtRjAO/3E13XSaXBRMgY/ilGusJnNj0poA68wowT2n3k8s8PhiKSuoK8Q
6obKu0UXn4yR9ro0fRwOZfwdTyypEK+T2A9H39IwDLNHHMd1d9HiQYFhX42EREOa
ucPZ6yBMv8NuiwLY6Z3qH2mdQuRajCQ=
-----END CERTIFICATE-----
Generated at Fri Oct 30 20:28:37 2026 by rpki-client