Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5a33931b-50ec-3f5a-a5c1-b07c35bac0b6.roa
File:                     5a33931b-50ec-3f5a-a5c1-b07c35bac0b6.roa (raw, json)
Hash identifier:          /jCf2RjtCy/3gdatFWdOt0c2Ny7fVPNxRJb1wIaheqQ=
Subject key identifier:   94:E9:3D:C8:11:29:56:DC:5D:34:D8:4D:F8:9B:05:36:F7:8A:1F:50
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF74ED3EE8D0592DB811EDA
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5a33931b-50ec-3f5a-a5c1-b07c35bac0b6.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        136.226.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:4e:d3:ee:8d:05:92:db:81:1e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=53628e0e-e033-474e-9b94-32dcbf4f9e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cf:60:61:b5:f0:95:72:38:62:d8:b0:ab:6a:
                    17:72:8e:8e:ca:f8:03:3e:13:a6:25:59:08:c0:3d:
                    e4:cc:a1:ec:8a:57:0b:0c:9a:a4:95:74:b5:53:06:
                    00:e5:3c:4a:6a:bb:8e:78:d2:d4:16:87:cc:70:a5:
                    ee:8b:13:20:cb:1e:54:b1:f6:f2:fe:9c:7f:3c:7d:
                    ef:38:19:ae:32:59:37:27:1c:13:7e:4d:1c:6d:ab:
                    7a:75:6c:24:4c:7d:a9:74:82:db:cf:45:9b:bb:91:
                    ac:ac:f3:e2:8c:55:0c:8c:eb:78:c4:b6:27:bc:78:
                    2f:8b:12:bb:59:58:2e:b8:ab:2c:e8:b7:b5:1e:af:
                    7d:db:47:08:40:67:83:04:c9:4c:60:bc:f2:c1:7d:
                    54:a3:c8:3c:eb:0c:0a:18:af:ca:f3:66:88:6f:2a:
                    8a:13:19:bb:a5:31:fb:e8:b0:22:b5:e1:3c:b2:65:
                    7a:1b:95:54:84:4d:fc:95:8b:45:85:66:76:fe:f6:
                    ed:80:6e:d6:93:9e:81:5c:1e:7f:b6:5a:04:23:f7:
                    33:46:ec:fe:c0:b7:a4:25:09:ce:a9:74:95:5d:ea:
                    b0:78:a4:d2:46:c4:2a:e2:5c:fb:6e:7c:13:35:20:
                    dd:67:e7:f0:d5:3e:bc:b6:bb:ef:7e:38:69:ff:0c:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E9:3D:C8:11:29:56:DC:5D:34:D8:4D:F8:9B:05:36:F7:8A:1F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5a33931b-50ec-3f5a-a5c1-b07c35bac0b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:6c:5a:8d:28:5a:07:a6:0a:cd:d6:5d:07:91:8e:ff:ea:f6:
         19:84:5d:42:a7:ee:29:81:65:41:ba:16:e5:8c:48:05:c4:ca:
         3d:5d:2b:d3:6c:b6:75:ac:82:1a:5a:a2:95:b3:9f:0b:e1:87:
         97:10:75:ce:c6:40:0c:4b:d2:81:5e:ab:53:b3:e9:f1:00:6b:
         a9:e9:53:47:b8:0b:ce:8e:8e:ae:19:21:f1:d2:53:d5:20:df:
         c4:31:79:c0:65:f1:94:94:54:89:c3:61:65:93:48:ba:ca:47:
         52:91:9b:49:65:ec:86:93:bc:b9:c9:15:65:cf:ae:25:99:a3:
         74:8b:7f:a1:c3:3c:47:f1:f3:01:2c:66:22:e9:3e:fc:a4:ae:
         c9:1f:11:a3:d3:55:d8:f7:05:65:27:db:c8:b9:7b:cb:85:88:
         82:7a:53:61:fb:36:80:57:c3:b0:8e:df:60:bd:c7:f1:5c:c8:
         b6:46:d5:3e:86:d1:a2:d6:f7:e1:bd:69:5f:60:5b:34:4b:9f:
         fa:2d:2e:bf:cf:b8:68:53:12:0c:4b:2d:b6:5d:74:c0:9e:4f:
         58:73:71:a8:d3:f6:9d:ec:3a:78:89:4d:dd:61:aa:85:01:7a:
         43:42:82:15:4b:db:44:30:ce:0e:db:30:5f:ba:0c:af:29:dc:
         5d:39:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:02:54 2026 by rpki-client