Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/6e3827cd-f585-3643-83c3-414a11f5be2b.roa
File:                     6e3827cd-f585-3643-83c3-414a11f5be2b.roa (raw, json)
Hash identifier:          szChIR2K7yASqry7zulcQ3sTxoIAtzPhkEl34+A3Rrc=
Subject key identifier:   02:A5:B1:E7:30:FC:F2:5E:F4:6F:E7:F1:BF:C8:7C:8D:97:D2:94:BE
Certificate issuer:       /CN=18063090-3337-4bcb-93cd-f57cb925fd54
Certificate serial:       010D0C9F4328584EA0153208AF82CBF9E2142800
Authority key identifier: C0:92:32:6D:39:D8:E5:C5:FA:7B:27:CD:28:20:A9:1F:B3:C4:CA:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/6e3827cd-f585-3643-83c3-414a11f5be2b.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     4901
IP address blocks:        162.250.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:32:08:af:82:cb:f9:e2:14:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18063090-3337-4bcb-93cd-f57cb925fd54
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=3ff70e50-2285-473b-944c-a603fb8ace77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6f:69:71:73:88:fc:01:83:18:a0:07:99:45:
                    12:16:8a:b4:ff:6d:97:39:0d:6f:aa:2e:44:6b:a3:
                    b6:70:e4:aa:7c:e4:c8:0d:f4:2f:ab:18:c2:90:79:
                    3c:60:10:52:57:7a:e8:cd:fd:49:b4:99:3d:d0:6d:
                    39:5a:4e:b0:86:33:36:17:0c:41:68:f6:ac:cb:fb:
                    c7:57:ac:1c:27:a5:26:ba:53:26:82:4f:ba:69:58:
                    71:64:70:f7:6b:72:a1:21:83:86:3d:53:af:56:0f:
                    b8:f0:aa:14:41:d2:02:a1:ae:1a:e7:6f:bc:30:3d:
                    68:85:5e:16:2e:af:25:ba:0f:a7:9e:ad:ad:e4:a8:
                    ad:a4:90:5a:24:d7:dd:c4:b4:8a:a8:51:77:fc:8b:
                    a5:fb:63:13:7d:52:87:a8:36:89:fa:b4:0f:e1:5f:
                    2b:02:34:02:2c:7f:9b:b7:0a:f5:94:66:aa:ae:dd:
                    dd:8f:43:72:2a:24:21:ab:80:d8:1a:50:3f:7e:09:
                    f6:8d:e0:e2:8b:9c:38:17:92:06:d0:71:62:35:e5:
                    e7:96:22:6b:3a:f2:82:9e:c1:27:b2:d5:ae:f2:7a:
                    d9:e7:05:a0:6c:ca:b0:1e:32:1a:86:c7:04:06:c3:
                    25:1c:67:7e:2c:8c:79:9d:21:91:5b:c3:48:23:50:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A5:B1:E7:30:FC:F2:5E:F4:6F:E7:F1:BF:C8:7C:8D:97:D2:94:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/6e3827cd-f585-3643-83c3-414a11f5be2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.crl

            X509v3 Authority Key Identifier:
                keyid:C0:92:32:6D:39:D8:E5:C5:FA:7B:27:CD:28:20:A9:1F:B3:C4:CA:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a8:4e:e5:43:e8:ae:18:5e:4f:3a:24:d1:55:eb:d0:62:bb:
         1e:b0:3d:ab:45:84:67:c8:47:99:c6:39:6b:fd:42:01:23:bb:
         8e:b2:04:b6:a9:de:45:51:e3:6a:76:01:34:e6:3d:ec:a4:19:
         47:15:09:aa:4d:8d:53:34:69:4f:17:55:2f:ef:76:61:4b:dd:
         55:73:c4:9f:30:63:b9:eb:e3:56:9b:43:1e:d4:c5:b3:28:8c:
         9e:a1:40:1d:4b:29:5b:20:6c:01:74:18:60:11:b3:ed:6b:3a:
         0b:9e:68:cd:11:dc:cb:54:37:13:09:91:99:c9:48:6d:2b:09:
         24:f3:d0:e7:f6:db:44:16:df:99:34:b4:7c:9d:c8:c3:93:08:
         f4:33:a6:17:18:fb:f3:1a:b4:5a:d4:4c:e9:df:3c:1e:54:e2:
         51:a2:27:75:41:72:06:5e:27:05:30:dc:62:c9:0a:20:ce:e1:
         4e:47:e2:f0:75:24:2c:72:4e:be:29:b7:ce:54:7e:6c:35:d7:
         23:6a:b2:33:20:0e:23:9f:4e:fc:6e:6f:29:65:ec:34:46:b4:
         db:19:43:5d:48:3f:93:c3:0f:70:58:fe:44:7f:46:74:b7:de:
         57:e0:8b:b1:c8:c1:1a:93:2f:f2:92:18:52:58:fd:46:36:93:
         70:e7:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:26 2026 by rpki-client