Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8cf345e8-9e84-3b52-bb55-315ab80a1ebd.roa
File:                     8cf345e8-9e84-3b52-bb55-315ab80a1ebd.roa (raw, json)
Hash identifier:          MvMJNoitaCWVYPA9dttY23KoSApFd87Toq3o1rPf1s0=
Subject key identifier:   92:0C:60:5B:7A:B4:4B:5F:2C:11:94:40:24:C6:78:AC:09:1E:9A:3C
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584EC371C1D5340E225AB82ACB80
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8cf345e8-9e84-3b52-bb55-315ab80a1ebd.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     14340
IP address blocks:        136.146.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c1:d5:34:0e:22:5a:b8:2a:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=546b6c03-4a3e-4a99-bfe7-29ff32151652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:18:46:58:e3:d7:11:18:ec:57:04:d3:d7:1a:
                    6e:9f:29:f0:6c:68:74:46:5e:a6:e4:b3:f7:63:b0:
                    c9:4b:c0:ba:4e:23:b9:11:fd:3c:3c:ec:f2:fd:5d:
                    32:97:46:43:cd:00:c9:9c:8d:ed:04:6c:f4:b7:16:
                    1d:31:92:2e:4f:4a:67:e8:fe:35:35:b2:45:96:39:
                    ac:78:c4:98:a7:b7:f9:7a:03:b7:56:58:b0:9d:2a:
                    c4:0e:81:63:c4:d2:5f:3d:7d:f3:c1:03:a9:3f:19:
                    b3:1d:6e:70:8d:9a:0a:47:18:ef:c3:1b:97:c1:1d:
                    f4:2c:55:2f:ff:ed:f2:cd:43:4e:81:75:62:5b:1b:
                    6e:84:6e:5e:d1:54:25:c1:38:b2:82:25:ae:3d:ce:
                    5b:79:49:ee:cf:42:01:1a:c8:c4:5d:06:d3:34:ad:
                    df:05:3d:fc:0c:36:24:eb:33:e7:22:2d:6d:e0:56:
                    74:1c:d2:16:25:37:a4:d1:cd:13:48:fb:6b:75:3e:
                    c3:fd:fa:e0:89:9b:02:12:50:d3:09:ff:06:d1:b2:
                    2c:83:53:91:4d:e8:8a:81:f6:2e:2b:0a:6c:33:50:
                    f9:87:72:13:ee:9a:2e:d8:48:17:4a:94:7c:48:3a:
                    9d:4b:8f:3a:f8:b3:fc:ab:48:7b:6c:7e:49:d2:93:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0C:60:5B:7A:B4:4B:5F:2C:11:94:40:24:C6:78:AC:09:1E:9A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8cf345e8-9e84-3b52-bb55-315ab80a1ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.146.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a2:4e:75:16:36:94:b9:89:93:7e:92:e5:a5:ee:e1:bd:ac:
         a3:91:e4:0a:6d:8b:c0:e2:3f:b0:a1:e1:f2:b1:a3:02:f5:65:
         d1:c2:07:f4:3e:5d:43:15:5c:36:bd:dd:6b:a8:54:e3:81:55:
         f6:47:fa:06:18:4d:73:63:54:5f:52:19:27:fe:97:5f:f5:db:
         38:13:50:f7:d7:62:69:4d:46:9b:d0:66:e1:bc:51:54:63:e7:
         63:39:05:4e:29:77:9d:30:ea:bf:b7:47:b6:b2:ce:ba:9f:ea:
         8f:93:3a:3b:5f:21:bc:72:37:cd:09:2f:0e:1f:5d:a8:39:10:
         cd:0c:ae:b2:0f:35:a6:e9:97:89:8e:58:ec:8c:b6:9e:fd:e3:
         12:41:8a:ba:de:a8:e3:a3:e5:90:cb:4c:2c:86:6f:9a:3c:e0:
         19:c3:53:a6:e8:e0:d2:3c:e2:13:c9:c7:ed:5c:45:8f:0f:e0:
         a9:de:4b:38:59:5b:d6:2c:e3:50:10:7b:6c:a6:7b:01:4c:f9:
         9b:9d:99:78:02:c4:46:92:d9:03:17:e2:2e:be:bf:bc:bf:77:
         c1:65:9b:80:4d:41:5d:41:ac:53:c0:66:f2:40:17:67:b4:94:
         94:98:42:8f:fc:6f:6e:1e:aa:30:d4:6c:bf:d5:de:c4:45:3c:
         d8:57:c6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 00:39:05 2026 by rpki-client