Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/362786a9-431c-359d-84d8-d39faa29fee1.roa
File:                     362786a9-431c-359d-84d8-d39faa29fee1.roa (raw, json)
Hash identifier:          jAZ3YIVR0pAReJhylqhYS9zckJPZ069fVnGvI30mnY4=
Subject key identifier:   41:39:85:27:CD:99:B0:B3:C8:27:80:91:BC:5F:6F:A8:27:6D:1E:B9
Certificate issuer:       /CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
Certificate serial:       010D0C9F4328584F093CF260EF888CCB30104500
Authority key identifier: D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/362786a9-431c-359d-84d8-d39faa29fee1.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     7018
IP address blocks:        204.13.136.0/22 maxlen: 22
                          204.13.136.0/24 maxlen: 24
                          204.13.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:f2:60:ef:88:8c:cb:30:10:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=4ecc14ed-4fee-4f65-86a4-984ce1278449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:06:1c:6e:26:9d:37:19:5d:f0:16:16:56:ee:
                    98:03:fb:6c:db:d2:01:83:d5:3e:20:75:2f:c0:fa:
                    1d:0c:7b:2d:d2:7c:2c:47:90:a5:3f:19:3f:10:67:
                    a5:7a:1e:de:51:f1:06:1c:4d:0d:7a:33:7c:cc:6d:
                    a9:e4:d3:f5:89:15:5c:db:dd:03:c7:0a:85:8b:d7:
                    d6:08:53:fd:8c:25:81:27:d8:13:f9:b5:70:80:2c:
                    43:ed:2e:f9:8c:f5:30:b9:2e:b4:88:91:db:af:88:
                    70:9c:58:6d:24:16:f8:68:f1:8d:d7:b2:d3:db:06:
                    b6:90:2a:7f:1c:97:8c:47:85:f3:d4:75:a0:7b:47:
                    0f:f9:32:d2:41:36:e5:a7:21:d6:e0:10:43:49:b9:
                    b7:a6:b2:57:ad:6a:e0:8c:cd:f9:64:49:59:7b:f6:
                    74:fc:1b:03:0f:9a:9a:c0:35:ff:24:df:f6:0f:1b:
                    14:5f:b1:14:1b:e6:c6:0e:3d:d4:92:88:9b:b4:8b:
                    3d:40:a2:d5:27:9d:43:0d:70:f9:ab:ae:29:66:ed:
                    96:63:78:9a:6b:7c:58:48:1a:3e:68:fe:cc:f7:d7:
                    87:9e:44:b9:bb:e3:1d:35:af:40:64:f5:3a:15:18:
                    ba:3b:13:fa:63:dd:e9:62:3b:0d:59:3e:8f:f2:f7:
                    24:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:39:85:27:CD:99:B0:B3:C8:27:80:91:BC:5F:6F:A8:27:6D:1E:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/362786a9-431c-359d-84d8-d39faa29fee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.crl

            X509v3 Authority Key Identifier:
                keyid:D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e8:3b:5d:1b:19:f6:c0:95:53:0c:28:1e:d9:29:7e:24:2c:
         53:be:55:e9:d8:19:20:bd:ad:0a:82:89:d5:67:b2:d8:f2:62:
         fa:2c:e2:24:9a:2e:63:44:92:da:0c:a4:4e:04:49:73:0d:6d:
         f5:7e:18:b1:58:6a:63:05:fe:1a:50:f0:92:54:d5:00:10:03:
         16:fd:0e:df:ce:a0:57:fa:ec:34:04:1a:35:2d:e3:b7:21:0c:
         1e:02:6a:64:50:d6:bb:8c:1b:41:cb:28:d5:f5:40:83:dc:38:
         a0:47:87:bd:3b:f3:81:0b:81:c7:0a:9d:aa:60:81:dc:94:fd:
         8c:5b:f7:1a:de:7b:f1:33:0c:3b:30:15:71:47:d5:54:1f:a6:
         4a:cb:b3:3b:c8:c0:28:a9:27:b6:2b:09:f9:e5:dd:74:73:6f:
         6c:8a:45:80:50:1b:ea:c1:e4:4b:34:34:08:de:86:b1:6a:e1:
         9e:58:26:a2:ea:c0:7d:e5:be:1a:29:3f:ca:76:0b:3e:dd:93:
         2d:16:36:c9:4e:39:1c:02:be:1b:b5:81:f8:5a:67:c9:6c:36:
         87:f7:8c:6e:ab:e4:2a:57:e7:20:bc:b4:5d:0e:5f:1f:65:b7:
         12:38:f1:11:24:d7:cf:c0:d2:e9:72:0b:a8:2b:d6:a7:ba:8b:
         18:4e:02:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:09:49 2026 by rpki-client