Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8c96bf97-a2e2-3448-89e6-b722c21eb25e.roa
File:                     8c96bf97-a2e2-3448-89e6-b722c21eb25e.roa (raw, json)
Hash identifier:          oL+hVB43XgB4SSC0W6zuCx78BXAXU83LlYcTplt1MrQ=
Subject key identifier:   47:60:DB:66:17:B8:43:8F:DA:5B:B0:26:57:DA:C0:32:45:31:D2:F1
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA79EDEE27AE702BF192D0500
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8c96bf97-a2e2-3448-89e6-b722c21eb25e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:de:e2:7a:e7:02:bf:19:2d:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fd304c53-2350-4363-ad60-7fa9234bbf11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:4f:f7:04:1f:fa:fb:5d:64:89:90:0f:f9:
                    7a:be:9f:11:24:e5:91:99:5b:04:b1:b9:bc:93:6e:
                    b9:05:eb:a6:d4:7e:b0:f2:eb:51:b2:32:7e:49:51:
                    7f:29:d4:56:7e:5e:d6:8c:c8:c2:ea:5f:4c:bf:95:
                    53:c9:ac:0f:2b:c3:b9:ab:70:88:51:0c:76:56:72:
                    95:38:3d:cf:9f:fe:da:68:db:62:1b:09:3f:3c:fb:
                    0c:3a:0c:d5:c0:0c:76:95:af:a7:2d:b6:b2:95:cb:
                    71:a7:fc:fd:40:61:39:fb:16:72:18:12:73:3a:c1:
                    f0:7d:2c:a0:ab:cf:8e:95:1b:99:31:ea:9c:e8:9e:
                    df:ac:47:09:a1:73:17:86:11:23:b3:ca:fb:8d:26:
                    da:ef:a4:33:a2:f5:b3:27:68:85:53:da:b4:c5:1f:
                    d4:cf:03:40:41:cf:f5:b9:b4:31:b7:f9:16:72:7e:
                    99:49:2b:83:0b:e8:fb:b2:ec:37:13:37:fc:17:dc:
                    7b:5c:1e:79:40:24:14:96:4e:1a:23:5c:c2:30:06:
                    64:5c:82:e0:ad:77:73:88:6d:d4:65:e8:33:4f:de:
                    a5:c3:1c:e5:ee:e9:d0:2c:e3:e3:76:7e:1d:fa:99:
                    41:32:82:1a:6e:85:db:6f:40:13:62:c3:e0:86:b4:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:60:DB:66:17:B8:43:8F:DA:5B:B0:26:57:DA:C0:32:45:31:D2:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8c96bf97-a2e2-3448-89e6-b722c21eb25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ec:37:88:a0:44:1a:4d:eb:43:7a:d9:2a:27:9d:81:82:fa:
         72:86:e1:91:5f:61:32:8c:b9:26:db:df:f1:b5:4b:c5:42:73:
         f3:dc:1e:48:ce:06:e3:c2:35:dc:f8:e2:fe:49:9d:80:a6:7f:
         37:fc:df:ee:cb:9b:ad:3e:2b:8e:76:d3:76:87:f0:e2:6b:d5:
         2c:87:43:73:e4:f8:e8:0b:71:84:5a:a3:66:41:f5:e6:da:4f:
         85:3d:d9:c1:97:af:b4:d5:56:56:b2:8d:24:9c:92:91:66:20:
         b7:3c:9d:f9:04:38:07:e0:4c:0e:f4:24:cd:66:3d:97:a4:ea:
         1c:a2:f9:e3:de:4c:7e:56:5a:f9:6d:6f:84:d0:99:26:bd:9e:
         bf:8e:e4:8d:39:9c:8c:e0:31:18:ca:31:32:16:d2:aa:8f:c6:
         6a:be:17:56:88:39:f8:4b:2c:b2:3d:87:a3:8a:cc:5c:7a:a2:
         68:a0:35:d2:59:7a:f9:84:53:d4:d4:80:29:c6:79:6b:57:52:
         4d:88:3e:cb:f3:28:bd:5d:ec:16:93:c8:8a:c0:28:61:f6:f4:
         92:d1:2f:f7:8c:d8:88:54:f2:f2:59:b5:94:79:da:2f:d9:ec:
         b3:35:2e:d5:e2:ee:00:85:58:bd:a1:5a:dc:5e:e4:98:61:a2:
         68:fe:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:30:14 2026 by rpki-client