Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2073852-2c85-39c7-bece-da234b549592.roa
File:                     b2073852-2c85-39c7-bece-da234b549592.roa (raw, json)
Hash identifier:          Y/by/Bt98G6wqwUMh7xmZDGDbHhxhHvkSUWoP6uo/UI=
Subject key identifier:   F9:9A:B6:B0:DD:CF:6A:10:AC:74:B2:61:EC:F3:C5:E5:B2:F6:65:9B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA79AF8FA6D71CF0E8D0E4D80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2073852-2c85-39c7-bece-da234b549592.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:f8:fa:6d:71:cf:0e:8d:0e:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b7932fd8-aed6-4971-9a17-b1c7d09216ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:1d:ad:23:64:9e:2b:eb:b9:7c:b1:88:8f:
                    8b:1c:9e:8e:72:4f:46:de:c1:44:ae:a3:79:5d:6c:
                    89:11:c0:99:f5:38:86:b8:29:c7:f6:60:f9:c0:f8:
                    fc:af:6e:64:9f:d5:e4:43:64:b4:57:24:33:91:f7:
                    ad:7b:ff:60:8f:27:68:f4:cc:78:98:fc:88:5b:3f:
                    22:8d:dd:21:ce:6f:7b:aa:e2:92:50:1d:29:2d:22:
                    54:db:6e:ee:8d:e0:0f:eb:70:ef:ac:a2:3c:c7:b7:
                    cc:db:c8:bb:7d:13:3e:ea:de:6e:6f:d7:e6:48:ea:
                    39:6d:e4:4f:a2:56:fa:4c:b5:d1:88:6d:51:47:7a:
                    4c:4f:da:d4:28:6c:a3:07:c1:ed:95:4a:81:27:33:
                    26:de:e6:6c:b8:c7:ec:e4:23:e5:bb:52:22:30:99:
                    b3:c7:8a:71:85:9f:1f:a2:56:6a:48:72:93:6f:79:
                    55:87:5a:83:5f:a1:07:56:54:cd:81:38:b5:ed:7c:
                    53:5c:5f:78:3b:99:ad:e4:8c:8a:90:03:11:95:97:
                    60:d8:18:08:fa:7d:df:d8:96:22:24:95:9b:01:69:
                    b1:a8:b3:ed:3e:a6:b9:82:72:58:d4:76:2d:76:dc:
                    8e:a3:70:07:57:e4:da:eb:37:29:c7:91:ab:71:75:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9A:B6:B0:DD:CF:6A:10:AC:74:B2:61:EC:F3:C5:E5:B2:F6:65:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2073852-2c85-39c7-bece-da234b549592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:3e:79:18:de:01:1e:5f:44:93:8d:1c:5a:bd:d0:a9:4f:32:
         15:e8:db:c6:a8:f4:c3:d1:50:23:30:ab:5e:40:f9:2e:e9:a3:
         ae:76:b9:b5:15:00:5c:0a:4b:5c:a3:6b:13:9f:06:06:43:c6:
         fa:bc:91:86:28:d2:34:5a:f3:c6:85:4c:f2:52:aa:92:75:dd:
         55:b9:c1:93:41:99:3e:52:fe:bb:e8:9b:28:55:c2:7f:c7:70:
         ae:0a:29:8a:51:78:3a:9a:e9:f2:54:7f:35:ca:ce:c4:d7:be:
         cf:bc:65:ef:8c:68:64:5c:f8:7f:f9:a3:c6:71:4a:9a:20:dd:
         e8:8d:50:ef:cf:e4:38:21:7a:dd:37:48:62:f3:f2:31:1a:fd:
         3f:23:42:09:51:e3:0c:33:d3:16:10:7e:f1:3d:c9:b4:1f:6a:
         15:f0:99:cc:a3:2b:fd:25:c7:c5:7b:a5:8c:8c:31:3a:65:cb:
         31:ba:c8:62:05:91:20:6e:56:3e:b7:d0:43:9d:97:02:a8:ac:
         14:ff:6f:b9:b9:0b:05:a0:b1:34:46:85:d0:f6:d5:0c:20:73:
         47:f0:ae:aa:e8:08:8c:fa:59:77:1f:c7:e2:88:72:2a:3d:ce:
         61:2a:8a:03:22:70:e7:d9:80:e8:49:e3:b4:d9:d5:c1:1d:45:
         e4:51:6c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:31:34 2026 by rpki-client