Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cee63ea6-f91a-38df-9d9a-434245d19f95.roa
File:                     cee63ea6-f91a-38df-9d9a-434245d19f95.roa (raw, json)
Hash identifier:          +EDWDbNrd+Zfl509adHWCl+8wuZR9BAOOLfJdvbV318=
Subject key identifier:   13:FC:9E:A3:3B:68:C3:E1:03:44:3C:6B:78:0D:D2:7D:12:55:B6:45
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F497CDF7054CBB1724BDB5200
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cee63ea6-f91a-38df-9d9a-434245d19f95.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:df:70:54:cb:b1:72:4b:db:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=086cbccc-479f-4921-9a36-afa99eb7ccfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:af:54:38:a8:bc:9e:10:67:44:6b:6a:d0:38:
                    9a:6f:06:69:22:22:18:e0:fe:2a:c0:52:cc:7a:94:
                    2f:29:e8:0b:d1:78:14:da:d6:ef:38:52:36:eb:b8:
                    38:3d:f6:75:53:fa:96:6e:61:eb:5a:77:f4:d2:79:
                    ff:df:8c:f0:5e:ab:a2:85:d5:15:aa:55:d8:e2:ee:
                    87:53:af:24:2c:3d:32:3c:89:a0:95:35:dc:f1:53:
                    20:67:eb:91:fc:97:1d:35:70:21:be:b9:40:e6:62:
                    d2:f0:13:cc:c1:b5:36:aa:be:ea:5d:25:da:99:13:
                    a4:ba:fe:65:db:a8:44:c0:67:2e:f4:37:b7:68:6a:
                    26:2a:d2:98:b8:f7:08:a8:17:ea:86:e6:12:ab:f0:
                    d9:fe:be:c0:19:a3:9c:b0:70:b3:f8:1d:26:d9:21:
                    be:a6:82:44:b5:e3:3c:90:8e:65:bf:67:7a:72:33:
                    9d:bf:c5:b5:13:a1:2b:d2:ac:ca:78:22:09:75:f0:
                    29:a6:3d:40:33:1d:31:ad:59:c1:2b:3f:ba:4e:ff:
                    de:5e:f0:b8:cb:4c:9f:4d:3e:00:63:8e:dd:17:f0:
                    8c:cd:24:0e:74:e0:cb:73:84:ae:0f:dd:61:cf:1c:
                    ee:c3:61:3b:2c:d8:42:53:e8:e4:ae:d3:2b:2c:7c:
                    22:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FC:9E:A3:3B:68:C3:E1:03:44:3C:6B:78:0D:D2:7D:12:55:B6:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cee63ea6-f91a-38df-9d9a-434245d19f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:55:93:ca:68:97:54:8c:41:08:f7:1a:2d:0f:d5:43:3e:92:
         ca:a3:fc:2e:fa:3d:78:89:f7:ef:f8:a0:bd:17:17:97:2e:0b:
         39:02:b2:38:86:ef:8d:3d:20:dd:2c:bf:1d:48:89:b2:9b:26:
         e1:1c:38:ec:02:03:fb:69:fb:e5:ab:cf:fc:87:1f:bd:98:c7:
         a6:b2:77:15:76:bb:a9:2a:8c:f7:8b:d4:c9:43:fd:8a:c3:29:
         98:6e:9c:87:29:f9:57:ea:d6:40:26:d7:64:d5:f1:96:36:28:
         71:be:40:72:16:26:ea:4c:ef:ba:b4:5e:bc:cb:66:3f:63:d7:
         0e:7a:97:a6:fe:c1:27:d5:de:cb:76:96:ee:76:3d:5e:09:9c:
         3c:2b:1f:6a:8a:44:04:34:0a:0d:04:38:17:f3:60:24:21:81:
         49:68:15:e4:4b:b4:73:af:2b:b0:c2:c7:1e:0f:b7:94:89:e5:
         b2:2d:c7:d0:78:f5:5a:f8:18:0c:38:0f:8d:b4:4c:e1:25:4e:
         50:4d:10:cd:1e:a3:18:e1:40:23:76:c6:c4:69:13:c9:1c:26:
         08:d1:2d:e4:51:17:c1:6a:45:c8:c2:9b:55:18:12:21:46:35:
         f7:c5:c0:56:9f:92:3d:cb:4e:f1:80:d6:2b:2b:94:cc:e2:ba:
         74:af:df:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:57:45 2026 by rpki-client