Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa
File:                     3f70c066-2334-345c-8e8d-a890ceb66284.roa (raw, json)
Hash identifier:          iC7k2lnluVBmayzWmXf/2d+okAqgVcO27VGD9pVSYCo=
Subject key identifier:   90:E1:89:37:B1:0C:D3:24:7B:F9:1E:39:E8:D2:D9:3C:4A:90:1F:CF
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584EA79A794E9E45087E15A58400
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        136.22.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:79:4e:9e:45:08:7e:15:a5:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7ef8dbf6-5a83-4663-91f3-9efde4edcdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:76:2a:14:06:a7:a1:33:e6:08:0c:21:c8:
                    e3:43:64:00:f1:5b:0e:d4:8c:09:52:99:f0:88:2f:
                    48:50:5b:8e:08:68:21:0b:57:34:ba:0b:f5:36:38:
                    ce:f2:8b:99:34:45:d0:c9:dc:97:4e:8b:b8:d1:f2:
                    c7:4b:45:74:3d:be:fa:35:7c:b8:e7:0e:44:0b:b6:
                    7a:ff:4a:c0:ce:03:08:24:2a:9b:fb:02:5a:7c:ee:
                    b5:c8:d2:4e:8e:a3:33:ec:1b:db:14:2c:af:34:de:
                    f4:60:41:f3:e1:fd:67:b4:46:04:70:5e:2c:bb:10:
                    5f:00:0a:70:0a:31:66:85:4f:c8:22:3a:0f:42:b3:
                    4c:b5:6d:6d:1d:98:92:15:f8:9d:f9:c2:8f:e9:2e:
                    1a:23:62:4a:c6:a8:13:38:42:49:ec:1d:0e:2c:88:
                    63:78:43:e4:a0:0a:a4:5e:26:50:91:51:af:28:d3:
                    54:fe:b2:fe:cb:b3:04:84:37:ec:26:d4:49:fe:5d:
                    cc:4b:da:5f:1d:8d:0c:f0:07:f5:b4:a1:61:f4:21:
                    0b:78:f8:8d:c8:08:b2:cc:51:06:51:a4:68:2a:2a:
                    40:6c:88:85:a2:1b:d4:7a:e4:db:70:7e:0b:60:46:
                    48:d9:6d:1b:ed:cd:aa:ae:f4:1f:08:64:e2:2d:0d:
                    f4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E1:89:37:B1:0C:D3:24:7B:F9:1E:39:E8:D2:D9:3C:4A:90:1F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:98:9d:ed:81:7f:5a:d8:a6:5f:bd:ca:e9:8e:6d:6b:ae:f7:
         a3:45:d9:67:13:fc:2b:da:72:aa:c5:9d:ed:9c:ed:52:c4:f4:
         0d:72:21:7a:4e:3b:94:8c:be:7a:37:2a:37:cc:bb:23:f4:d6:
         9f:1d:01:1e:d3:98:04:7f:f5:0d:68:61:a9:e9:a5:df:7e:ba:
         48:c7:14:ba:22:6c:b6:ac:68:83:4f:77:de:bd:cd:30:58:f5:
         e0:60:31:e7:8b:ed:66:71:e8:f6:c2:47:7f:dc:77:88:d1:25:
         01:28:39:0e:94:86:53:80:67:ae:24:c5:4f:bb:0f:b7:c3:00:
         45:30:b3:46:c0:1b:8d:40:bb:2c:a7:0e:d4:c5:2b:88:63:6d:
         0a:a3:e0:d8:f1:35:f8:75:99:4e:7a:49:1f:76:fb:2b:96:30:
         ea:b0:e1:69:d5:6a:ea:ac:c0:32:84:24:af:eb:ea:f5:18:62:
         47:97:b1:f2:1d:9d:c7:a9:39:c4:41:a8:00:70:98:18:99:de:
         d0:2f:01:ef:7f:62:2a:c7:6f:a8:87:c3:9c:1a:61:ce:19:f0:
         a0:fb:6f:a6:c6:6e:5d:66:af:0d:59:50:53:26:5f:f9:e4:92:
         ae:0c:14:b6:a2:29:58:39:59:09:13:ae:36:b2:36:ec:97:b3:
         d4:62:9a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:07:24 2026 by rpki-client