Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/41409548-d60e-346d-9720-28ee7b710ff6.roa
File:                     41409548-d60e-346d-9720-28ee7b710ff6.roa (raw, json)
Hash identifier:          BorFooN6kWuT+yLMQdmJYky87qGDeCX0i4bUzBiesvU=
Subject key identifier:   F2:06:D1:A6:D5:E9:AA:5E:4E:C2:40:24:79:2F:A1:81:BA:5B:1D:89
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E0005EDF531B699B0739FB200
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/41409548-d60e-346d-9720-28ee7b710ff6.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:ed:f5:31:b6:99:b0:73:9f:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=d1bd1fb7-f660-4f50-9a1a-abf8d414f91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:b7:19:db:ed:ac:19:62:21:4b:36:9b:dd:
                    e6:10:e1:48:f7:81:0d:1c:29:d3:07:2e:92:5f:2c:
                    74:f0:ea:c1:dd:75:df:9c:09:84:60:d3:c8:ff:bb:
                    bb:19:ee:4d:54:6c:72:c4:df:76:44:73:59:a8:36:
                    9a:f3:96:8a:3d:76:c3:92:03:a5:45:18:44:a9:45:
                    eb:3a:a7:d1:8d:af:7d:e3:ba:e9:c4:27:6b:46:71:
                    c5:57:85:57:87:77:44:d6:fc:75:aa:b5:61:8d:9d:
                    11:69:c3:30:78:95:ce:19:3b:2a:7b:63:54:eb:94:
                    45:52:ca:b0:53:6e:00:67:0c:21:7f:c9:04:9e:0f:
                    ac:10:16:54:2c:18:98:74:1f:8f:50:2a:84:dc:96:
                    9e:e4:ae:f8:cf:91:3d:44:60:22:e3:01:b3:49:8b:
                    06:38:5a:8c:ee:c7:12:a2:63:08:cc:f4:a5:59:9f:
                    48:2e:31:90:48:42:0e:6a:cf:c4:53:8b:89:60:c3:
                    dc:63:bd:da:1e:5e:b8:dc:07:06:6b:43:0a:c4:bf:
                    61:ed:e7:11:4e:30:59:53:36:93:36:03:34:a1:b1:
                    27:2c:96:89:5f:2a:34:28:0f:18:f6:62:45:88:0e:
                    64:d7:aa:9e:2b:95:5e:ce:6a:7c:04:b0:29:f4:7a:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:06:D1:A6:D5:E9:AA:5E:4E:C2:40:24:79:2F:A1:81:BA:5B:1D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/41409548-d60e-346d-9720-28ee7b710ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a3:18:71:0c:aa:21:7c:55:9f:ac:ca:47:d6:21:42:49:82:
         4b:c0:f7:ed:c0:5f:a9:67:e9:3e:ff:14:f7:35:47:85:c7:1a:
         1a:45:a4:a0:8f:d9:c7:32:5c:45:8c:34:ba:78:24:35:9b:7b:
         ce:47:b0:b1:70:d6:a3:28:f7:d7:fa:33:c8:14:b2:9e:9c:45:
         e6:02:9c:33:53:45:e4:b0:10:a1:ed:f6:b8:7d:fa:ba:ec:9a:
         2b:3d:b3:ad:49:99:93:bf:ff:95:73:6b:93:83:42:de:85:bc:
         02:fc:38:73:c7:6a:b9:dd:2f:15:1e:a8:a2:c5:79:ae:28:59:
         78:3b:97:51:d9:4a:e1:46:5c:12:38:db:39:e0:37:24:23:c7:
         63:25:fb:66:f1:b2:63:9a:78:24:d1:6f:5d:32:20:f2:04:4d:
         ed:17:c5:62:15:f0:57:79:f3:7d:74:4e:5e:7b:bf:fb:4f:e2:
         fc:35:c5:c6:e7:57:7d:a5:d9:5d:1b:8d:7e:4c:28:08:b9:ee:
         fd:75:3d:f6:ca:67:7c:56:6c:aa:8d:39:49:f3:26:49:e9:8b:
         ac:0a:92:33:3a:32:85:a0:52:79:1d:8e:88:42:4a:6f:e9:8e:
         27:fe:d4:51:42:25:95:93:a6:d6:ea:41:b2:0a:03:a1:46:c8:
         f7:9c:b0:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABe31MbaZsHOfsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
ZDFiZDFmYjctZjY2MC00ZjUwLTlhMWEtYWJmOGQ0MTRmOTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGu3GdvtrBliIUs2m93mEOFI94ENHCnTBy6S
Xyx08OrB3XXfnAmEYNPI/7u7Ge5NVGxyxN92RHNZqDaa85aKPXbDkgOlRRhEqUXr
OqfRja9947rpxCdrRnHFV4VXh3dE1vx1qrVhjZ0RacMweJXOGTsqe2NU65RFUsqw
U24AZwwhf8kEng+sEBZULBiYdB+PUCqE3Jae5K74z5E9RGAi4wGzSYsGOFqM7scS
omMIzPSlWZ9ILjGQSEIOas/EU4uJYMPcY73aHl643AcGa0MKxL9h7ecRTjBZUzaT
NgM0obEnLJaJXyo0KA8Y9mJFiA5k16qeK5Vezmp8BLAp9HpUDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPIG0abV6apeTsJAJHkvoYG6Wx2JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNDE0MDk1NDgtZDYwZS0z
NDZkLTk3MjAtMjhlZTdiNzEwZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESjGHEMqiF8VZ+sykfWIUJJgkvA9+3AX6ln6T7/FPc1R4XHGhpFpKCP
2ccyXEWMNLp4JDWbe85HsLFw1qMo99f6M8gUsp6cReYCnDNTReSwEKHt9rh9+rrs
mis9s61JmZO//5Vza5ODQt6FvAL8OHPHarndLxUeqKLFea4oWXg7l1HZSuFGXBI4
2zngNyQjx2Ml+2bxsmOaeCTRb10yIPIETe0XxWIV8Fd58310Tl57v/tP4vw1xcbn
V32l2V0bjX5MKAi57v11PfbKZ3xWbKqNOUnzJknpi6wKkjM6MoWgUnkdjohCSm/p
jif+1FFCJZWTptbqQbIKA6FGyPecsKE=
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:41:25 2026 by rpki-client