Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/454f1cc4-b48d-3411-844d-c9a3f81eef50.roa
File:                     454f1cc4-b48d-3411-844d-c9a3f81eef50.roa (raw, json)
Hash identifier:          tbJjeZZU4coEgpcYyxYgushiFBV+Z5YAeHuTfA5gH/c=
Subject key identifier:   E5:1A:AC:47:A0:15:BF:77:C7:F1:07:AC:FB:10:56:69:CB:D4:65:65
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E0005F502637261EB183F1800
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/454f1cc4-b48d-3411-844d-c9a3f81eef50.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:f5:02:63:72:61:eb:18:3f:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=a5d6d240-7668-4265-857e-9e05ea81b3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8e:42:df:d2:29:ea:d2:cc:86:4c:93:6a:ce:
                    01:f8:6a:7c:f5:b6:d6:2c:be:55:75:6e:88:86:e8:
                    44:1b:b6:60:14:c1:87:1a:9f:8c:27:f3:73:ed:b5:
                    f3:2b:2c:dc:67:54:f4:75:66:93:ac:e0:db:ad:ea:
                    7f:a5:d1:1a:72:f1:55:bd:3d:39:ea:8c:f7:bd:ff:
                    19:5e:60:c9:64:c7:36:17:c1:26:0b:fd:96:05:1b:
                    1e:cd:69:cd:16:0d:be:f0:93:84:e0:6e:b7:02:7f:
                    66:44:bd:d1:72:30:d0:01:ed:e6:ad:35:d9:0a:fa:
                    ab:e9:d4:c3:fa:47:99:04:e9:dc:26:a1:b5:60:09:
                    f7:4d:5e:c0:89:1e:b0:0f:b7:3d:44:08:52:a5:15:
                    da:80:c0:43:e5:bf:df:72:a6:00:a2:61:1c:8b:0f:
                    67:40:a7:e1:ea:b1:4d:d7:15:25:a7:52:1c:a6:a0:
                    54:fa:63:3a:85:11:01:2f:c8:33:5a:b8:37:21:d6:
                    d4:12:49:a1:9a:9f:e5:c2:84:bc:54:94:fa:29:a6:
                    23:48:c1:73:d4:23:5a:50:b2:0d:6f:3b:81:85:78:
                    70:0a:1a:67:db:0a:1e:29:e4:f5:46:69:9c:38:e6:
                    b9:bd:3c:4c:8b:f3:df:4f:ef:e6:41:f5:50:07:31:
                    35:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1A:AC:47:A0:15:BF:77:C7:F1:07:AC:FB:10:56:69:CB:D4:65:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/454f1cc4-b48d-3411-844d-c9a3f81eef50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:43:58:2c:fb:b6:04:d8:35:38:60:f8:d9:1f:83:61:18:04:
         cb:18:d5:47:76:fc:79:15:1f:7a:f7:8d:40:06:7f:32:3a:87:
         cf:61:b2:9e:21:2d:dc:0f:92:56:3d:09:4b:e1:9d:08:6d:69:
         d3:cf:35:82:5a:48:16:0d:20:33:47:62:fa:cf:21:7e:2d:4e:
         bd:9a:d0:d3:ef:4f:5b:83:92:81:0e:73:35:48:6d:69:4c:27:
         54:0f:1b:df:70:47:6b:e4:d7:63:7a:92:66:bd:c8:f9:27:73:
         25:11:f7:13:51:3a:61:ae:ff:de:f4:40:13:a6:30:68:5e:e0:
         9b:05:e7:ce:95:1e:12:75:0f:b1:a4:d7:26:a4:20:b9:2f:0b:
         c5:38:83:b1:9e:da:c3:00:b2:6e:b5:a4:8f:24:1c:36:58:16:
         a5:fd:7c:74:32:96:8b:6f:65:89:19:50:cc:6c:01:c6:98:24:
         06:3a:82:48:28:ae:5f:7a:1e:33:cc:cb:79:54:4b:f5:d0:e0:
         96:21:80:26:80:f2:87:b6:39:6c:e1:3a:3f:d0:93:fd:ec:ea:
         df:76:6b:c0:b3:8d:45:98:3f:66:28:4b:8b:fd:9c:17:1a:e2:
         f1:ee:51:8a:f9:14:21:c4:51:2c:e1:64:d2:1b:ff:18:02:b2:
         8f:ab:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:41:27 2026 by rpki-client