Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/6db07d60-40ed-3ad4-a297-e8c49b593112.roa
File:                     6db07d60-40ed-3ad4-a297-e8c49b593112.roa (raw, json)
Hash identifier:          oFnAspBTXZxik8wiFe5RsmWBmOcr9EVryH5HuLciuqA=
Subject key identifier:   AE:B3:80:B2:45:38:A3:ED:19:DF:AC:69:82:B3:17:CD:2E:34:F9:F2
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E0005FAFE563E7D398F0C1100
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/6db07d60-40ed-3ad4-a297-e8c49b593112.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:fa:fe:56:3e:7d:39:8f:0c:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=f9a1bf5b-38cd-4828-8a54-cb944230c77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:00:0e:d0:1e:69:0f:e5:e6:e2:f3:f3:d4:
                    92:e8:d0:0c:e8:a1:7a:53:3b:df:7c:c1:de:77:4e:
                    6d:f0:ae:18:f9:dd:cb:da:89:a6:ea:74:23:a7:14:
                    72:e7:a7:1e:e8:09:13:b9:ca:08:17:0c:c9:d1:79:
                    d4:ff:76:85:93:87:6e:fd:06:13:51:a7:18:40:0d:
                    18:6b:3d:b1:d5:82:d1:55:76:4e:90:10:a2:a2:36:
                    7d:52:60:87:b8:f9:23:41:ae:fe:fe:4a:f4:d5:e2:
                    fb:00:a6:31:9e:87:60:49:35:f3:f1:a3:77:07:6d:
                    d2:24:d6:e6:c1:1f:eb:b8:53:26:28:89:ad:ed:c9:
                    a8:5a:55:5f:70:1c:52:3e:39:c7:05:fa:70:b3:40:
                    cc:db:12:26:6c:94:bc:8e:4e:ed:0d:6c:1e:35:c5:
                    ea:07:d0:d5:b5:88:81:4c:18:1a:20:72:de:22:f2:
                    f6:48:a1:f1:cf:23:af:75:28:91:f2:42:75:ac:b7:
                    f6:05:be:f7:23:12:2a:21:00:77:33:d5:5e:53:a4:
                    06:1d:79:29:e2:b4:65:dd:b4:cf:ca:eb:92:0a:7a:
                    e7:d7:5a:19:75:df:e1:29:4b:bc:8d:26:e3:1f:25:
                    8d:5c:c2:aa:66:c0:fb:97:80:fd:50:f1:21:c6:aa:
                    15:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B3:80:B2:45:38:A3:ED:19:DF:AC:69:82:B3:17:CD:2E:34:F9:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/6db07d60-40ed-3ad4-a297-e8c49b593112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b3:43:66:b1:de:b9:bf:7e:01:22:3b:71:54:1e:fb:51:1d:
         7a:38:df:fe:01:bf:9a:16:4a:3c:68:4d:6b:93:b2:11:78:04:
         da:a5:2b:97:34:ca:ce:d3:44:79:e1:f6:11:3a:59:0a:10:2f:
         ff:5b:72:29:53:cd:85:38:ec:63:a6:f4:0f:08:67:24:a2:8c:
         eb:33:f1:2d:d5:78:76:44:b8:35:eb:e7:0c:ae:b9:d0:a3:b8:
         ba:03:31:9e:df:11:6e:40:4b:79:bf:7c:a3:55:bd:32:65:8a:
         1f:f1:91:00:2e:c2:12:b7:19:4d:a7:36:28:d2:df:01:85:b9:
         80:7d:b3:4e:2a:25:13:c6:18:7a:2c:84:db:1c:23:61:2b:72:
         be:c3:98:3e:91:99:30:ae:4f:da:c9:87:ff:6c:70:cb:1d:b5:
         87:01:58:2f:ee:a4:7c:98:94:9d:41:7e:bf:25:8d:76:8f:c0:
         8a:20:91:ad:a4:4d:5d:42:3b:67:6c:d7:5a:6c:b3:19:42:c4:
         ad:bb:6a:bc:6b:2d:51:5d:3d:03:26:52:d3:ff:17:1e:80:81:
         5d:b0:a2:24:ae:5c:cf:c8:20:a2:99:df:96:2d:75:c8:b2:e6:
         90:9a:9d:60:cd:93:f2:43:be:68:bf:81:3c:65:75:4f:ed:1d:
         ee:08:37:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABfr+Vj59OY8MEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
ZjlhMWJmNWItMzhjZC00ODI4LThhNTQtY2I5NDQyMzBjNzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPAADtAeaQ/l5uLz89SS6NAM6KF6UzvffMHe
d05t8K4Y+d3L2omm6nQjpxRy56ce6AkTucoIFwzJ0XnU/3aFk4du/QYTUacYQA0Y
az2x1YLRVXZOkBCiojZ9UmCHuPkjQa7+/kr01eL7AKYxnodgSTXz8aN3B23SJNbm
wR/ruFMmKImt7cmoWlVfcBxSPjnHBfpws0DM2xImbJS8jk7tDWweNcXqB9DVtYiB
TBgaIHLeIvL2SKHxzyOvdSiR8kJ1rLf2Bb73IxIqIQB3M9VeU6QGHXkp4rRl3bTP
yuuSCnrn11oZdd/hKUu8jSbjHyWNXMKqZsD7l4D9UPEhxqoVlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK6zgLJFOKPtGd+saYKzF80uNPnyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNmRiMDdkNjAtNDBlZC0z
YWQ0LWEyOTctZThjNDliNTkzMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSzQ2ax3rm/fgEiO3FUHvtRHXo43/4Bv5oWSjxoTWuTshF4BNqlK5c0
ys7TRHnh9hE6WQoQL/9bcilTzYU47GOm9A8IZySijOsz8S3VeHZEuDXr5wyuudCj
uLoDMZ7fEW5AS3m/fKNVvTJlih/xkQAuwhK3GU2nNijS3wGFuYB9s04qJRPGGHos
hNscI2Ercr7DmD6RmTCuT9rJh/9scMsdtYcBWC/upHyYlJ1Bfr8ljXaPwIogka2k
TV1CO2ds11pssxlCxK27arxrLVFdPQMmUtP/Fx6AgV2woiSuXM/IIKKZ35Ytdciy
5pCanWDNk/JDvmi/gTxldU/tHe4IN40=
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:09:20 2026 by rpki-client