Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/793d4344-b365-3fc5-922f-5bd874e1dab9.roa
File:                     793d4344-b365-3fc5-922f-5bd874e1dab9.roa (raw, json)
Hash identifier:          LHJvN3N6rqYEixTvoeFIzEH8Ziw9o/eEOWOJbNQtvh4=
Subject key identifier:   DA:C6:1A:06:96:34:2D:73:B3:98:8B:CB:C1:A3:70:AA:D7:FC:4B:E6
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584EA79ADC4DCD5A78884B9D2E00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/793d4344-b365-3fc5-922f-5bd874e1dab9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        136.22.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:dc:4d:cd:5a:78:88:4b:9d:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b81ccff9-62a3-46b0-b284-110c416e2d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:f5:b3:de:71:86:b9:6c:5b:20:b3:84:8d:
                    90:99:77:d5:b0:f0:d6:89:a5:62:a2:88:05:58:2f:
                    ea:02:a5:ed:7d:5f:b3:21:f4:8d:0c:7d:b2:17:d1:
                    48:4b:2f:93:a1:4d:8a:ab:c6:ad:7f:1b:d5:67:d7:
                    3a:e0:a7:70:90:30:3b:8d:74:91:da:8d:e0:c1:42:
                    82:4e:42:0b:7e:96:46:54:7b:ad:fb:3e:67:58:fb:
                    10:31:27:dd:88:6f:3a:4b:70:38:19:dc:d3:35:72:
                    6f:73:45:b7:5a:fb:f4:58:53:03:0f:27:48:57:d7:
                    2e:b4:1b:42:b5:5e:cb:4c:05:be:58:c9:c8:2b:2f:
                    7e:37:53:28:ff:16:43:48:2e:7e:71:4a:76:5a:2b:
                    1d:20:21:5c:62:38:41:d4:76:fe:23:1c:b8:7e:ba:
                    99:01:2a:b6:b9:18:e7:71:3c:e0:c6:7a:e1:5c:d6:
                    a8:47:ca:b5:31:b3:d2:36:5d:c6:98:47:66:c3:d8:
                    75:1f:26:cc:32:a0:ef:6c:39:f2:d0:91:80:cc:12:
                    d4:9b:fd:5c:97:fb:a3:2d:10:95:9e:c4:c8:e3:97:
                    31:9e:af:98:2b:b0:36:67:6f:32:1f:8a:22:56:b2:
                    53:de:c2:47:a0:5d:c8:bb:a2:be:f9:4d:ee:85:a7:
                    9f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C6:1A:06:96:34:2D:73:B3:98:8B:CB:C1:A3:70:AA:D7:FC:4B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/793d4344-b365-3fc5-922f-5bd874e1dab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:8b:c2:96:8b:da:9f:0f:a8:d9:59:fe:a5:29:d0:d8:18:22:
         42:38:a6:26:4d:08:31:a2:55:d6:73:ac:f8:1e:ee:68:1c:49:
         c0:88:c6:d4:3d:d5:b2:4b:51:39:06:7a:b4:c9:a7:e1:78:73:
         5a:f6:06:4a:98:c6:51:b4:4e:51:65:cd:66:80:96:8b:e0:be:
         ba:88:36:a9:82:a6:84:1d:72:92:1f:af:f0:39:46:f9:f2:cc:
         95:dd:3c:c6:3d:84:97:dd:aa:09:e1:40:47:9e:38:48:fa:35:
         d8:81:06:a3:c6:56:a7:39:81:59:81:b0:a3:f4:5e:20:b0:d0:
         df:aa:3c:7d:94:ab:07:95:ef:22:8a:e9:3a:6b:37:3e:00:d3:
         7e:83:70:b1:ab:bc:b3:88:67:06:a4:e1:d1:fd:ca:91:bd:73:
         38:9d:51:73:dd:aa:08:7c:dc:8a:ef:05:c0:36:34:68:a3:ce:
         bc:24:96:44:a4:6c:16:37:e6:26:8d:db:92:34:03:50:75:3b:
         64:5c:92:11:e3:20:7c:7b:60:0d:02:3a:db:99:47:73:39:1a:
         3b:82:6f:5c:cb:2f:09:ec:a7:fb:fc:11:2c:82:96:42:f0:67:
         07:5f:45:bf:53:3a:c2:73:bb:18:e0:5d:27:4d:d8:95:a2:69:
         2c:e8:67:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:54:34 2026 by rpki-client