Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7cce62ac-f40e-3535-9eb2-4d1c7a6083fb.roa
File:                     7cce62ac-f40e-3535-9eb2-4d1c7a6083fb.roa (raw, json)
Hash identifier:          T+s5iHeCv4pEYs3auBHbfdfqCOg6KtLc+DToVTnanhM=
Subject key identifier:   99:7C:FC:7C:9E:8F:17:C8:4A:45:BC:4B:0C:48:D9:84:41:24:13:53
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584D1F4A5AF8C2D0FD53CB10A180
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7cce62ac-f40e-3535-9eb2-4d1c7a6083fb.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36040
IP address blocks:        136.22.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:5a:f8:c2:d0:fd:53:cb:10:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=992a34a7-8389-4607-9ee4-c6195e2b1cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ed:97:1b:d1:0f:7c:97:bd:7b:0c:d7:7f:f4:
                    3b:db:6b:44:00:c8:25:2c:4d:54:3b:fb:87:f4:4a:
                    ed:a9:d5:7a:20:64:d4:aa:b7:75:60:50:d0:eb:60:
                    20:7f:35:73:c1:cb:05:23:aa:ec:b7:0c:f3:33:1c:
                    4a:e2:49:e5:f6:69:a0:4e:a4:e8:9b:ee:ae:70:12:
                    32:5f:65:34:09:f4:80:f8:8b:4e:e8:81:b3:b4:f1:
                    ef:85:58:38:b9:2e:e4:c2:b5:a3:e2:4f:57:03:d5:
                    7a:75:77:ba:f8:8b:bd:07:c6:22:af:c7:98:92:17:
                    08:f4:29:8a:b2:7d:47:f3:f8:ae:1f:7c:86:58:b2:
                    71:c4:b9:6f:95:83:5f:c4:04:42:ad:57:f7:70:9d:
                    5a:d7:f4:92:2d:b4:e4:b6:80:94:12:70:83:a0:d7:
                    6e:b5:81:64:be:f0:bb:86:da:ea:a8:11:ac:b3:86:
                    d0:8e:d9:54:e7:2c:32:a3:ad:3c:cb:e5:1c:d1:b0:
                    72:1a:70:4b:92:a5:d8:d0:8b:25:aa:b7:d2:62:7b:
                    d0:9f:02:5a:13:51:cc:6f:7f:47:7e:43:28:cd:a0:
                    a4:66:9d:2e:f7:eb:c1:94:ae:ab:78:72:64:98:c6:
                    5f:b2:8e:31:cf:50:1b:37:a8:86:87:a5:f5:28:30:
                    25:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7C:FC:7C:9E:8F:17:C8:4A:45:BC:4B:0C:48:D9:84:41:24:13:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7cce62ac-f40e-3535-9eb2-4d1c7a6083fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:95:03:c4:2d:50:82:c6:46:be:ee:16:61:c0:83:68:82:e7:
         cb:64:8f:a4:9c:2f:50:b4:27:f4:1d:4e:97:8c:45:dc:bf:13:
         67:20:fe:b3:3a:85:5e:16:88:e6:76:e2:21:e7:af:32:8d:9e:
         c3:48:46:c4:86:4e:3b:94:5e:07:81:55:6f:4d:e8:47:5e:47:
         df:00:6d:c4:aa:2e:79:7c:5c:a5:c7:90:41:50:cc:45:de:08:
         31:d4:d9:6a:82:6d:d9:0f:42:e5:63:7f:34:24:a7:55:94:ac:
         7e:41:a4:94:0e:b2:05:eb:09:09:33:16:87:be:ca:5b:e9:e4:
         f7:a5:b7:e8:98:92:a3:ea:41:47:63:be:ba:4f:99:57:44:56:
         95:30:95:53:17:5f:fa:ab:7e:09:3a:18:19:33:e8:a6:a4:9e:
         e9:f0:0f:d8:52:61:f7:0f:2a:32:e9:2b:da:19:f4:21:1b:88:
         a4:e2:b9:83:29:a8:73:df:3b:98:5d:d0:b0:02:95:19:31:14:
         51:55:97:65:f0:9f:e5:f9:83:aa:91:3f:a5:d6:c2:29:e8:a1:
         69:c5:cc:77:d1:6e:76:65:c0:31:f6:72:bf:71:c4:15:de:78:
         50:c1:b2:d8:df:a2:47:2e:92:f4:7f:57:1a:96:c1:e7:5a:c1:
         f7:c6:8a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:34:54 2026 by rpki-client