Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/91c1e2f3-72fb-3651-b995-c235e2819d23.roa
File:                     91c1e2f3-72fb-3651-b995-c235e2819d23.roa (raw, json)
Hash identifier:          +BshtVP9OqnFW4ybU76YWxYcub19jSqIzldnKJ/r5Z0=
Subject key identifier:   73:24:18:06:A0:EC:CF:3B:C7:71:92:DC:6A:DC:FD:13:DB:F3:7D:39
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E0006126FF2383AE11DADF8C0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/91c1e2f3-72fb-3651-b995-c235e2819d23.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:12:6f:f2:38:3a:e1:1d:ad:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=d2a8c7b1-a9e9-441b-ac16-de0daf869c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d2:3d:44:f3:74:06:24:8a:3d:b9:ac:24:a1:
                    3a:86:18:17:eb:96:fe:c3:70:04:a3:03:dd:65:de:
                    7d:ff:57:aa:cf:ed:e6:93:cb:fe:8d:b7:ef:ec:f0:
                    52:22:19:b0:dd:65:d1:28:83:a9:16:c6:aa:8c:ef:
                    17:8f:95:3f:c0:5a:7e:26:93:88:7b:ba:46:de:48:
                    d2:6a:43:93:62:06:e5:27:14:08:d7:57:c9:e9:52:
                    f5:3a:86:ef:2f:64:5b:93:20:c3:b0:f2:3b:84:5f:
                    54:36:a3:a7:22:42:09:57:50:a8:13:1e:85:1f:4d:
                    f2:ad:03:cf:38:53:6b:eb:91:12:ec:5e:cc:28:e1:
                    3e:68:eb:f2:06:ac:4b:33:ea:3b:c8:9d:c8:8a:1a:
                    57:94:ff:9e:7d:fb:21:7e:c3:c5:b2:55:dd:6e:41:
                    f1:e1:f8:bb:72:ae:01:85:1c:03:ec:6b:e9:eb:44:
                    86:23:2d:30:6f:7a:d8:47:4f:8e:6d:a7:0b:81:6b:
                    c8:6e:6a:8d:1d:4c:cf:e2:7b:60:14:db:d6:0e:cb:
                    14:ad:c6:e5:46:18:68:d4:48:ec:92:78:cc:66:a7:
                    54:f4:e4:8b:89:6b:09:d6:cd:be:75:8f:f7:71:77:
                    9b:b3:ba:48:a4:ea:88:3b:eb:6d:16:28:39:77:70:
                    17:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:24:18:06:A0:EC:CF:3B:C7:71:92:DC:6A:DC:FD:13:DB:F3:7D:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/91c1e2f3-72fb-3651-b995-c235e2819d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:a7:b0:a7:c4:3e:4f:bd:bd:28:19:37:57:11:02:3f:cd:44:
         56:49:ef:03:d9:32:a2:03:76:bf:39:d7:a8:ff:eb:75:5b:d1:
         bc:c1:02:d1:c3:70:6f:c2:68:32:e7:82:57:d6:83:17:b3:2c:
         89:6f:eb:e9:91:b4:7f:fb:d0:7b:f6:e7:56:a9:a2:12:c4:a4:
         dd:1a:ea:3f:16:c9:9c:d4:17:13:18:8e:54:ef:53:2a:97:bc:
         7b:af:e4:46:2f:70:dd:47:e9:0f:a0:c4:b0:2a:2a:8f:94:02:
         79:c6:42:f2:92:00:6e:71:41:17:10:8f:db:8d:f9:5c:d1:6f:
         f6:7c:52:da:e4:96:6f:bb:62:e3:6a:e4:6c:a8:6c:52:95:19:
         7c:59:5d:62:cf:d3:1c:f4:53:29:cf:c2:28:f8:f2:63:b6:94:
         0e:31:2a:7d:8a:f1:10:4f:b7:ef:60:6d:d8:f7:49:e6:a8:97:
         c7:01:19:79:15:17:1d:c6:f7:fe:a3:85:d1:84:36:5f:ae:e1:
         ef:67:e7:ad:68:26:ab:50:50:55:dd:6d:85:be:2e:ab:2f:2e:
         1e:17:63:39:4d:8d:0f:36:0c:c4:90:e2:f6:7f:35:1f:b2:3d:
         4c:d0:f6:69:46:df:6d:ef:f9:66:26:1e:06:0d:01:12:c3:a3:
         57:36:75:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABhJv8jg64R2t+MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
ZDJhOGM3YjEtYTllOS00NDFiLWFjMTYtZGUwZGFmODY5Yzg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9I9RPN0BiSKPbmsJKE6hhgX65b+w3AEowPd
Zd59/1eqz+3mk8v+jbfv7PBSIhmw3WXRKIOpFsaqjO8Xj5U/wFp+JpOIe7pG3kjS
akOTYgblJxQI11fJ6VL1OobvL2RbkyDDsPI7hF9UNqOnIkIJV1CoEx6FH03yrQPP
OFNr65ES7F7MKOE+aOvyBqxLM+o7yJ3IihpXlP+effshfsPFslXdbkHx4fi7cq4B
hRwD7Gvp60SGIy0wb3rYR0+ObacLgWvIbmqNHUzP4ntgFNvWDssUrcblRhho1Ejs
knjMZqdU9OSLiWsJ1s2+dY/3cXebs7pIpOqIO+ttFig5d3AXmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHMkGAag7M87x3GS3Grc/RPb8305MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvOTFjMWUyZjMtNzJmYi0z
NjUxLWI5OTUtYzIzNWUyODE5ZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFOnsKfEPk+9vSgZN1cRAj/NRFZJ7wPZMqIDdr8516j/63Vb0bzBAtHD
cG/CaDLnglfWgxezLIlv6+mRtH/70Hv251apohLEpN0a6j8WyZzUFxMYjlTvUyqX
vHuv5EYvcN1H6Q+gxLAqKo+UAnnGQvKSAG5xQRcQj9uN+VzRb/Z8Utrklm+7YuNq
5GyobFKVGXxZXWLP0xz0UynPwij48mO2lA4xKn2K8RBPt+9gbdj3Seaol8cBGXkV
Fx3G9/6jhdGENl+u4e9n561oJqtQUFXdbYW+LqsvLh4XYzlNjQ82DMSQ4vZ/NR+y
PUzQ9mlG323v+WYmHgYNARLDo1c2dfY=
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:40:42 2026 by rpki-client