Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a695f056-3b40-3250-b954-f1d214a7bdea.roa
File:                     a695f056-3b40-3250-b954-f1d214a7bdea.roa (raw, json)
Hash identifier:          J+PAjxZcm7hOpVyi7TBynqNMFIHNtCyskwsH2lP2DoQ=
Subject key identifier:   F6:56:A1:AE:A9:3C:AA:8B:0D:D6:7F:5D:79:2D:56:D3:76:BB:E6:5F
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584EA79A8B86D3A8DBE6A9E0F280
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a695f056-3b40-3250-b954-f1d214a7bdea.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        136.22.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:8b:86:d3:a8:db:e6:a9:e0:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=460f9c87-fb56-4839-9aba-b74a9c4b3383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:81:98:07:cb:56:cc:32:f5:20:be:e7:c6:68:
                    7d:54:3f:8b:ed:ff:e1:b7:d3:46:b6:b5:5c:48:bb:
                    81:2d:34:ed:b3:d7:56:cc:d9:c1:7c:fd:7e:d7:e2:
                    39:6c:0c:b9:c1:2d:5a:d7:a5:55:0c:c8:21:c4:d4:
                    da:39:11:07:53:aa:c7:8b:7d:93:29:13:5b:f3:4e:
                    c8:2a:d7:ca:ed:ae:82:9c:3e:1a:c8:65:71:35:31:
                    1c:10:21:98:19:ea:c9:d1:8a:ca:aa:64:8a:cd:5d:
                    17:6b:89:45:56:bb:a4:c8:36:69:c0:2e:6a:45:a4:
                    1c:fd:4b:4e:fe:b3:2b:1e:7a:ee:5e:8c:2f:83:bf:
                    e1:4b:21:2e:0f:fc:26:75:4e:d5:41:ab:8b:3b:74:
                    87:f2:b2:b4:c8:06:55:11:9e:01:28:d5:f7:3f:30:
                    22:29:f5:fc:c9:10:ee:95:91:59:e8:08:60:6f:33:
                    1a:fd:3f:10:2e:65:3d:b7:ff:a1:01:7b:d1:3c:fe:
                    e0:59:83:f5:88:72:3b:e0:96:64:4e:1e:52:b1:4d:
                    b4:49:05:f9:ab:af:b8:5d:c9:88:db:56:ba:d7:79:
                    36:48:e7:86:04:9e:3d:f9:ca:ad:1d:9c:11:ab:d8:
                    dd:2f:f4:c9:8b:e4:7a:ca:2f:59:c3:bc:95:f6:a0:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:56:A1:AE:A9:3C:AA:8B:0D:D6:7F:5D:79:2D:56:D3:76:BB:E6:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a695f056-3b40-3250-b954-f1d214a7bdea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:38:fe:a8:9e:4b:b3:62:28:28:02:bc:17:e9:43:01:15:19:
         d3:55:83:8e:46:e6:01:49:e2:da:59:99:38:c1:76:db:e0:fd:
         84:ed:d9:f5:5d:b7:a6:13:4f:a0:ae:28:3d:4f:9b:6b:80:9b:
         00:c7:ec:ed:32:3d:67:0a:80:25:c8:35:56:8c:28:50:5f:91:
         73:58:5b:2b:39:93:e6:da:c0:b2:ef:d2:82:15:da:08:04:1e:
         30:79:f1:cd:b3:53:78:05:84:6a:8a:d7:cf:b1:67:6e:14:1f:
         f4:06:bf:3f:ee:43:57:e0:4c:49:f8:0c:8f:25:0a:8e:a4:c1:
         ce:72:10:7a:35:f0:ab:30:f9:55:cd:a9:58:fa:7c:8f:e3:62:
         c8:e2:28:55:86:d2:09:fa:6f:93:7d:f5:13:8e:df:3f:14:8e:
         10:15:53:08:78:11:24:16:09:0e:f3:6f:b9:12:72:0d:ae:1e:
         48:3e:12:1a:b4:0c:4a:78:98:de:b4:d7:34:a4:71:52:1c:24:
         29:03:b9:7e:78:7e:34:55:93:9a:ca:0f:39:ab:9f:ab:df:e5:
         e2:d0:53:0a:1d:d8:01:92:0d:d4:07:41:6a:f0:08:dd:a1:b3:
         15:75:c3:d7:4c:ea:f1:43:79:3a:a8:91:1f:0b:52:2c:7a:e8:
         ea:a0:7e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:07:45 2026 by rpki-client