Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa
File:                     b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa (raw, json)
Hash identifier:          KUB/9r5eluzKcPI0Ouc1oWEJpG1EFkmFtkU49gpcDsE=
Subject key identifier:   A7:BA:D1:5F:85:DC:66:0D:BD:50:0D:3E:9D:A0:00:4C:F1:A3:B5:C8
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E0005EC5D86ADA5F6388E9400
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:ec:5d:86:ad:a5:f6:38:8e:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=07e51f53-6976-4c78-991e-98bf617b1e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:ca:9c:38:77:da:48:6e:23:0f:56:76:14:
                    85:58:3a:04:f9:e2:4d:76:b8:c6:8a:98:f6:9b:c3:
                    41:d4:92:1a:3d:81:70:68:d7:70:6e:ef:f1:0f:89:
                    45:7d:27:7d:ec:0e:0b:f5:b3:3a:1e:a3:7b:ab:55:
                    ff:b8:29:a5:4e:69:3b:f2:72:32:d7:a3:db:5d:06:
                    1d:01:95:d7:21:22:c2:29:d0:01:51:da:ea:fc:e8:
                    9f:e9:b4:09:2a:44:80:dc:b1:e1:d4:68:a1:43:93:
                    88:bc:68:2f:20:f6:67:61:73:c3:46:a9:78:bc:c3:
                    33:05:86:81:d1:fb:55:70:b6:19:61:c2:8b:8e:43:
                    ab:c8:ca:86:0d:91:ef:5d:55:0d:36:7e:54:21:54:
                    e9:b3:b5:ea:01:79:88:6a:1e:03:c8:ce:60:14:14:
                    c6:84:d5:f8:49:52:ab:ba:5e:f6:c7:cf:ca:64:7c:
                    95:a9:8b:f1:91:fb:9d:cd:4d:d0:69:b2:a0:2b:51:
                    f5:29:eb:97:0a:69:dd:6a:ce:f8:f9:dd:3e:69:f3:
                    fd:53:19:fb:cd:04:fa:28:3b:9e:30:b4:f8:a4:5a:
                    29:51:ff:23:2f:59:e0:01:7e:91:78:16:6b:5a:cf:
                    21:a6:26:a1:e7:a6:0f:36:9b:1b:ff:12:ec:41:05:
                    18:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BA:D1:5F:85:DC:66:0D:BD:50:0D:3E:9D:A0:00:4C:F1:A3:B5:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1d:2d:96:00:f0:c7:35:c3:07:cb:aa:c7:d7:ee:32:af:43:
         0d:c8:66:f9:99:68:8b:26:99:44:c3:e9:c3:ec:20:b9:4e:58:
         83:3c:39:f0:e6:af:25:9d:74:40:bc:25:03:a2:7e:c3:12:19:
         6a:22:f1:65:a6:a5:32:54:23:28:59:57:97:56:5c:01:83:8d:
         30:4a:5b:68:61:47:60:b9:2a:81:f5:c9:d2:b8:94:78:79:03:
         8b:1f:6a:a6:40:4c:7a:64:20:28:2b:fb:8d:02:6b:d4:8f:c6:
         7e:f3:e6:68:6a:5f:b2:f8:0e:59:35:ee:b6:df:69:62:15:03:
         83:0a:ff:56:06:c8:6e:06:7f:96:65:4d:14:b6:f0:83:24:5f:
         96:90:46:b1:0b:b1:ce:3a:eb:d7:c0:7c:3e:f5:55:9b:e4:d8:
         b4:5d:c4:72:b3:62:ab:85:ea:2a:a0:42:c9:80:b3:2a:01:d6:
         61:f7:74:53:19:78:59:5b:5c:e0:b6:55:31:65:b9:e7:df:3b:
         4a:e6:80:87:bc:7b:0e:c9:96:1e:b2:92:83:22:77:97:49:e0:
         8e:19:bf:a9:8d:2a:cb:0e:d1:c3:a3:a7:8a:5f:16:9b:bf:aa:
         25:84:d7:19:24:6c:bd:25:74:88:a4:8d:ed:7e:67:d3:86:75:
         ca:1b:ae:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABexdhq2l9jiOlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
MDdlNTFmNTMtNjk3Ni00Yzc4LTk5MWUtOThiZjYxN2IxZTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9PKnDh32khuIw9WdhSFWDoE+eJNdrjGipj2
m8NB1JIaPYFwaNdwbu/xD4lFfSd97A4L9bM6HqN7q1X/uCmlTmk78nIy16PbXQYd
AZXXISLCKdABUdrq/Oif6bQJKkSA3LHh1GihQ5OIvGgvIPZnYXPDRql4vMMzBYaB
0ftVcLYZYcKLjkOryMqGDZHvXVUNNn5UIVTps7XqAXmIah4DyM5gFBTGhNX4SVKr
ul72x8/KZHyVqYvxkfudzU3QabKgK1H1KeuXCmndas74+d0+afP9Uxn7zQT6KDue
MLT4pFopUf8jL1ngAX6ReBZrWs8hpiah56YPNpsb/xLsQQUYgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKe60V+F3GYNvVANPp2gAEzxo7XIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYjY0NGMwZGItY2ZlMi0z
MThhLTljODktMmE3YmVmNWU1NmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIdLZYA8Mc1wwfLqsfX7jKvQw3IZvmZaIsmmUTD6cPsILlOWIM8OfDm
ryWddEC8JQOifsMSGWoi8WWmpTJUIyhZV5dWXAGDjTBKW2hhR2C5KoH1ydK4lHh5
A4sfaqZATHpkICgr+40Ca9SPxn7z5mhqX7L4Dlk17rbfaWIVA4MK/1YGyG4Gf5Zl
TRS28IMkX5aQRrELsc4669fAfD71VZvk2LRdxHKzYquF6iqgQsmAsyoB1mH3dFMZ
eFlbXOC2VTFlueffO0rmgIe8ew7Jlh6ykoMid5dJ4I4Zv6mNKssO0cOjp4pfFpu/
qiWE1xkkbL0ldIikje1+Z9OGdcobrtk=
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:09:50 2026 by rpki-client