Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa
File:                     b9976d2c-e93d-3060-b104-42102b50cd67.roa (raw, json)
Hash identifier:          mezAHZsk11hgoAAPXX5/xJRlWMNsY8aNPQuztQVVvtc=
Subject key identifier:   EB:65:51:61:DC:FB:F2:2E:06:7A:B9:39:1B:C2:14:78:C8:9F:B0:E8
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E0005F9FAA5EB8B0CEC8581D4
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:f9:fa:a5:eb:8b:0c:ec:85:81:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=770332f5-75e0-4402-b452-440cee892f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f8:2e:48:7d:f2:b2:0b:1b:4d:ee:93:55:4e:
                    5f:7c:02:85:78:b5:6b:03:ea:11:02:8c:67:7e:cf:
                    3c:90:54:19:b1:3a:fd:6d:6a:8f:1d:2e:a8:b4:82:
                    da:a4:2f:e2:8f:ef:40:63:a6:73:06:0f:c1:47:21:
                    c6:3c:05:9b:07:88:5b:21:6c:28:30:ec:fd:5b:3a:
                    6b:71:1c:73:d2:93:f9:a3:b4:bb:af:4a:07:8e:c3:
                    d7:42:6b:ad:25:44:6b:86:09:7e:7d:cc:95:b2:ff:
                    52:c1:ce:f4:9d:96:9e:5d:61:89:f4:7f:4f:1a:5b:
                    10:87:b4:ea:8b:ba:26:0c:21:3e:b5:57:93:10:27:
                    19:6a:d9:b7:f1:00:c3:a7:a7:58:cb:90:3a:dc:bf:
                    f1:68:b4:5b:67:5d:78:85:4f:64:50:43:68:10:9f:
                    55:79:82:40:7f:b8:b1:80:16:95:b2:0c:ba:18:71:
                    40:17:03:4c:ef:ce:7e:b9:1d:09:25:e1:40:90:0e:
                    7e:7d:af:3a:4d:a3:1c:05:5c:ed:f1:9a:2f:eb:d9:
                    2e:63:11:4f:07:3b:a8:40:45:69:f6:b0:1f:cf:37:
                    f7:89:7f:c2:57:4c:43:60:36:41:f0:ac:05:22:9d:
                    7a:36:4e:4e:3b:9e:70:f9:16:05:6d:e9:8f:24:eb:
                    9b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:65:51:61:DC:FB:F2:2E:06:7A:B9:39:1B:C2:14:78:C8:9F:B0:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:81:36:c4:5a:96:6b:83:b3:dd:08:66:46:e9:57:29:fa:3e:
         db:49:0c:b6:e1:2f:87:8f:58:9b:cc:a6:25:1b:d4:ce:82:60:
         d1:ba:c3:b4:8f:c1:ce:49:34:28:f0:77:d6:e3:1f:be:80:de:
         19:5a:bd:d9:e5:d2:1f:09:32:24:74:51:ee:9b:b7:44:b9:ba:
         e5:99:78:f4:6a:52:44:fb:09:93:b2:3c:62:59:16:ff:d0:b4:
         33:fc:fd:be:89:dd:16:be:43:ff:46:37:94:d5:de:66:e8:88:
         ed:11:69:7b:d8:73:f4:1e:0c:3a:e2:ec:a7:8c:89:30:13:bf:
         6e:50:fe:2b:a8:dc:30:25:da:68:99:74:33:59:ba:dd:74:99:
         ac:9a:7d:a1:9b:de:f6:89:de:be:4b:94:42:22:db:4b:1e:37:
         47:f2:32:ee:7b:b7:3b:f2:67:60:01:ae:5d:45:bd:b5:72:a0:
         48:ef:ea:37:f6:4d:02:ba:65:12:f4:f9:76:6f:98:c5:89:30:
         9f:bd:51:1d:40:8d:73:a6:8f:9e:7d:1e:f2:8e:b9:1e:eb:22:
         ec:57:ee:05:5b:62:28:8c:46:66:85:fb:8e:29:80:d1:c3:a5:
         5c:1e:2c:25:26:f0:59:10:57:84:14:dc:04:1b:6c:41:4d:9e:
         91:76:93:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABfn6peuLDOyFgdQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
NzcwMzMyZjUtNzVlMC00NDAyLWI0NTItNDQwY2VlODkyZjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/guSH3ysgsbTe6TVU5ffAKFeLVrA+oRAoxn
fs88kFQZsTr9bWqPHS6otILapC/ij+9AY6ZzBg/BRyHGPAWbB4hbIWwoMOz9Wzpr
cRxz0pP5o7S7r0oHjsPXQmutJURrhgl+fcyVsv9Swc70nZaeXWGJ9H9PGlsQh7Tq
i7omDCE+tVeTECcZatm38QDDp6dYy5A63L/xaLRbZ114hU9kUENoEJ9VeYJAf7ix
gBaVsgy6GHFAFwNM785+uR0JJeFAkA5+fa86TaMcBVzt8Zov69kuYxFPBzuoQEVp
9rAfzzf3iX/CV0xDYDZB8KwFIp16Nk5OO55w+RYFbemPJOubTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtlUWHc+/IuBnq5ORvCFHjIn7DoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYjk5NzZkMmMtZTkzZC0z
MDYwLWIxMDQtNDIxMDJiNTBjZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEeBNsRalmuDs90IZkbpVyn6PttJDLbhL4ePWJvMpiUb1M6CYNG6w7SP
wc5JNCjwd9bjH76A3hlavdnl0h8JMiR0Ue6bt0S5uuWZePRqUkT7CZOyPGJZFv/Q
tDP8/b6J3Ra+Q/9GN5TV3mboiO0RaXvYc/QeDDri7KeMiTATv25Q/iuo3DAl2miZ
dDNZut10mayafaGb3vaJ3r5LlEIi20seN0fyMu57tzvyZ2ABrl1FvbVyoEjv6jf2
TQK6ZRL0+XZvmMWJMJ+9UR1AjXOmj559HvKOuR7rIuxX7gVbYiiMRmaF+44pgNHD
pVweLCUm8FkQV4QU3AQbbEFNnpF2k6A=
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:09:24 2026 by rpki-client