Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d68f8121-c948-33b4-a37c-8f46a2e590c6.roa
File:                     d68f8121-c948-33b4-a37c-8f46a2e590c6.roa (raw, json)
Hash identifier:          nbVHBlbfNjdhKb7ghKNOddJDWWf30agLGBPDEXiGBtc=
Subject key identifier:   C1:0D:5D:18:12:E8:E4:EB:CC:F8:54:79:75:78:F0:F0:30:A0:DC:8E
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E00061435AA7EE03B10AD1BC0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d68f8121-c948-33b4-a37c-8f46a2e590c6.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:14:35:aa:7e:e0:3b:10:ad:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=a73830c3-afca-4316-bcba-731ada5de856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:fa:b6:65:43:23:c2:b0:c3:2b:32:26:4e:
                    66:b1:97:0f:13:d0:6c:27:2f:92:4f:f7:dd:14:f1:
                    d6:7c:6f:11:5e:d7:15:12:d9:0f:03:91:08:31:f7:
                    1c:87:38:8f:78:e1:9e:44:0c:b6:08:1f:24:70:52:
                    14:2d:77:66:b8:26:ab:8a:4a:a8:41:74:2c:52:e2:
                    5e:1c:e8:db:1e:b4:25:ba:d4:7c:61:cf:86:1e:a7:
                    6f:9b:5a:46:22:fa:05:51:94:50:c7:30:83:cc:df:
                    9f:2a:cd:87:1f:7a:50:6b:a7:98:49:3f:6e:5f:16:
                    f6:13:31:8c:d9:1c:47:c2:1b:ce:b3:91:7f:03:43:
                    45:b1:42:17:de:54:d8:72:59:ba:93:f2:2c:8a:88:
                    df:ee:91:6a:c1:1a:29:7c:38:ed:3f:cb:5d:57:2a:
                    9b:1a:9b:20:40:8a:11:3b:7c:fb:30:b7:fe:b6:b3:
                    09:b1:4b:8e:89:aa:b0:b1:37:dc:7a:0e:b2:5a:a2:
                    19:dd:2d:b0:40:99:48:cf:25:25:51:0a:16:ea:72:
                    9a:03:b5:c8:83:9f:b8:37:26:56:46:09:d8:c2:33:
                    2e:99:7e:7c:88:fe:08:49:c3:3c:19:15:78:f7:14:
                    bb:e2:c1:bf:1a:97:24:98:be:61:fe:2e:1c:2b:39:
                    6a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0D:5D:18:12:E8:E4:EB:CC:F8:54:79:75:78:F0:F0:30:A0:DC:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d68f8121-c948-33b4-a37c-8f46a2e590c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:cf:e3:50:cd:c4:74:fe:50:c2:f7:d2:94:a0:2e:76:3b:7f:
         42:f4:64:38:2e:17:60:bc:4f:97:c3:7f:73:05:d1:6a:c1:91:
         ac:51:47:9f:89:c9:bf:3e:3d:79:3a:c9:4f:ff:92:03:94:a8:
         d7:a2:b0:31:b6:76:05:cd:e0:91:08:7a:03:44:0b:5e:9c:6b:
         c2:25:5e:a1:9c:d0:0a:b1:cc:1b:99:5e:88:02:c2:18:e9:68:
         d0:33:8b:5e:35:fc:8d:d6:87:fb:98:69:f2:db:72:3c:ba:3e:
         4f:21:18:52:ba:20:cb:4a:53:61:c3:da:f0:0c:6d:ca:f4:8a:
         9e:af:48:ca:7f:e3:ff:dd:03:bd:c0:37:ed:9e:6b:8c:23:9a:
         01:0b:5c:50:3a:81:76:10:ea:76:82:14:0f:76:57:34:cc:64:
         3b:d2:1c:09:57:d3:dc:c1:a9:41:f0:6b:ed:c7:73:3a:d1:64:
         24:f8:72:49:50:c7:c3:11:17:d5:fc:fc:ba:63:0c:6e:7c:b8:
         15:59:dc:a8:02:1d:c0:2d:04:8c:f9:1a:5b:a9:e0:bc:8a:38:
         dc:c3:da:79:78:53:fc:4e:6d:d6:0a:bb:08:b6:e5:d1:aa:a0:
         94:e2:e0:27:0c:ea:9c:36:d1:09:0b:c2:64:1b:db:51:5c:33:
         d8:f9:de:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:40:36 2026 by rpki-client