Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8c882cc2-406d-3017-8300-39c36de0cee6.roa
File:                     8c882cc2-406d-3017-8300-39c36de0cee6.roa (raw, json)
Hash identifier:          9PZAb7+gz4g2N4zSIpAXK8wcdndPeWmXtkMmwjnli+g=
Subject key identifier:   70:F7:17:33:85:0C:FB:C9:7B:08:84:2E:36:37:5A:94:50:20:4F:00
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584E5D14B2A451259F08ADDE8170
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8c882cc2-406d-3017-8300-39c36de0cee6.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     15169
IP address blocks:        136.22.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:b2:a4:51:25:9f:08:ad:de:81:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=6fc36198-6a14-4a62-8ebe-ec2b22d9f243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:06:b3:b5:e3:c8:a8:6e:d7:1a:b7:d8:55:
                    9e:99:e7:4a:f3:c1:90:e6:3f:45:0b:1a:18:be:57:
                    ab:66:19:91:f0:7f:6b:73:20:13:12:16:ac:26:0c:
                    55:89:8e:1b:fd:17:27:9d:7e:e2:25:4e:e3:ac:37:
                    32:3b:2c:89:aa:20:71:b9:d5:2a:e2:e5:66:3d:d3:
                    06:69:17:3b:a4:86:68:f1:a4:3b:a4:3a:00:e6:10:
                    6f:b4:7c:ec:85:f5:20:08:41:16:9e:d6:48:bf:7f:
                    8c:c1:2e:f4:a9:10:e8:e0:62:c7:09:57:01:35:75:
                    43:56:a1:7c:16:4e:1f:f6:c4:8a:cd:29:af:28:51:
                    ac:ae:34:55:cf:2f:11:7f:64:f1:63:cf:e8:20:d2:
                    76:c7:f1:cb:22:fe:4b:9a:53:d9:56:3c:65:4d:7b:
                    44:ee:17:57:9c:e2:5c:f3:37:35:b1:b2:e6:9a:79:
                    11:c9:4a:d2:f6:92:83:23:85:28:7a:80:80:4a:dc:
                    e4:32:54:2f:5a:01:3f:ef:0d:6a:d8:fa:4c:ca:a1:
                    c9:90:e9:6e:24:99:d3:ce:84:8e:fc:fc:4e:b0:58:
                    14:06:87:28:f9:f6:de:77:7a:ee:60:bf:40:40:87:
                    07:64:74:be:18:7c:24:00:49:e0:e2:10:56:6c:ba:
                    f9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F7:17:33:85:0C:FB:C9:7B:08:84:2E:36:37:5A:94:50:20:4F:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8c882cc2-406d-3017-8300-39c36de0cee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:68:56:9d:8f:00:2c:3d:4c:c5:27:31:51:b4:e8:0b:82:de:
         6a:f6:e0:69:69:0b:39:0d:b2:fa:22:27:1a:57:5d:4b:0c:dd:
         13:b2:5e:d8:a1:c8:86:40:e1:65:c2:d3:f1:9c:28:e9:76:00:
         8b:9b:9f:02:a1:db:15:d2:f2:c7:85:94:2f:6f:d7:7d:78:92:
         fe:c2:57:f8:a4:51:7c:c9:52:4f:99:da:ea:ea:1d:62:05:a4:
         74:52:4d:6b:2f:7d:47:c7:a9:8a:3f:08:e9:2f:d7:7c:20:53:
         4d:91:be:e0:36:64:2f:87:ff:56:38:b3:a2:95:45:3d:c4:41:
         c0:3e:58:a3:17:82:56:0f:ed:21:bb:12:36:a3:94:52:97:c4:
         3b:99:d3:ec:17:61:af:4a:66:95:e8:8d:74:19:49:61:55:5a:
         67:d8:08:e8:db:89:82:9d:47:dd:a4:11:d4:12:a2:be:4f:21:
         1d:95:84:49:81:61:66:7d:20:2c:7a:fb:1c:dc:06:a0:11:7d:
         22:50:0b:73:6c:3c:4a:07:ae:01:f9:ed:51:93:47:0f:b0:f4:
         2e:8f:2b:b0:c7:88:00:e6:1d:62:ee:ae:ff:b9:3b:c3:6e:8d:
         fa:bb:e0:3b:37:c2:ab:d5:40:84:25:48:1c:40:49:bb:a4:d8:
         81:63:45:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:42:48 2026 by rpki-client