Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ecbaf4bb-932d-35da-ba41-68c4f29b24d7.roa
File:                     ecbaf4bb-932d-35da-ba41-68c4f29b24d7.roa (raw, json)
Hash identifier:          tD5kyVZQuZNvU+CgrTqz1l+QAJ8mHu65VF4UaVWPM/4=
Subject key identifier:   E3:BD:FB:62:50:33:17:04:72:7E:5B:E3:26:22:A2:1D:9D:86:73:2F
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584E5D14B2997EDFB5165607C980
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ecbaf4bb-932d-35da-ba41-68c4f29b24d7.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     15169
IP address blocks:        136.22.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:b2:99:7e:df:b5:16:56:07:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=4b06ffa0-7bb2-4cba-bc1b-6e8274e53595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:96:ca:8d:42:49:5c:ad:b3:ba:e0:67:aa:e6:
                    95:41:8f:b2:db:b9:cb:f1:e5:58:20:fa:e6:da:33:
                    b6:8f:08:cd:15:38:b6:6c:a0:53:49:12:05:c4:94:
                    1f:95:1a:21:64:71:e9:98:a1:df:91:02:3d:6d:52:
                    ec:f7:a8:02:0e:6b:44:db:c5:69:7f:c1:a5:f0:3e:
                    b3:3e:65:e5:ad:2f:99:2a:8f:3b:0a:d7:ee:a5:d3:
                    47:c4:f3:4b:75:ef:44:44:16:f3:39:50:1e:c7:90:
                    02:db:29:99:f0:d2:cc:e9:ad:bf:cb:80:bd:46:06:
                    ab:45:42:6e:a1:50:3f:c2:26:0d:ba:9f:94:ab:b0:
                    d5:2a:79:d8:2a:55:95:37:94:20:c4:d7:ad:60:75:
                    01:4b:16:6f:0d:1c:2c:71:8e:ca:1c:c0:46:25:92:
                    1d:07:ce:5b:40:19:46:07:52:85:86:7c:97:4e:cf:
                    1f:07:39:da:5d:f3:af:aa:53:8d:2f:b4:60:37:44:
                    5d:2b:46:75:a5:0e:d6:8c:da:49:ff:b8:50:eb:20:
                    18:b8:32:ab:91:6b:45:7a:fd:d7:4b:f5:4c:d9:59:
                    e6:a1:ca:fb:e5:70:a7:8f:be:93:80:54:4d:af:40:
                    8d:37:6b:53:06:b3:66:4e:b8:29:c9:a7:ae:a5:ea:
                    99:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BD:FB:62:50:33:17:04:72:7E:5B:E3:26:22:A2:1D:9D:86:73:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ecbaf4bb-932d-35da-ba41-68c4f29b24d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:22:30:40:30:89:c1:08:80:af:de:fc:03:ca:1e:98:86:69:
         43:d2:c3:98:c1:53:ea:4e:29:24:2f:14:a4:72:c2:06:49:19:
         84:24:0d:a1:13:a9:88:25:81:9d:8e:f4:fd:4f:c1:13:4b:52:
         cb:86:d7:fe:55:26:31:7e:0b:0c:06:82:ca:d8:15:a5:89:3d:
         b3:4d:af:80:ba:a7:87:02:04:48:59:0c:13:09:a1:e6:20:da:
         ad:ab:38:68:e7:1c:3d:33:6d:11:60:2f:26:bf:e8:cf:20:2d:
         4c:69:62:d2:c5:e3:31:3c:e4:9d:81:fd:50:3b:9e:7d:55:c3:
         0e:04:ea:f2:95:56:df:a7:15:fb:eb:f1:dd:ad:58:ae:c7:93:
         1a:28:1c:49:79:bb:b4:85:2b:30:5d:4e:26:6a:61:94:1d:be:
         06:7b:df:86:7f:01:71:3e:4b:1d:f4:ab:a7:4a:0b:c0:49:00:
         89:98:26:f6:f4:d8:97:36:a1:de:8d:df:d5:76:0e:ac:65:07:
         0d:6e:72:46:8c:02:7c:62:e6:92:ec:81:44:bd:bb:dd:06:65:
         bb:05:e8:81:d4:69:fe:13:f5:ad:4e:65:ba:c7:fc:fa:f8:2c:
         17:ba:e0:c6:65:cb:10:92:a3:ba:be:e2:5c:2e:2a:b4:e8:de:
         19:6d:1c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:42:15 2026 by rpki-client