Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/b46724b9-5f2a-325b-ac1a-93ec0d8eb711.roa
File:                     b46724b9-5f2a-325b-ac1a-93ec0d8eb711.roa (raw, json)
Hash identifier:          pZwWJ/j3DWKT+55H0zymHcG2rM1o3ZcyVIn2Yt0oRj4=
Subject key identifier:   FF:A2:C7:5F:3A:A0:9E:FA:3D:EB:DD:C4:E5:18:4E:D7:70:27:96:49
Certificate issuer:       /CN=292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a
Certificate serial:       010D0C9F4328584F2F8249B22FF9C2F9BB7BBAE0
Authority key identifier: 4F:6B:7B:30:46:27:45:61:0E:5F:90:3B:C9:25:DA:5B:54:76:FB:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/b46724b9-5f2a-325b-ac1a-93ec0d8eb711.roa
Signing time:             Tue 15 Sep 2026 18:00:57 +0000
ROA not before:           Tue 15 Sep 2026 18:00:57 +0000
ROA not after:            Mon 14 Dec 2026 19:00:57 +0000
asID:                     6515
IP address blocks:        202.136.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2f:82:49:b2:2f:f9:c2:f9:bb:7b:ba:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a
        Validity
            Not Before: Sep 15 18:00:57 2026 GMT
            Not After : Dec 14 19:00:57 2026 GMT
        Subject: CN=e4971c95-7762-45ab-b37f-16dd163ae87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:40:cb:8a:b8:4f:50:2e:a9:57:6a:59:db:e5:
                    35:42:8b:da:d6:ed:20:0e:1c:05:c1:f9:e0:b8:57:
                    d9:6e:46:40:e5:6d:26:a5:7f:db:d4:82:83:57:44:
                    14:44:99:53:f6:fa:48:fb:76:be:99:d3:4f:a7:1b:
                    26:eb:9e:a7:ef:ef:7a:46:3e:be:80:dd:55:75:ac:
                    41:af:e7:6b:5d:93:0d:b0:a8:ca:ab:6a:ad:5c:2c:
                    f6:93:d1:bc:78:9d:3c:29:1f:ab:21:2b:cb:e3:44:
                    7a:cb:a5:e8:41:39:4a:9b:b9:75:fe:3a:66:d3:83:
                    dd:6b:df:56:bd:c9:73:3e:0f:57:1d:20:be:f4:ac:
                    1a:cc:4b:58:88:d1:e4:c6:3e:a0:40:a7:44:b7:7c:
                    05:29:74:dc:39:92:3b:4e:cb:0f:07:1f:a9:41:9b:
                    97:cc:8a:27:b1:9f:3e:a9:6e:02:9c:9e:14:88:c3:
                    02:f2:c1:95:a0:b3:d9:b9:5d:6f:e9:0f:b2:87:d8:
                    88:4b:bd:05:79:4a:22:ab:7f:89:60:fb:84:2b:06:
                    c3:f3:cb:39:c7:40:4f:d2:61:1f:f3:f0:48:5c:46:
                    93:e6:b8:94:96:34:d8:20:5d:f5:d3:74:e9:a6:12:
                    55:3c:0a:a6:54:c9:d3:be:0a:6a:59:b3:69:2d:e0:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A2:C7:5F:3A:A0:9E:FA:3D:EB:DD:C4:E5:18:4E:D7:70:27:96:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/b46724b9-5f2a-325b-ac1a-93ec0d8eb711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.crl

            X509v3 Authority Key Identifier:
                keyid:4F:6B:7B:30:46:27:45:61:0E:5F:90:3B:C9:25:DA:5B:54:76:FB:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.136.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:61:e6:63:2c:45:8f:26:65:e1:bd:dd:1a:d3:9f:f4:49:23:
         7f:63:be:17:ba:47:0b:29:9f:f3:25:0b:93:e3:6e:ab:2a:da:
         52:44:df:f3:ce:9e:a8:61:f2:32:96:c8:5c:fa:0f:5f:c8:e8:
         6b:97:62:e2:ec:20:b1:36:ec:16:35:23:d0:1a:fe:aa:d5:9a:
         aa:8b:9e:0c:ab:c4:aa:80:48:1b:f5:06:56:41:4b:7c:4c:e7:
         10:cc:32:b8:f9:44:68:d4:5a:f6:a8:93:42:17:c0:4e:6e:70:
         6b:56:a1:18:c3:52:76:be:d1:f6:03:76:5a:ed:b2:ab:db:f8:
         d7:5d:8c:f5:be:98:12:5c:a0:c2:09:52:0e:d6:b0:e8:4b:13:
         1a:0f:a9:54:c5:c6:90:e6:a4:02:45:7f:66:07:33:51:94:80:
         ce:1a:00:e7:46:66:a4:de:a6:6a:e5:7e:09:e7:7a:bc:26:9e:
         3b:d5:f6:b7:b1:78:dd:e0:b8:7b:11:cf:6d:5e:53:3c:15:8b:
         2d:34:fe:53:bb:2c:81:cd:97:b5:04:f7:27:ee:d8:a0:09:ef:
         ce:7f:6c:dd:95:be:ff:65:2c:04:36:00:f0:95:38:7c:e2:47:
         6f:b4:e1:12:b6:db:40:b5:5c:f9:8c:d6:b9:f5:c2:de:5e:b0:
         e4:b9:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:01:13 2026 by rpki-client