Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9bd7b0ff-77e7-356f-82a1-c91081108b27.roa
File:                     9bd7b0ff-77e7-356f-82a1-c91081108b27.roa (raw, json)
Hash identifier:          GKwL+SXUd7ObWVJiTMaCChbQ8OPU5I5QDUgK9frCw4g=
Subject key identifier:   7D:46:18:CB:9C:80:90:0E:22:4C:05:D9:97:C5:2F:AC:45:C6:A8:31
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B946B136C2FB7BCB2E5A8E0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9bd7b0ff-77e7-356f-82a1-c91081108b27.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        136.226.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:6b:13:6c:2f:b7:bc:b2:e5:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=df3e5ee6-f071-4cee-8d9e-cbbe472ae5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:ec:30:ec:78:95:83:ea:40:78:27:26:ef:
                    ba:4d:90:c0:83:f1:28:e9:28:60:7f:dc:fb:d3:75:
                    86:e5:d4:76:1e:c0:bb:2d:4e:6e:b8:19:68:7a:4e:
                    04:33:b7:47:49:96:8a:3e:a9:57:28:1f:c7:c8:36:
                    9d:36:2a:9c:6c:73:b3:69:63:84:e1:e0:15:80:40:
                    1b:8f:57:cb:33:b6:f2:e9:ce:3b:8d:59:e0:9b:6f:
                    ef:3d:8a:e6:ab:f5:3e:a2:53:2a:8a:59:bb:b9:ee:
                    ba:fb:69:25:0e:86:d9:29:1e:85:a9:b8:21:38:8b:
                    8a:ba:cf:d6:61:df:38:41:6b:27:e0:b0:ae:b0:d9:
                    cf:3a:bc:33:bb:6a:04:3a:b5:b8:85:0e:e3:f3:aa:
                    5d:7d:82:ca:2f:59:f4:22:57:2c:24:26:35:6e:d3:
                    ec:e4:ba:40:f4:30:4d:24:99:60:75:5b:37:86:d7:
                    09:0a:14:b0:d1:83:2a:9d:23:a6:ff:1f:40:b3:45:
                    6a:e4:5f:29:35:f2:fd:67:9b:38:ed:32:c1:38:d3:
                    0b:55:16:87:41:19:59:18:67:d3:c6:81:f0:7f:87:
                    80:8e:26:dc:de:12:14:de:6a:f2:60:2b:b1:b6:04:
                    f3:82:eb:31:c6:e1:0e:8f:f7:00:0f:56:8c:29:48:
                    d1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:46:18:CB:9C:80:90:0E:22:4C:05:D9:97:C5:2F:AC:45:C6:A8:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9bd7b0ff-77e7-356f-82a1-c91081108b27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ac:ea:d6:9b:c0:e6:b2:52:4f:b0:c2:cb:90:d6:0a:e2:e2:
         69:2f:96:05:58:a4:b0:38:ef:b0:05:9b:ee:03:fb:65:71:f1:
         3a:89:18:9a:10:60:bc:71:4d:d4:56:29:b5:26:72:e9:96:ad:
         5b:be:9a:d2:fb:14:fc:af:d9:34:44:2c:cf:fb:e0:63:e4:36:
         18:96:b6:5d:8d:32:d8:75:d9:5a:de:b7:05:63:d2:41:f3:ab:
         d4:50:4d:09:df:73:c2:45:a4:24:b7:01:54:9d:b8:bd:c0:1b:
         56:e6:3b:94:90:2e:84:16:6f:6c:38:64:42:23:7c:72:3f:d9:
         9e:c6:72:99:5c:e5:38:09:0c:df:75:e8:21:a4:74:26:7b:c3:
         57:09:57:d5:c0:10:4f:f6:e0:a7:63:a0:de:9c:4e:73:3d:5d:
         88:f4:ba:7f:f5:00:30:35:4d:35:26:b0:8a:d7:eb:7f:34:5d:
         54:c3:5f:0e:2d:f3:e2:85:84:2e:02:5c:29:ee:95:64:dc:82:
         5c:ce:67:3b:5a:8f:3e:ba:62:f5:c1:0f:82:60:c1:14:87:8e:
         96:5e:fd:24:aa:33:e9:9d:0c:5f:5a:9c:2e:e2:a3:28:6a:99:
         62:2c:db:9a:d9:cd:a6:ab:f4:35:8c:17:e8:08:5d:e0:5c:f6:
         1a:77:dc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:20:42 2026 by rpki-client