Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bda94a7b-788f-3f8a-97b6-89fa7b699e29.roa
File:                     bda94a7b-788f-3f8a-97b6-89fa7b699e29.roa (raw, json)
Hash identifier:          P/dMX1p+dprb2K8P0PW4f/QxxSS+0X0WPveqhEfxF/0=
Subject key identifier:   6A:34:37:B7:34:FD:1E:DE:63:3E:87:16:28:90:AA:51:29:8B:B1:2C
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B947567D47B2AF986BBC080
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bda94a7b-788f-3f8a-97b6-89fa7b699e29.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        136.226.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:75:67:d4:7b:2a:f9:86:bb:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=76d4f5e4-8771-4172-828b-793bb9446c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:a4:52:3d:ec:ff:97:02:8d:da:1f:ff:47:
                    9b:3f:4e:8d:93:9c:15:c6:b8:e9:60:ad:71:c0:d8:
                    35:c3:f3:fe:5e:48:a7:d3:dd:8a:4e:e6:79:49:f5:
                    ce:c0:3e:c1:07:03:a2:a2:61:13:b8:e9:45:9a:6f:
                    ca:9d:c0:4b:87:73:b0:3b:6c:03:d6:cf:3b:48:00:
                    5a:ae:79:cb:3c:fc:90:95:a0:30:3e:5b:f4:79:9a:
                    4c:81:2d:34:7c:ce:e6:12:7b:57:eb:ec:af:68:04:
                    4a:f3:88:db:d0:97:69:eb:da:58:7c:7f:6f:5f:30:
                    0a:09:aa:c9:5e:16:25:8a:f8:c9:91:6d:75:d1:db:
                    df:a0:2f:5b:45:3f:f9:fd:20:bc:96:5a:40:cf:fa:
                    3d:42:2d:61:79:b2:b3:f1:71:17:2b:2c:01:4c:ab:
                    3c:e3:25:05:ca:08:be:b0:33:1a:95:fc:65:5a:e6:
                    d1:6c:c4:75:75:9c:a0:d1:ed:f4:17:63:b2:a1:2e:
                    b3:ab:53:69:d4:ef:40:1a:ae:25:1b:64:bd:e2:b6:
                    ad:9b:3b:e2:7b:20:90:91:a4:46:9f:52:11:43:c2:
                    40:dd:45:5d:af:dc:4e:42:86:06:67:09:29:c0:47:
                    6f:25:55:c1:e3:af:ff:c7:48:c7:a4:e8:ec:1f:be:
                    16:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:34:37:B7:34:FD:1E:DE:63:3E:87:16:28:90:AA:51:29:8B:B1:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bda94a7b-788f-3f8a-97b6-89fa7b699e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:c8:3d:15:0f:0d:51:aa:76:e9:89:98:ab:47:c7:95:33:13:
         c8:21:f1:f2:d7:a4:47:d1:9e:6a:6d:91:00:f5:dc:6f:a4:84:
         a9:ad:45:af:9b:76:1b:63:73:7b:08:ef:c3:62:93:d3:ca:d7:
         37:80:7e:b5:e2:fa:7c:a1:41:6c:3d:b2:fb:46:49:76:1c:9c:
         f5:65:f0:8f:22:3e:cb:26:3d:ac:af:23:8d:b6:26:64:b6:58:
         a3:69:da:0c:59:30:ee:b1:bf:3d:d2:be:8c:11:34:f2:93:63:
         c0:8f:9e:a2:19:e4:5d:bc:40:44:9b:a7:2b:c6:38:f2:db:3a:
         c3:a3:9d:9b:b3:05:a7:53:6c:f6:be:3c:62:06:51:6b:5a:33:
         93:cb:2a:13:a0:c3:7e:87:58:8f:31:36:8e:94:b4:ae:bf:f4:
         0f:2a:ba:aa:6b:e9:16:db:77:1e:53:fc:17:1e:5a:a7:55:7e:
         c6:0c:d9:62:4f:29:2c:ef:c3:b8:c4:95:ca:a2:2c:a5:ed:b9:
         46:40:0d:56:e8:e8:3b:ff:4d:f6:50:d7:e3:f3:61:e5:dc:8a:
         5a:61:1d:82:ee:0a:0e:1c:bd:b8:24:c1:2f:66:bb:b7:c3:26:
         df:a0:a8:20:c4:0b:26:0c:ea:1b:98:e7:04:c4:e6:4f:72:6e:
         f8:00:5b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:22:23 2026 by rpki-client