Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c36d2c3a-32a9-3381-a7ed-2a934cff1d11.roa
File:                     c36d2c3a-32a9-3381-a7ed-2a934cff1d11.roa (raw, json)
Hash identifier:          smgKJ1UmEY/Uzg4/GvHzob/joGHGN6lrjrymq2xs4wM=
Subject key identifier:   C8:A8:CB:C2:F7:72:B3:46:D9:AE:CC:F2:E4:58:8E:1D:FB:ED:9F:10
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B94732B5D0BCDE34EEBC480
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c36d2c3a-32a9-3381-a7ed-2a934cff1d11.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        165.225.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:73:2b:5d:0b:cd:e3:4e:eb:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=b9a1f3e3-939a-4623-87c6-27be6b790c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:f8:6a:27:98:cb:fd:b4:e1:24:cf:a4:7c:
                    27:04:44:cc:42:64:bd:84:3f:29:04:44:f5:3a:95:
                    45:06:bf:64:26:1b:eb:a5:7e:2c:49:83:c5:11:52:
                    15:fc:ff:29:51:07:b0:a2:a0:6a:96:aa:37:8e:4e:
                    17:ec:f2:45:0c:e1:d9:57:14:d4:c9:dc:8f:8d:01:
                    d1:4f:b7:78:dc:37:a1:07:a3:7c:98:e6:e9:57:85:
                    6f:9a:82:73:98:18:9d:de:0a:52:23:39:67:6e:c5:
                    03:e0:7f:a7:51:ca:d7:2a:a1:50:f7:a4:36:ff:c5:
                    e4:b1:0e:68:18:55:8e:32:41:71:82:03:59:42:ef:
                    23:fd:6f:34:86:5f:c6:6f:a4:49:ae:bb:c1:7b:75:
                    a9:6b:f5:d7:24:56:2a:56:c6:9a:37:2f:a8:c9:a2:
                    80:de:97:fb:30:d3:1b:0d:d7:87:04:51:7d:15:cf:
                    bd:47:1a:bb:30:03:90:2b:c1:a4:e6:c9:4d:46:d4:
                    84:2b:15:02:7e:cb:a3:82:0f:e5:a1:41:5d:cd:87:
                    6c:40:1a:15:da:5f:e7:c3:54:47:b8:75:7b:3b:43:
                    88:ac:ef:21:30:09:e0:06:8c:23:f9:80:2b:96:42:
                    14:b5:fd:4d:2c:c1:bd:22:b5:18:2e:19:10:d5:6d:
                    45:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A8:CB:C2:F7:72:B3:46:D9:AE:CC:F2:E4:58:8E:1D:FB:ED:9F:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c36d2c3a-32a9-3381-a7ed-2a934cff1d11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:2f:72:1a:cd:eb:84:a7:9f:aa:a2:27:ed:f7:9b:20:ce:1b:
         fb:f1:6e:03:4a:d9:09:97:91:76:bb:14:45:e9:03:6f:ff:bf:
         20:98:a0:0b:b4:3f:f9:08:29:c8:5b:09:84:8b:8c:4c:09:08:
         2e:c3:be:f8:f9:66:71:bd:d5:fc:f0:1c:df:92:e9:ae:33:b0:
         6d:98:2f:06:7d:ea:c9:45:87:ad:2e:38:d3:30:f3:c5:b9:e9:
         74:fa:71:4b:16:f6:de:11:1e:78:65:f8:b2:bc:f5:e0:9a:5f:
         65:7d:61:0b:df:24:67:7c:3d:3e:cd:fe:b9:0a:3f:63:15:e6:
         03:df:6e:cd:11:a1:42:cc:cc:b8:3d:6d:7d:71:f7:3e:08:75:
         e8:bc:24:1f:2a:70:10:75:dc:da:8a:8d:7a:bb:dd:29:d5:bf:
         50:4c:eb:a2:88:42:9a:79:14:fa:49:e7:2d:fb:ce:d5:f6:a6:
         ea:16:f9:2d:2c:a1:b1:96:33:ad:ed:19:3c:18:64:56:6e:4e:
         8b:b8:3b:3f:a2:e5:10:59:38:2e:35:7e:e8:00:5f:f3:3f:a6:
         ce:f9:6a:89:6d:8a:2b:b2:5b:97:01:1c:d7:a1:79:39:59:bd:
         e0:7d:8e:04:ae:40:26:51:f6:39:ad:f7:b2:b4:0f:a2:f3:7f:
         bd:4c:3d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:18 2026 by rpki-client