Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c40fc53f-1ed1-3b23-95bf-09a0071872d7.roa
File:                     c40fc53f-1ed1-3b23-95bf-09a0071872d7.roa (raw, json)
Hash identifier:          71Ukzr8ApYd2DfbZn3EvYFvXRGkFQNi/SKO7fETbYzo=
Subject key identifier:   63:92:82:48:A8:E2:41:14:49:E7:7B:54:58:B4:A9:59:C3:22:31:3D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B948A62EF5359503E5A54C0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c40fc53f-1ed1-3b23-95bf-09a0071872d7.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        136.226.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:8a:62:ef:53:59:50:3e:5a:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=fb2db4d5-089c-4364-9406-e0b090b2fccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1b:23:f5:9f:53:09:4c:49:f5:10:01:8c:82:
                    f6:7f:6c:fa:b0:e6:24:98:5e:ba:8f:18:b9:93:c1:
                    d5:d9:68:28:54:de:1e:5f:31:14:48:06:2d:91:0c:
                    c9:43:07:d7:22:09:95:db:30:ad:23:84:83:04:3a:
                    d7:90:33:de:09:40:71:52:fd:6a:9e:fa:35:1d:eb:
                    5e:ba:a6:06:5a:97:fa:75:3f:8a:ea:d3:ef:ea:9d:
                    d6:7e:99:b3:c6:ee:38:3c:e9:eb:2c:38:25:3d:6a:
                    e6:a7:3d:3a:cb:e9:c1:39:c6:5b:61:ab:8d:9b:93:
                    93:cb:3d:85:4d:fd:47:ea:6d:89:cc:ee:19:6f:9b:
                    84:3b:c3:be:94:ef:53:7d:a6:da:c3:4b:b4:1f:30:
                    01:d6:3b:78:07:ff:8f:bd:83:c9:29:7e:bf:00:12:
                    0b:a2:d7:f4:fb:de:15:04:31:e3:ae:76:f2:0c:b0:
                    bf:14:13:d1:17:2c:96:08:1b:06:1c:90:99:63:10:
                    a5:63:0d:19:b9:d9:38:7b:0b:1b:c8:95:30:e6:d1:
                    df:bd:f6:25:08:c9:99:fd:94:27:11:7d:8f:af:fc:
                    71:03:8b:a4:2f:6c:0e:ae:27:1b:7e:eb:a9:d0:21:
                    5e:fb:55:0f:cd:b8:be:64:f6:54:29:7a:a2:ae:76:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:92:82:48:A8:E2:41:14:49:E7:7B:54:58:B4:A9:59:C3:22:31:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c40fc53f-1ed1-3b23-95bf-09a0071872d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:c8:d3:f4:2c:4c:ba:6e:fe:78:3a:ac:c5:ca:d5:dc:62:54:
         44:b3:24:f0:9f:cf:c7:4b:a3:96:31:93:b9:68:7f:8d:2e:5e:
         1a:80:e9:ca:51:89:e1:bc:2c:59:4f:a8:79:5d:63:e6:13:1e:
         4a:21:d5:68:3c:65:d8:d7:95:9f:10:90:c3:0c:de:9b:42:cb:
         ca:f3:5a:4f:84:86:eb:d8:55:09:b9:77:89:36:d9:45:a3:fe:
         3f:44:d0:a7:1d:21:24:59:c1:bd:06:39:bf:f4:ff:3b:46:7e:
         da:ec:82:68:e1:15:10:ea:5e:43:e3:ad:15:20:dd:3c:2a:f8:
         00:3f:67:ce:a9:50:00:60:54:50:81:c8:62:c8:3e:dd:66:ee:
         2d:07:65:55:61:3a:2a:bc:c4:7a:7f:10:5f:ad:49:84:c7:44:
         d0:7c:a9:c6:58:b3:ed:d6:ad:5e:2c:69:0a:e5:1f:83:31:e3:
         a8:be:5f:ae:75:c9:14:75:76:62:51:65:2d:ab:78:fb:ae:b8:
         95:05:b1:5b:39:39:2c:79:fe:07:95:c4:fd:58:e2:3d:5c:40:
         f4:2b:e9:99:7b:4d:7a:e0:f5:13:23:e8:e6:1f:3f:c6:59:b9:
         38:b5:83:01:15:66:ce:85:be:b2:bf:cb:ba:f4:c0:02:7d:e9:
         64:0e:01:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:25:19 2026 by rpki-client