Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/fb62fa10-88ab-3c02-af6a-8746a159fcfc.roa
File:                     fb62fa10-88ab-3c02-af6a-8746a159fcfc.roa (raw, json)
Hash identifier:          jdepGV4JtarpOEzdPD/0ugw2n5JC71h2aPE/NTis7ok=
Subject key identifier:   B4:FF:03:E4:37:90:11:98:67:DB:D7:25:3E:11:4C:18:64:22:A8:CD
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       010D0C9F4328584E7E94E887CE28086E8BA8B180
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/fb62fa10-88ab-3c02-af6a-8746a159fcfc.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     10745
IP address blocks:        192.136.136.0/24 maxlen: 24
                          199.43.0.0/24 maxlen: 24
                          2001:500:4::/48 maxlen: 48
                          2001:500:110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e8:87:ce:28:08:6e:8b:a8:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=d84f96ea-1dcd-4d07-bad5-981236a692dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:42:01:1d:ca:8e:09:ea:36:2d:12:16:67:
                    3e:dd:be:c2:fb:ee:80:f9:c5:35:6f:72:c7:90:21:
                    7a:08:bf:1d:34:9f:a0:34:85:89:a6:86:6a:3b:49:
                    e2:37:30:02:bb:2b:c7:d2:c5:1c:b2:78:fd:5c:7b:
                    c0:16:f0:bb:f8:1d:7e:9b:7c:60:93:86:5f:96:8b:
                    7d:6e:60:e7:cc:5e:be:44:7f:d8:d5:d8:45:c9:bd:
                    db:01:f0:4a:22:fe:f5:f5:4c:14:58:bd:fd:d0:92:
                    01:70:7a:06:9c:0b:80:f0:c3:ab:16:d9:f0:89:50:
                    0c:fa:a6:62:cb:95:13:be:e7:6c:75:ca:7a:66:a4:
                    9c:ab:e4:41:19:3e:82:34:e1:5a:8d:8f:92:50:b0:
                    7a:97:77:cf:c5:9c:35:d3:6f:d5:0c:72:a6:58:bd:
                    f8:d2:86:c3:39:08:b2:32:07:92:8c:e7:bf:d2:bc:
                    ef:f7:c3:d4:fe:d5:b8:48:9a:ba:11:0b:a7:9d:d8:
                    e8:82:51:86:f6:a3:f5:99:d6:f2:cf:76:48:ea:22:
                    c1:7a:00:6c:e7:5e:3a:cc:46:e2:b4:33:c4:ba:3d:
                    bf:7a:1a:8d:94:b6:6e:94:0f:be:3c:dc:c4:09:35:
                    f2:13:9f:fa:21:a4:00:f6:6d:9f:60:df:18:2f:31:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FF:03:E4:37:90:11:98:67:DB:D7:25:3E:11:4C:18:64:22:A8:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/fb62fa10-88ab-3c02-af6a-8746a159fcfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.136.0/24
                  199.43.0.0/24
                IPv6:
                  2001:500:4::/48
                  2001:500:110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:39:a5:9f:8c:0c:0a:0f:2f:0e:e0:7e:46:e9:f5:b0:f4:e9:
         b8:4a:3c:a4:21:ef:f6:25:1e:bb:c3:68:66:76:c4:d4:73:54:
         75:94:25:e0:87:9b:87:a3:3c:ab:72:50:ec:6f:f5:4d:7f:ac:
         2b:f5:60:b4:b5:d5:9a:3e:b0:ea:50:00:1f:45:6d:20:4f:d9:
         e6:53:af:d1:de:f4:f2:0e:f0:72:77:85:4c:f6:b0:b8:b1:6c:
         64:96:36:cd:c7:fc:02:28:2d:34:d0:50:ea:6d:bf:df:f1:dd:
         f9:9f:2b:00:15:d3:15:74:6e:fb:4c:af:a8:72:98:4d:67:36:
         05:b5:4c:ad:bf:38:e7:d6:d0:db:28:7d:0d:02:59:60:78:66:
         28:0c:3d:f0:75:22:b9:45:1f:74:6b:57:0a:2f:f9:2f:cb:87:
         e9:f1:63:18:a9:8a:63:57:cf:4f:7a:cf:13:4d:04:27:d4:3c:
         02:47:d7:aa:f9:47:da:8e:1f:0a:ae:cd:cb:37:89:c0:fb:88:
         cd:51:d6:c1:a1:1f:09:da:38:a4:ee:4a:82:88:26:97:f5:ca:
         b8:86:98:db:a7:4b:fe:00:f8:bf:18:87:9c:90:96:11:48:83:
         c2:e8:de:03:63:9f:58:4c:f6:e1:dc:5d:45:d5:23:87:ba:3b:
         af:3f:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:13 2026 by rpki-client