Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/b244eff7-3bd2-3b29-a1d1-f91d800c22cc.roa
File:                     b244eff7-3bd2-3b29-a1d1-f91d800c22cc.roa (raw, json)
Hash identifier:          NCHt0r/YOMlRmnGcYNqOoFV/OKKFodT0EPXWsXol1bg=
Subject key identifier:   56:FF:F1:D8:5D:BB:74:CF:9C:F8:96:4C:EA:F9:52:A7:17:CD:BB:EF
Certificate issuer:       /CN=5e3c4bb1-6679-4d61-a72c-89e58d4479e3
Certificate serial:       010D0C9F4328584E98B8160764A796D6448E0020
Authority key identifier: 48:33:B7:33:89:C8:1C:FB:C0:5A:10:59:A2:75:DD:76:AF:7A:E3:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/b244eff7-3bd2-3b29-a1d1-f91d800c22cc.roa
Signing time:             Thu 23 Jul 2026 17:42:18 +0000
ROA not before:           Thu 23 Jul 2026 17:42:18 +0000
ROA not after:            Wed 21 Oct 2026 17:42:18 +0000
asID:                     4972
IP address blocks:        156.134.136.0/23 maxlen: 23
                          156.134.138.0/24 maxlen: 24
                          156.134.139.0/24 maxlen: 24
                          156.134.140.0/23 maxlen: 23
                          156.134.241.0/24 maxlen: 24
                          156.134.248.0/24 maxlen: 24
                          156.134.249.0/24 maxlen: 24
                          156.134.250.0/24 maxlen: 24
                          156.134.251.0/24 maxlen: 24
                          156.134.252.0/24 maxlen: 24
                          156.134.253.0/24 maxlen: 24
                          156.134.254.0/23 maxlen: 23
                          192.55.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:98:b8:16:07:64:a7:96:d6:44:8e:00:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3c4bb1-6679-4d61-a72c-89e58d4479e3
        Validity
            Not Before: Jul 23 17:42:18 2026 GMT
            Not After : Oct 21 17:42:18 2026 GMT
        Subject: CN=60f8c125-d589-444c-8f70-239db6003261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:ed:af:09:88:9d:e2:7d:63:f6:35:e6:60:
                    01:02:b8:56:b0:b0:3a:1d:d9:16:f7:50:ad:16:3d:
                    50:85:09:ed:80:70:bd:c3:f9:2a:19:a0:ed:4b:45:
                    c7:3f:af:40:34:86:be:11:fb:17:d0:be:ae:ef:9d:
                    80:63:7a:79:1d:43:b6:cd:63:d4:e0:1d:4b:a0:8d:
                    a0:12:da:ad:3e:ac:09:33:1a:92:cd:3d:a5:67:61:
                    53:00:d5:9c:5a:ff:cd:96:72:eb:31:2b:4d:d8:be:
                    f8:fd:34:2c:8e:22:a9:be:0c:18:4c:1f:18:56:7e:
                    94:69:03:1a:a4:83:79:49:27:e1:be:94:f0:5d:83:
                    f5:b6:ae:65:a2:49:0f:a4:23:38:e9:c5:8a:93:b5:
                    c6:41:f7:91:af:70:fb:5b:3f:56:d9:86:0f:ea:ec:
                    c6:15:a0:04:67:e4:f9:97:5e:86:0c:6f:75:88:de:
                    b5:0c:3a:66:d6:b8:ee:3b:40:ed:6b:82:7e:59:7e:
                    c2:13:23:85:8f:a2:12:03:87:2f:1d:cf:68:17:e4:
                    fc:cb:4f:81:ff:08:18:2b:fd:74:03:8a:f2:82:9f:
                    c7:ef:16:94:fa:e8:63:48:5f:a2:43:a1:fe:ed:16:
                    fc:90:a9:0e:3a:79:c6:cb:10:43:5a:3b:e8:b7:92:
                    86:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FF:F1:D8:5D:BB:74:CF:9C:F8:96:4C:EA:F9:52:A7:17:CD:BB:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/b244eff7-3bd2-3b29-a1d1-f91d800c22cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.crl

            X509v3 Authority Key Identifier:
                keyid:48:33:B7:33:89:C8:1C:FB:C0:5A:10:59:A2:75:DD:76:AF:7A:E3:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.134.136.0-156.134.141.255
                  156.134.241.0/24
                  156.134.248.0/21
                  192.55.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ef:be:98:81:25:f6:e1:50:6d:0f:22:38:6e:b9:11:46:b7:
         75:87:c1:db:cf:20:c7:f7:ff:09:7f:64:2b:8d:d4:55:73:2d:
         69:8c:49:df:e7:63:ec:1f:9a:f3:a1:16:d1:de:a9:48:57:ce:
         c2:ed:c4:61:ef:8d:0f:54:60:f4:2e:8e:86:c9:fd:49:b2:cb:
         8c:74:c5:74:44:4c:79:ad:7c:5d:c6:59:f2:40:87:79:f0:3a:
         0a:b0:5c:aa:d0:a9:30:ae:61:19:d9:59:84:f2:35:f3:47:c9:
         21:5a:25:9c:d4:79:63:44:69:e3:cf:f7:1d:af:b9:7c:27:cf:
         f4:cf:d0:15:f3:6f:8f:59:09:b4:4a:72:01:a1:de:dc:69:de:
         2b:97:a3:3d:99:4d:f9:39:d9:e4:db:b1:65:63:4c:ca:fd:2c:
         e0:a1:39:ec:aa:c2:65:d2:ec:10:1b:0a:b7:bc:85:39:0d:ae:
         e6:32:02:b2:6c:01:24:62:16:0c:5b:7a:f1:f4:20:a5:54:1f:
         1b:1d:7e:e5:a2:92:06:b2:08:ca:0d:2d:5a:ac:4e:22:82:62:
         3f:81:41:dc:2a:58:2f:8d:68:34:85:70:7f:3b:9c:a4:b0:4c:
         c1:37:82:55:d1:c9:a9:70:a4:65:72:15:dd:2f:af:4f:c5:13:
         33:3b:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:22 2026 by rpki-client