Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d584e71b-c0e9-3a51-8ceb-b40c48afa838.roa
File:                     d584e71b-c0e9-3a51-8ceb-b40c48afa838.roa (raw, json)
Hash identifier:          BRVMxgWiCOe01plF4i3VeJH1x+OZ2NLsSLVJeECo2Eg=
Subject key identifier:   3C:99:C0:9B:1F:09:F7:69:06:4B:AC:F4:5E:ED:BD:93:45:0F:A8:0B
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584F49739217B058A49C9F59DF00
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d584e71b-c0e9-3a51-8ceb-b40c48afa838.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19165
IP address blocks:        136.29.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:92:17:b0:58:a4:9c:9f:59:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=29708de0-9689-4d52-914b-bc5866eff623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6b:71:f6:c1:0b:b2:0a:f1:ac:3f:97:ca:5f:
                    14:ba:61:ba:bf:b8:eb:91:8e:7f:b0:6c:5e:10:4a:
                    68:ef:b7:d5:c0:f2:51:19:ad:13:e0:bf:dd:30:fe:
                    64:4c:11:30:eb:63:c4:4a:37:0f:88:6d:ad:dd:80:
                    27:50:2b:1a:1a:0c:ba:56:c0:f9:60:0e:80:d1:6e:
                    0b:a0:07:fe:81:6d:7c:9e:c3:42:fc:d6:22:a4:f7:
                    a5:53:73:c6:27:ee:ee:23:f4:e4:7f:9a:84:f7:17:
                    8e:29:11:1f:8c:96:d1:35:0d:ae:a2:15:9e:9c:0d:
                    70:88:7d:80:cb:83:f4:a3:b2:86:55:a3:b6:9b:87:
                    ad:71:fc:f6:73:9e:c6:30:27:39:87:6f:0a:22:88:
                    75:19:7b:4c:d0:fc:aa:b8:c4:d1:fb:14:e2:ef:fd:
                    42:e1:68:17:e7:71:44:de:75:d4:cd:8c:c7:67:5b:
                    0a:0b:8e:41:af:da:92:4d:3e:0a:c7:5b:ab:5f:6f:
                    c9:89:b8:fd:7d:e9:23:c1:9d:f8:5f:4c:d6:34:bc:
                    cf:5c:0e:a0:e1:40:00:a2:27:bf:2b:60:c7:f2:f7:
                    a3:71:80:86:02:92:30:bd:fa:03:33:89:2a:a3:33:
                    89:ff:cb:c0:c2:57:82:6b:0b:3e:1b:32:ad:8a:4b:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:99:C0:9B:1F:09:F7:69:06:4B:AC:F4:5E:ED:BD:93:45:0F:A8:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d584e71b-c0e9-3a51-8ceb-b40c48afa838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.29.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f2:05:77:02:0a:34:c7:38:97:a4:f5:de:1c:25:91:b0:f5:
         22:79:03:f3:00:7a:da:32:62:b0:ec:12:46:5e:a8:4c:96:a5:
         e6:36:51:4c:81:f8:9a:6c:62:ad:e8:32:3a:52:8e:29:11:b2:
         5d:47:07:fe:0c:43:c8:3c:9a:8f:a5:9c:f2:d9:db:5a:bd:86:
         c7:af:d2:e9:e6:8d:01:a8:19:a5:cb:37:7b:af:cf:98:2b:b9:
         6d:84:18:54:68:79:99:6b:44:4d:0a:9d:f0:5b:dd:58:a6:1c:
         33:5e:50:b9:26:03:1e:f4:f8:35:e7:72:7b:29:e6:d9:df:d8:
         97:72:ea:73:aa:8e:79:44:49:d2:d3:fd:14:cd:1c:a2:51:7f:
         85:b9:92:30:b9:02:c6:cb:30:73:14:37:3a:6a:71:82:3c:cb:
         91:10:e2:2a:6f:83:b2:f4:12:12:28:34:f8:da:c3:16:95:e0:
         50:60:3f:ba:ff:ba:fc:6e:d9:95:66:95:20:86:56:cf:30:2b:
         ed:12:53:12:d2:93:86:f9:c1:53:2e:c6:2f:ec:d5:43:3d:1b:
         a3:ba:1b:fd:0b:69:fb:e8:5f:fd:ab:26:d9:34:79:7a:04:70:
         70:ee:69:95:44:95:8c:17:1c:66:ee:1f:ed:20:3a:36:1f:4e:
         ee:c4:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:42:33 2026 by rpki-client