Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/65d4040c-43ba-316d-a86b-86f2a6bcd48a.roa
File:                     65d4040c-43ba-316d-a86b-86f2a6bcd48a.roa (raw, json)
Hash identifier:          ocPRHw3HdpHbCaxJY2ic0YSiV/KDaj3WXKQVkPbBosI=
Subject key identifier:   76:08:40:57:AB:9D:90:A7:1C:7F:C3:8C:65:3A:01:06:B7:64:32:58
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584D100CFBAEDA8486DBF9BCB860
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/65d4040c-43ba-316d-a86b-86f2a6bcd48a.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     396422
IP address blocks:        136.175.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0c:fb:ae:da:84:86:db:f9:bc:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=74a70826-edd3-4eb9-9835-cf8643659793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:44:e2:87:c7:21:c9:0e:51:f1:2a:40:6c:
                    ba:54:eb:f8:d7:62:6c:27:a7:75:09:52:fd:dd:fd:
                    ac:c7:5c:ea:30:82:1a:8e:81:a5:ac:0b:f2:be:99:
                    d5:e6:30:80:9a:e2:c0:ac:6f:4d:fd:06:95:00:dc:
                    4c:de:91:d2:3b:7c:18:02:ea:f6:a1:74:b8:a4:59:
                    39:94:ab:b6:a1:de:98:87:20:34:1c:6a:3d:d0:c6:
                    d7:0c:0d:22:58:58:fc:44:05:89:4f:f7:48:ca:17:
                    03:3e:69:77:51:26:97:97:f6:e5:b1:04:95:4d:2a:
                    64:51:19:13:5e:ae:37:68:b0:20:ed:8c:2f:2c:ab:
                    90:b2:bb:bc:d9:05:be:01:a7:13:6b:e2:f6:2d:19:
                    a0:cb:71:5d:15:8b:2a:09:f1:69:bd:9a:b8:f7:14:
                    36:81:e2:e5:bf:1e:f8:64:e5:17:11:7d:27:cb:00:
                    5d:da:2a:54:0c:1d:10:ea:ed:bd:7c:09:6a:74:9c:
                    f3:b8:4c:33:0d:b5:1b:56:ed:4e:07:d7:73:d2:8b:
                    44:9a:35:ab:35:4d:b0:89:14:b3:4f:4a:ce:40:90:
                    61:cc:c0:fa:d1:33:81:93:94:a4:5b:37:86:89:e2:
                    b4:d8:8a:5a:12:26:f7:14:f4:f6:cb:93:91:5a:21:
                    5a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:08:40:57:AB:9D:90:A7:1C:7F:C3:8C:65:3A:01:06:B7:64:32:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/65d4040c-43ba-316d-a86b-86f2a6bcd48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:04:71:44:df:9f:b0:af:4d:30:27:f7:49:59:29:ba:1e:2e:
         1b:ce:42:ec:cd:18:25:de:bf:4a:09:4e:b1:42:00:eb:ea:9a:
         44:07:de:4c:5b:d5:78:62:b7:d4:3f:89:88:02:49:f1:a3:1b:
         69:67:9a:db:b0:d6:1a:cc:1c:6a:17:15:00:25:45:d7:d8:9b:
         52:ca:21:64:7d:a7:ff:0b:7c:48:93:44:b9:ac:12:a6:c0:7f:
         89:27:92:82:fd:70:01:3e:26:95:89:3a:d7:1a:51:30:2a:a9:
         dd:6e:d8:77:32:be:31:bf:1a:db:55:4c:85:66:1a:df:b6:1c:
         83:7b:93:e5:13:e9:0e:fd:20:74:4c:dd:74:4c:4a:3c:f0:ce:
         52:db:7a:8b:a7:b2:18:98:1d:9d:63:ea:f8:90:a3:c9:ce:e6:
         3e:d2:93:88:45:c6:9f:2f:87:52:7a:53:6a:63:d1:b7:85:f5:
         6b:f0:25:b5:f8:31:3f:10:90:c0:ab:08:ff:1b:05:b4:7c:e3:
         8e:6c:b5:11:69:fc:7d:79:5e:81:24:61:31:35:83:05:89:04:
         a3:69:96:51:94:71:0e:68:a9:da:f4:9b:fc:58:f0:a2:28:72:
         42:03:39:35:c4:5a:79:65:d5:a7:89:1e:0e:b5:55:1a:3d:54:
         29:fe:84:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDPuu2oSG2/m8uGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU2MzQ2ZjItNjZmYi00YWM5LThiMGMtMWY4YmJiZmM4
NTkzMB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk
NzRhNzA4MjYtZWRkMy00ZWI5LTk4MzUtY2Y4NjQzNjU5NzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+xE4ofHIckOUfEqQGy6VOv412JsJ6d1CVL9
3f2sx1zqMIIajoGlrAvyvpnV5jCAmuLArG9N/QaVANxM3pHSO3wYAur2oXS4pFk5
lKu2od6YhyA0HGo90MbXDA0iWFj8RAWJT/dIyhcDPml3USaXl/blsQSVTSpkURkT
Xq43aLAg7YwvLKuQsru82QW+AacTa+L2LRmgy3FdFYsqCfFpvZq49xQ2geLlvx74
ZOUXEX0nywBd2ipUDB0Q6u29fAlqdJzzuEwzDbUbVu1OB9dz0otEmjWrNU2wiRSz
T0rOQJBhzMD60TOBk5SkWzeGieK02IpaEib3FPT2y5ORWiFaSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYIQFernZCnHH/DjGU6AQa3ZDJYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTYz
NDZmMi02NmZiLTRhYzktOGIwYy0xZjhiYmJmYzg1OTMvNjVkNDA0MGMtNDNiYS0z
MTZkLWE4NmItODZmMmE2YmNkNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWU2MzQ2ZjItNjZmYi00YWM5LThi
MGMtMWY4YmJiZmM4NTkzLzVlNjM0NmYyLTY2ZmItNGFjOS04YjBjLTFmOGJiYmZj
ODU5My5jcmwwHwYDVR0jBBgwFoAUJkCK/RbbhxHG2cZwZUqe3PK7k2YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTYzNDZmMi02NmZiLTRhYzktOGIwYy0xZjhi
YmJmYzg1OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiK8EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ8EcUTfn7CvTTAn90lZKboeLhvOQuzNGCXev0oJTrFCAOvqmkQH3kxb
1Xhit9Q/iYgCSfGjG2lnmtuw1hrMHGoXFQAlRdfYm1LKIWR9p/8LfEiTRLmsEqbA
f4knkoL9cAE+JpWJOtcaUTAqqd1u2HcyvjG/GttVTIVmGt+2HIN7k+UT6Q79IHRM
3XRMSjzwzlLbeounshiYHZ1j6viQo8nO5j7Sk4hFxp8vh1J6U2pj0beF9WvwJbX4
MT8QkMCrCP8bBbR8445stRFp/H15XoEkYTE1gwWJBKNpllGUcQ5oqdr0m/xY8KIo
ckIDOTXEWnll1aeJHg61VRo9VCn+hEs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:11 2026 by rpki-client