Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03dd536f-422d-3e27-adf0-d55eadd97a60.roa
File:                     03dd536f-422d-3e27-adf0-d55eadd97a60.roa (raw, json)
Hash identifier:          x4j1kBnVGgEljUZvnRY/BgBcJJ/4JJtLrNeW5EgvCv4=
Subject key identifier:   9E:8C:00:D7:D9:22:9E:43:35:CC:8E:77:7F:D1:05:89:9A:A6:EE:29
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F4984EF7A63CC9BC8BA5B2800
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03dd536f-422d-3e27-adf0-d55eadd97a60.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:ef:7a:63:cc:9b:c8:ba:5b:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6bad21ea-af94-4187-a8e5-bbc8373dd170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:3c:a8:92:51:d5:bd:6f:1a:ae:73:86:21:
                    0f:d2:e5:25:1c:8d:5d:ec:a6:04:41:08:3a:57:7d:
                    a9:ec:1f:9d:54:53:b1:64:55:02:2c:d5:5e:47:4a:
                    76:a2:2d:6a:00:ea:27:76:bf:38:04:79:d3:29:0e:
                    5c:29:00:47:40:89:9a:89:0b:cc:e2:97:38:ae:85:
                    1c:6c:77:00:97:cd:54:ed:2b:b6:d7:ce:6e:db:5d:
                    fc:fc:94:82:bf:06:f6:35:50:91:5b:68:2b:a4:3a:
                    7d:04:db:30:28:d0:28:60:6a:0b:f1:fa:a1:77:17:
                    df:1d:76:f3:83:be:73:33:a5:3c:c1:40:98:20:b5:
                    64:5b:36:1e:a5:3f:50:c8:50:23:1f:de:dd:06:9c:
                    fc:31:88:f6:d9:a7:12:89:ce:a2:30:74:27:61:dc:
                    a9:98:3e:21:f4:75:b7:c0:c3:18:2a:1d:38:ce:a7:
                    00:7d:0c:dc:97:f8:2d:b0:c2:c1:c9:f1:cf:a6:35:
                    8d:34:65:71:98:01:45:80:22:e3:91:dc:ce:39:22:
                    3e:17:ad:c6:40:1a:af:ca:ee:58:fd:6f:06:7e:eb:
                    82:80:3a:5e:01:c6:3d:07:40:c0:a8:30:95:3a:cc:
                    e5:4f:e2:b1:26:f8:f9:e5:69:2f:fc:8e:28:05:64:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8C:00:D7:D9:22:9E:43:35:CC:8E:77:7F:D1:05:89:9A:A6:EE:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03dd536f-422d-3e27-adf0-d55eadd97a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:a7:a7:50:69:fc:2e:6e:42:07:54:22:2b:0a:26:e7:e9:04:
         45:02:6a:df:04:b5:ab:8f:02:0b:98:a7:45:23:90:a7:d3:08:
         a6:b2:c8:f9:be:a5:c0:25:0c:b7:29:3f:9d:28:81:8a:54:4e:
         a5:c7:e0:0f:08:8c:ef:40:61:28:a0:b0:b1:7e:95:ff:1a:44:
         f0:67:19:db:63:d6:2f:83:92:95:fa:f2:77:dc:79:02:96:48:
         21:36:28:9e:98:12:0d:f9:01:14:a6:6b:51:29:9a:8c:83:cf:
         7d:2f:29:7d:68:51:60:7a:6c:66:b8:10:ab:73:eb:80:34:72:
         80:9e:14:e9:8b:a2:8d:92:f2:ea:ff:f5:ac:8c:07:48:bf:e4:
         24:ec:a6:23:79:c4:b6:b7:c8:26:90:7a:94:18:0e:25:d4:e2:
         45:c1:6e:1a:58:3f:68:04:53:ad:18:bb:90:aa:56:7b:9e:c0:
         8e:e7:d0:d3:c8:a6:ae:31:ef:5e:36:81:e8:a8:aa:3d:c9:a8:
         e2:47:2b:df:a8:5c:ae:e1:00:2d:00:7d:9c:e6:86:7a:60:3d:
         a1:8b:91:78:6b:bc:2e:74:cd:3d:1e:c6:5c:57:de:89:d0:18:
         8a:ca:0c:eb:3b:40:fd:1c:bc:06:d4:73:6d:6a:ce:f9:22:70:
         f8:2d:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:12:56 2026 by rpki-client