Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03dd536f-422d-3e27-adf0-d55eadd97a60.roa
File:                     03dd536f-422d-3e27-adf0-d55eadd97a60.roa (raw, json)
Hash identifier:          g9+4Xf6S79Ns2EJRRMp7BJMUhX8yxE3N3iIQuPw2+YY=
Subject key identifier:   C2:5B:BA:7E:18:BF:2A:3D:4A:C8:03:8E:C0:62:50:57:9E:B9:E6:B5
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D24E0E1F10DEEAFD1982AB488
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03dd536f-422d-3e27-adf0-d55eadd97a60.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.22.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:e1:f1:0d:ee:af:d1:98:2a:b4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=527984b5-c993-4b6c-bb35-b8831fb826de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:32:65:c9:0e:37:66:fe:49:9e:8b:3d:d8:
                    5f:fb:6f:45:b5:da:ea:e4:b5:5b:cf:7c:0c:54:a8:
                    c9:6c:cf:57:26:ea:5b:ca:e8:8e:ec:ed:0a:a4:40:
                    2c:04:1c:01:b6:86:57:93:30:93:b7:27:f9:1d:e4:
                    78:47:16:72:9a:88:03:05:7c:cf:a0:de:b4:6c:64:
                    f0:8d:ab:25:ed:c3:5c:13:e0:79:33:cb:16:a9:ed:
                    91:57:5d:f5:2d:bb:d2:52:4c:79:36:9a:06:c3:59:
                    7e:a4:1e:90:c1:c7:b7:53:c4:4b:bd:9a:7e:61:72:
                    28:67:ac:41:2a:45:4f:ce:ba:f7:b7:1e:3d:5b:45:
                    77:53:ac:0e:41:c5:21:cc:c9:c0:27:a1:a5:42:6a:
                    07:49:f2:3c:5c:8d:7b:9b:24:4b:69:5f:f2:6a:64:
                    2e:2f:14:de:3c:10:49:4e:dc:1e:27:05:dc:5d:21:
                    18:64:a7:84:0a:ff:47:35:83:c6:89:4b:dd:1d:54:
                    f1:c9:31:23:8a:42:d2:33:0b:e5:71:a9:f0:08:ec:
                    6f:c8:83:23:46:c8:ac:0e:ed:4b:69:f2:51:12:32:
                    e8:23:13:1d:df:94:d0:f8:a3:52:eb:e0:ad:a4:69:
                    e5:a3:73:3a:2d:60:09:ee:36:8a:fe:ae:5a:7c:b3:
                    35:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5B:BA:7E:18:BF:2A:3D:4A:C8:03:8E:C0:62:50:57:9E:B9:E6:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03dd536f-422d-3e27-adf0-d55eadd97a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:2d:86:65:8e:12:97:82:4e:0e:f6:d1:da:f5:90:c4:15:35:
         43:8d:37:40:54:1b:27:74:89:52:67:38:ff:0f:d9:d8:13:aa:
         2a:c4:8e:ce:a7:3c:ff:2b:d1:81:c9:d7:e1:7d:1a:d6:06:27:
         99:ca:55:bb:b9:e4:cc:ba:0f:8e:d9:19:95:fb:3d:38:a8:c8:
         c9:8f:01:0c:24:21:f6:41:86:95:95:4c:41:61:fb:33:94:29:
         d1:a4:a3:93:bd:ec:95:aa:8d:ca:de:46:3a:c2:4f:e4:a1:5f:
         80:e8:47:8b:40:87:03:56:82:14:2f:54:7f:9d:59:50:45:96:
         11:7d:94:04:67:e3:fa:d5:e4:0a:85:db:4e:21:8a:6c:60:f7:
         64:f5:c3:a3:ac:4e:47:e9:44:85:76:f5:36:47:6a:ce:0a:6f:
         46:64:fd:11:f1:ff:43:90:cb:03:20:b4:86:5c:f6:00:07:c9:
         c8:a9:3c:5e:b1:49:f5:ef:e5:d2:7e:2d:e7:c9:8c:34:e0:6a:
         b7:9e:3c:6a:19:6f:0a:e8:b5:f7:9b:3c:8c:db:5d:06:60:fa:
         a6:0a:f9:6d:03:43:85:11:ae:fb:9b:59:fa:97:1c:29:4c:7b:
         64:2c:e2:d1:f0:a4:1b:23:43:4e:08:8d:31:58:67:10:57:ba:
         b3:fd:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:38:24 2026 by rpki-client