Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1bbd7ebd-25dd-3d21-8b5f-068c37c0c061.roa
File:                     1bbd7ebd-25dd-3d21-8b5f-068c37c0c061.roa (raw, json)
Hash identifier:          QLw3pWojW87nPrqsXKYVMtweCl7vTjLUtdWH82h8Yxg=
Subject key identifier:   95:83:B9:BE:D2:DC:DC:0C:84:4C:63:9D:88:42:72:F9:D6:7A:EF:93
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D24E02FEAA329C0C880A05000
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1bbd7ebd-25dd-3d21-8b5f-068c37c0c061.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.22.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:2f:ea:a3:29:c0:c8:80:a0:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=93293eef-f512-4a00-b5cb-9f583c601c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bd:fc:40:21:3e:a6:ec:1e:e8:a7:f7:15:0f:
                    d0:2a:f9:43:94:89:49:7a:79:0c:47:43:df:3f:a6:
                    0b:6a:7f:5d:02:ab:58:78:59:c0:d2:70:31:1a:14:
                    67:bc:7d:9b:a0:8c:01:f6:d8:4b:8f:58:e3:43:d0:
                    77:f3:bc:e4:03:45:63:52:08:19:ae:ff:5b:d7:5e:
                    97:8d:e7:e8:b9:76:63:83:c3:da:a3:06:02:d4:d3:
                    f2:97:7b:81:d9:3c:b6:e8:b9:0c:e6:b6:c3:23:22:
                    05:ee:c8:b3:cb:fa:86:bd:12:8d:c8:35:a8:9a:c3:
                    13:eb:95:bc:be:98:0e:e9:69:64:bd:8f:7a:f0:1e:
                    3f:dd:d2:dc:72:0d:16:04:b2:4a:f5:d3:b3:dd:37:
                    6d:9a:f2:bf:0e:44:29:f9:d3:48:37:4c:d1:0c:3c:
                    06:12:f1:1e:39:be:92:eb:f4:24:ea:bf:51:82:70:
                    dd:00:1f:c5:7a:a1:2c:a9:33:f2:60:49:c1:56:ba:
                    62:fe:29:75:97:3f:66:4d:43:32:39:2a:d6:47:9e:
                    7b:19:c1:80:32:67:70:31:89:a6:e6:43:7e:9d:78:
                    2d:9b:ab:f5:15:e2:2c:3b:19:14:77:ff:65:13:3c:
                    2e:82:81:06:fc:74:50:34:33:88:5c:c3:78:47:8c:
                    de:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:83:B9:BE:D2:DC:DC:0C:84:4C:63:9D:88:42:72:F9:D6:7A:EF:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1bbd7ebd-25dd-3d21-8b5f-068c37c0c061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:90:8b:1b:0f:16:fa:3c:4c:26:90:19:b0:68:93:b2:aa:57:
         ab:6b:7d:7f:c3:38:47:6f:7c:88:89:4e:44:f0:ae:96:ce:68:
         ff:15:70:b0:e5:64:33:77:9e:a4:06:17:f5:64:d6:3f:be:81:
         cb:98:4b:01:0f:d7:b1:ac:a4:56:c8:3e:e9:5c:fe:17:7f:36:
         0d:e1:a2:71:dc:5b:41:6f:18:b7:ff:96:f1:48:af:62:f8:77:
         f8:e7:3a:f5:42:06:bd:07:ff:c9:da:87:ea:47:00:a1:f5:8a:
         01:97:dd:a9:16:ce:a5:e1:20:46:cb:14:a6:fc:5c:94:91:58:
         ab:81:70:ad:07:2d:ae:ba:26:9c:22:3e:20:fb:1f:63:09:ab:
         06:b9:52:85:53:83:5a:7a:d1:28:c3:13:da:4c:a0:13:26:4b:
         1b:1a:0e:ce:77:dd:b0:22:71:db:0e:52:b3:a7:5a:20:ad:1a:
         6e:7c:40:ac:39:9b:3e:52:ff:d3:90:f4:e4:99:3e:12:c8:75:
         85:08:bf:89:63:e5:f8:6b:a7:41:01:1e:1c:98:d5:33:df:f0:
         06:03:f2:47:ca:25:2e:f0:73:38:7a:55:10:ba:15:de:0c:ee:
         b5:73:4e:c1:b5:a8:23:35:94:d6:86:bc:91:26:bc:04:f8:0c:
         15:09:eb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:13 2026 by rpki-client