Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/73b18406-87cb-3c17-b9bd-ae4e3ac5a95b.roa
File:                     73b18406-87cb-3c17-b9bd-ae4e3ac5a95b.roa (raw, json)
Hash identifier:          6yZtEx1zo0KNByWhZd6qpbbe6zpAfvlMlkwuO9Dp+E8=
Subject key identifier:   48:2B:0A:AE:8E:87:38:72:A6:FC:32:B2:0C:40:F5:08:86:A3:BE:F4
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D24E0F98A3F4A4CF92C952B80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/73b18406-87cb-3c17-b9bd-ae4e3ac5a95b.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.22.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:f9:8a:3f:4a:4c:f9:2c:95:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=2c24868d-20e4-4b15-83ce-57ac69420a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:ff:fa:58:c7:e5:b9:b6:37:88:c9:e0:a8:
                    95:1c:ad:47:e6:39:98:8e:71:59:24:f7:ba:d8:00:
                    d5:a0:8e:e0:4a:89:4b:fd:8e:c3:1a:91:a9:69:15:
                    ac:d6:81:ec:c7:5e:bb:1a:8d:80:4f:c8:de:01:c0:
                    f6:c7:83:f6:37:27:02:76:66:d1:65:7e:58:45:a0:
                    92:32:fe:1c:2e:ea:df:f8:ab:62:75:2a:44:53:85:
                    b2:61:32:77:d5:5a:36:99:25:f0:84:bc:d1:ab:fe:
                    ec:d6:70:b3:f6:ac:6b:9c:6f:2d:b4:ff:6b:ec:9f:
                    1c:cf:03:cd:3e:cb:59:59:2b:83:f4:8b:ff:55:c5:
                    29:c4:3a:ff:54:7f:b1:13:de:a5:6b:49:bc:38:0e:
                    2b:9a:75:4a:44:ee:9d:b9:84:cc:4e:ac:15:06:12:
                    9b:c4:5c:2a:11:19:1a:2e:fd:e4:f5:53:51:6d:bc:
                    43:47:d4:50:37:66:8a:f8:21:ad:cb:09:74:ec:e4:
                    a6:32:a0:58:3e:54:b9:53:98:27:52:44:40:a4:7f:
                    15:a3:7c:8c:b6:f8:70:f8:27:d4:84:4b:7e:27:74:
                    b9:d5:db:e4:2b:52:30:79:d6:b9:f2:75:07:d3:72:
                    f9:78:2c:bc:0d:5e:f5:6b:9d:63:a0:6c:b6:22:d0:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2B:0A:AE:8E:87:38:72:A6:FC:32:B2:0C:40:F5:08:86:A3:BE:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/73b18406-87cb-3c17-b9bd-ae4e3ac5a95b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:86:aa:69:3d:ed:c3:f7:a4:01:33:c6:56:21:0e:0f:29:8f:
         ae:da:23:30:56:ce:b6:a0:bd:a8:18:29:1a:ca:c8:37:ff:96:
         f2:1d:03:7f:2b:48:4e:64:73:dd:c8:28:07:0f:93:91:ef:de:
         a2:a8:0f:b4:fe:d7:71:f8:2e:4c:04:a0:c5:06:64:b9:3d:3b:
         17:26:05:4e:88:2f:87:9d:10:e9:f9:5c:b9:3c:d0:95:b1:83:
         0d:d1:e5:5d:06:93:12:a6:47:62:51:08:bc:5a:78:36:a9:37:
         78:10:d6:dc:38:04:9c:b0:ab:a0:de:d4:19:f6:83:f0:41:76:
         b5:35:87:d3:cc:f7:dc:e7:cb:a2:c9:78:2c:99:b1:b0:9d:98:
         95:b0:d5:37:65:db:17:04:80:62:12:e0:ea:a1:9d:c5:4c:3d:
         68:38:35:ef:12:c5:89:6f:e5:d9:35:63:3f:f6:02:3f:81:65:
         33:c7:e9:ff:2f:f1:62:ad:b0:cc:4e:8b:d0:b8:7b:99:6f:b6:
         51:8b:d8:fd:d4:4d:28:91:a9:be:18:6f:0a:53:67:c6:55:03:
         ff:34:cc:2a:91:5b:33:58:e0:f3:92:d2:00:8c:bd:c9:99:e7:
         c0:21:70:87:30:97:c0:e3:76:c2:3e:3a:ee:ef:29:e8:b9:23:
         3c:98:fa:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PmKP0pM+SyVK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MmMyNDg2OGQtMjBlNC00YjE1LTgzY2UtNTdhYzY5NDIwYTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmln/+ljH5bm2N4jJ4KiVHK1H5jmYjnFZJPe6
2ADVoI7gSolL/Y7DGpGpaRWs1oHsx167Go2AT8jeAcD2x4P2NycCdmbRZX5YRaCS
Mv4cLurf+KtidSpEU4WyYTJ31Vo2mSXwhLzRq/7s1nCz9qxrnG8ttP9r7J8czwPN
PstZWSuD9Iv/VcUpxDr/VH+xE96la0m8OA4rmnVKRO6duYTMTqwVBhKbxFwqERka
Lv3k9VNRbbxDR9RQN2aK+CGtywl07OSmMqBYPlS5U5gnUkRApH8Vo3yMtvhw+CfU
hEt+J3S51dvkK1Iweda58nUH03L5eCy8DV71a51joGy2ItD35wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgrCq6OhzhypvwysgxA9QiGo770MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNzNiMTg0MDYtODdjYi0z
YzE3LWI5YmQtYWU0ZTNhYzVhOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSGqmk97cP3pAEzxlYhDg8pj67aIzBWzragvagYKRrKyDf/lvIdA38r
SE5kc93IKAcPk5Hv3qKoD7T+13H4LkwEoMUGZLk9OxcmBU6IL4edEOn5XLk80JWx
gw3R5V0GkxKmR2JRCLxaeDapN3gQ1tw4BJywq6De1Bn2g/BBdrU1h9PM99zny6LJ
eCyZsbCdmJWw1Tdl2xcEgGIS4OqhncVMPWg4Ne8SxYlv5dk1Yz/2Aj+BZTPH6f8v
8WKtsMxOi9C4e5lvtlGL2P3UTSiRqb4YbwpTZ8ZVA/80zCqRWzNY4POS0gCMvcmZ
58AhcIcwl8DjdsI+Ou7vKei5IzyY+rs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:10:39 2026 by rpki-client