Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a72aef24-909d-3744-b445-618711160e29.roa
File:                     a72aef24-909d-3744-b445-618711160e29.roa (raw, json)
Hash identifier:          stRSay/4UJVP/aPsmO+TjBTDgW5oKuR5xcR2Tys7FAM=
Subject key identifier:   DF:73:81:7D:99:32:25:86:B5:15:64:F4:7A:6C:CE:D9:51:F7:CA:AD
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D24E0ED23B9ABA53A0D214080
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a72aef24-909d-3744-b445-618711160e29.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.22.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:ed:23:b9:ab:a5:3a:0d:21:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=cab39c57-a610-4945-bade-009d497db81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:63:5b:b3:ef:0f:36:4b:05:2e:c8:5f:14:
                    89:4b:85:1e:f2:45:de:f3:bf:07:3d:0b:75:7f:03:
                    ba:08:2e:3d:0f:ea:32:64:5c:da:77:96:0f:38:54:
                    cc:6e:47:59:47:0e:a5:37:67:b5:3d:34:54:02:c7:
                    92:ce:a3:e9:27:dc:93:45:ec:6c:9f:79:4f:ca:5e:
                    b5:28:09:55:0b:68:00:ef:f0:2b:d9:b7:26:95:67:
                    f1:c0:b1:a4:ac:e7:d1:8b:6d:76:93:a1:60:e2:15:
                    b8:d0:27:0f:c5:a6:87:78:13:fc:7f:c0:9b:11:7b:
                    c7:e2:ce:33:b6:bf:60:ae:35:93:1f:bf:67:fc:64:
                    25:4a:65:1a:4d:1d:e3:06:8c:dd:22:00:de:a2:3d:
                    40:a6:4f:4d:29:56:57:64:3f:91:d0:24:24:63:d5:
                    02:71:2c:d8:34:c8:44:df:85:81:03:ab:f6:dd:99:
                    91:b0:97:6a:bb:f3:d9:92:40:2d:32:00:30:3d:e8:
                    44:ba:88:52:a9:45:77:97:a3:63:67:6e:09:3b:e9:
                    93:05:a5:d8:05:e2:63:9d:a7:d3:79:ca:01:a5:0f:
                    7a:ff:e2:26:1f:57:4e:56:81:31:38:ad:ce:66:c2:
                    c4:ef:57:1c:cf:9c:7f:79:99:22:ef:2a:d2:2c:2a:
                    12:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:73:81:7D:99:32:25:86:B5:15:64:F4:7A:6C:CE:D9:51:F7:CA:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a72aef24-909d-3744-b445-618711160e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3b:61:00:0f:fa:21:4d:99:4e:09:d2:4f:6c:c7:12:90:ec:
         f9:af:95:42:45:82:cd:63:6f:f0:39:fc:fb:1d:e9:2d:88:c2:
         34:b8:1c:5d:37:d5:31:50:a7:ca:6b:41:11:d3:13:e1:e2:17:
         11:fe:0e:61:4b:1f:f3:8a:41:5e:a3:13:a7:b4:2e:8a:29:c8:
         3e:3f:90:da:3c:cb:d4:2c:cd:e2:57:1e:3f:61:64:2e:4d:6e:
         a9:52:82:47:4e:16:33:50:d3:85:26:b8:db:33:83:68:0a:87:
         99:ef:2c:67:0f:08:eb:23:ce:4c:97:81:ab:ef:b9:2f:75:7c:
         15:50:41:8b:72:db:51:b7:32:e2:9d:5f:43:e8:85:7c:b3:c1:
         00:39:27:31:3c:85:df:02:e6:88:17:ca:81:56:7e:8e:17:49:
         cf:84:eb:8a:c8:84:5f:55:24:86:46:41:a6:6b:af:28:96:5d:
         92:d2:03:bf:af:c1:52:2a:24:55:bf:2f:d4:66:a1:6e:7c:97:
         ac:8f:b9:72:3e:9b:4a:9e:40:31:35:9b:d0:37:38:94:31:ea:
         0b:ea:a8:27:12:b8:2d:be:96:ef:26:01:34:97:0b:0c:71:5e:
         27:28:ce:79:a5:34:91:e7:39:99:75:d8:b1:8a:7c:1e:24:d4:
         54:34:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:55 2026 by rpki-client