Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b52abad2-be6d-3721-ad90-1cef6a1bf3c0.roa
File:                     b52abad2-be6d-3721-ad90-1cef6a1bf3c0.roa (raw, json)
Hash identifier:          ivYg9Oed4BtiihVZexTewz8nxTAk3QsDmEzJo5pfcXw=
Subject key identifier:   F1:20:D5:A1:51:BB:EE:F2:48:BA:6A:80:D7:36:98:84:00:1B:E6:5D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D24E038BE1893D2105870A650
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b52abad2-be6d-3721-ad90-1cef6a1bf3c0.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.22.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:38:be:18:93:d2:10:58:70:a6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=419ce7c4-4ed6-4e32-bb47-b56be3933e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:2a:cc:8c:b0:07:b7:a9:e4:86:fd:80:d3:
                    63:93:9e:b7:05:36:71:5b:29:c1:f9:d0:97:97:22:
                    fd:83:3c:58:80:98:f7:e2:42:9d:f4:58:bf:a0:4a:
                    91:dc:2f:36:04:2a:37:42:34:6b:b0:b7:23:ed:7f:
                    91:31:3f:f2:6e:eb:3e:c2:d3:37:9b:f2:b5:e6:3f:
                    54:2d:13:c3:a2:d8:b6:77:f7:7c:34:6b:47:8b:e1:
                    2e:e0:dc:e7:6b:a7:20:96:0d:73:1f:76:0d:3b:2e:
                    76:d3:57:b2:32:ef:e5:e8:1e:47:bb:02:1d:86:0e:
                    23:6e:13:e7:6b:4f:12:7f:45:4a:ef:e2:1c:0d:1b:
                    5e:a7:87:1d:52:91:21:f3:ab:31:2a:e8:8d:39:40:
                    c0:28:67:c9:00:8e:ef:f1:1d:2b:51:5e:81:2b:65:
                    fc:2b:4f:63:f2:41:20:25:f5:4e:07:0b:4b:1e:11:
                    66:f5:d6:ae:5d:29:b1:2d:d5:18:b9:e1:34:9f:83:
                    ca:c4:24:2a:e6:c2:7d:b0:3a:b5:d0:7c:12:11:d1:
                    43:52:89:a8:1b:9a:8e:d3:61:ee:be:92:8c:66:48:
                    49:03:6e:fa:7f:9f:0d:54:fd:b7:3b:2e:92:19:c8:
                    14:0e:04:c6:c7:86:6d:c3:27:74:46:95:a0:28:09:
                    65:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:20:D5:A1:51:BB:EE:F2:48:BA:6A:80:D7:36:98:84:00:1B:E6:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b52abad2-be6d-3721-ad90-1cef6a1bf3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c0:4c:d1:c8:1d:cd:6a:7a:f5:25:a2:8b:08:c4:d6:36:d9:
         ac:14:13:6e:df:c8:4e:93:d4:4b:ef:9e:d8:d3:64:c1:af:b8:
         4a:f7:94:16:e6:bc:f7:65:3a:76:ed:92:10:b7:60:b5:74:13:
         c0:ff:4a:a0:60:27:52:05:04:c1:27:6f:a2:a7:c0:07:6b:6c:
         04:50:e2:f2:f5:0d:be:e6:ef:9e:b2:bb:7e:c9:f3:db:11:9c:
         08:24:c1:a7:c1:eb:eb:3f:e6:57:6c:e2:62:6f:5b:0a:71:03:
         dd:59:99:2b:08:b1:6e:cb:09:1b:81:b4:e1:c0:10:72:db:9f:
         98:d1:b6:81:93:cf:18:83:68:38:d5:fc:67:c9:70:e2:92:80:
         7d:92:81:17:4d:6e:a5:40:37:9a:0f:88:4d:aa:1d:ab:7d:3e:
         b8:d4:5a:4b:71:7c:04:18:a9:6d:48:66:ce:ae:3b:41:6b:89:
         9d:01:f9:6b:32:ab:49:1f:96:9f:7f:a8:6c:32:c3:46:a9:fe:
         f8:21:95:35:3d:27:3f:69:23:ef:61:5c:0f:21:bf:6e:af:89:
         66:2e:f1:1b:8d:5e:37:18:91:54:d7:9d:35:58:03:61:e0:07:
         4c:78:5b:22:af:cb:b0:a7:64:48:8b:b7:b8:7c:73:be:cb:67:
         8a:83:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:29 2026 by rpki-client