Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d77f73d5-c12d-3f77-8401-a060af508c50.roa
File:                     d77f73d5-c12d-3f77-8401-a060af508c50.roa (raw, json)
Hash identifier:          DjzwS7MOlPzaARGN3jh9HuxaC+RTmxuDjjx/ok4mvzQ=
Subject key identifier:   D8:DD:0F:E6:27:45:77:25:05:DA:F9:6B:AD:C9:90:A6:78:4F:EC:09
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F497CEA73C5E919E93EFB9060
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d77f73d5-c12d-3f77-8401-a060af508c50.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:ea:73:c5:e9:19:e9:3e:fb:90:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=820f0b15-96db-43ce-9308-843bfaf4183e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:32:da:54:81:56:11:70:0a:30:18:d0:1d:
                    76:14:fa:cd:a9:9e:38:55:3c:93:34:14:2a:b9:73:
                    90:63:47:92:3f:73:ac:39:ff:bb:6e:dd:ef:92:15:
                    b5:72:ad:81:ce:d8:d2:f8:b4:43:a4:4d:a7:b4:b1:
                    27:60:ab:3e:08:77:00:6d:b4:a1:9c:27:c6:b4:aa:
                    ee:3b:bb:86:21:fd:62:8a:7e:c7:52:94:bc:3b:37:
                    45:f6:bf:7b:b4:1d:31:f8:a7:a6:5c:0c:65:3e:8b:
                    a3:7b:a1:2a:28:72:8f:c9:13:05:5d:3e:6a:1d:17:
                    25:51:1d:06:b9:60:f8:fb:43:56:78:a3:1d:74:ed:
                    12:3d:5d:42:50:5a:d0:98:f1:e2:3b:d2:98:0a:74:
                    b8:e2:58:32:c7:bc:4e:c2:47:7b:a2:5e:bd:2d:c2:
                    75:32:c4:2f:f8:06:5b:fd:f8:a7:ea:34:8d:3e:16:
                    af:57:77:20:b8:97:96:42:66:38:9a:a2:55:2f:d5:
                    99:44:1e:91:82:aa:2d:f5:8f:c4:40:65:c5:43:65:
                    9d:61:04:cd:60:82:3e:58:c8:be:ea:7a:64:16:06:
                    63:df:89:9f:ac:86:f7:84:7f:0c:2f:73:71:2b:12:
                    99:38:4c:91:4d:d6:da:42:35:58:50:d0:51:0b:29:
                    ee:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DD:0F:E6:27:45:77:25:05:DA:F9:6B:AD:C9:90:A6:78:4F:EC:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d77f73d5-c12d-3f77-8401-a060af508c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:dd:7c:d0:c5:38:43:90:fd:38:28:43:8f:29:9a:e1:85:8e:
         97:94:55:22:6e:89:09:fb:9e:27:56:ab:c9:b9:7f:22:f9:af:
         af:2d:77:86:22:52:cb:58:03:92:31:b6:e1:2c:99:73:c7:74:
         53:1a:94:b1:63:00:88:2e:d4:f6:00:c3:58:62:bc:77:dc:11:
         e1:19:bd:2e:9f:ab:d6:2a:b0:bd:40:c8:a6:34:79:7f:5a:62:
         d6:ad:15:a8:84:87:c8:b4:39:dd:31:50:ed:70:2d:48:1c:3d:
         74:b1:60:c5:50:e0:20:64:18:f9:3c:2f:ed:ee:a3:89:b9:84:
         1e:41:22:44:f2:ba:6a:2e:f0:44:cc:c2:a9:1c:69:e4:45:ae:
         83:cf:68:e0:eb:ea:98:a0:db:eb:77:68:22:a9:37:a3:4f:6e:
         d6:aa:ea:7f:06:13:41:66:88:21:7c:8f:a5:b4:dd:1b:8a:85:
         88:52:30:2d:e0:db:fe:40:cf:51:7f:1e:12:35:dc:30:47:6d:
         b5:e7:c3:f8:b0:bc:fa:9e:0f:98:8e:15:b6:a6:a9:e3:95:d7:
         e6:36:48:b8:01:88:d6:f3:49:9c:72:7e:7c:68:00:51:fc:7f:
         5b:7e:b6:29:9c:dd:dc:51:b9:dc:f3:fa:e9:ce:4e:88:e9:48:
         84:fb:fb:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfOpzxekZ6T77kGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODIwZjBiMTUtOTZkYi00M2NlLTkzMDgtODQzYmZhZjQxODNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVsy2lSBVhFwCjAY0B12FPrNqZ44VTyTNBQq
uXOQY0eSP3OsOf+7bt3vkhW1cq2BztjS+LRDpE2ntLEnYKs+CHcAbbShnCfGtKru
O7uGIf1iin7HUpS8OzdF9r97tB0x+KemXAxlPouje6EqKHKPyRMFXT5qHRclUR0G
uWD4+0NWeKMddO0SPV1CUFrQmPHiO9KYCnS44lgyx7xOwkd7ol69LcJ1MsQv+AZb
/fin6jSNPhavV3cguJeWQmY4mqJVL9WZRB6Rgqot9Y/EQGXFQ2WdYQTNYII+WMi+
6npkFgZj34mfrIb3hH8ML3NxKxKZOEyRTdbaQjVYUNBRCynuxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjdD+YnRXclBdr5a63JkKZ4T+wJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZDc3ZjczZDUtYzEyZC0z
Zjc3LTg0MDEtYTA2MGFmNTA4YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHdfNDFOEOQ/TgoQ48pmuGFjpeUVSJuiQn7nidWq8m5fyL5r68td4Yi
UstYA5IxtuEsmXPHdFMalLFjAIgu1PYAw1hivHfcEeEZvS6fq9YqsL1AyKY0eX9a
YtatFaiEh8i0Od0xUO1wLUgcPXSxYMVQ4CBkGPk8L+3uo4m5hB5BIkTyumou8ETM
wqkcaeRFroPPaODr6pig2+t3aCKpN6NPbtaq6n8GE0FmiCF8j6W03RuKhYhSMC3g
2/5Az1F/HhI13DBHbbXnw/iwvPqeD5iOFbamqeOV1+Y2SLgBiNbzSZxyfnxoAFH8
f1t+timc3dxRudzz+unOTojpSIT7+5I=
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:34:25 2026 by rpki-client