Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ec683dd6-06f1-39fa-9271-418db464debb.roa
File:                     ec683dd6-06f1-39fa-9271-418db464debb.roa (raw, json)
Hash identifier:          5NSR30ldJl89lzl/KmoV9KGg9r5PqPL/V+YtwOvtBtM=
Subject key identifier:   AF:7E:EB:38:94:0B:9F:A0:0A:ED:2A:18:EC:E9:8E:78:3B:15:C7:E6
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D1F4A7E4D2E6C1A1C1D180080
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ec683dd6-06f1-39fa-9271-418db464debb.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36492
IP address blocks:        136.22.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:7e:4d:2e:6c:1a:1c:1d:18:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=834b07bc-9ac6-4915-b9ec-719aa1d6cf77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a8:fa:d4:c4:95:38:fb:8a:9f:3a:80:13:d4:
                    fc:8a:5d:3f:5c:2c:64:4d:9b:fe:84:bb:e9:df:5e:
                    8a:e8:91:e8:86:7b:c6:ca:d9:64:e7:92:61:76:8d:
                    d4:0c:3a:96:c4:8b:18:7a:b0:c2:3e:4a:2d:9a:ed:
                    a0:d3:86:59:23:e1:88:14:5b:cb:60:ff:41:d2:6b:
                    f5:51:22:91:99:0c:3d:da:53:4d:be:ca:94:60:92:
                    d3:33:d3:7e:71:3f:92:d7:43:a9:f0:03:88:8d:d0:
                    96:fa:ec:1c:b9:b4:8a:dd:46:aa:fd:fd:e2:e2:ce:
                    9d:8a:03:32:62:ef:4d:13:37:4e:50:d2:6c:35:b1:
                    55:9d:28:05:0d:b8:99:47:da:46:f0:64:5b:7a:9f:
                    f7:e0:1f:5b:c3:6d:2a:fd:60:d7:6d:69:0d:4c:20:
                    a4:e6:f7:32:28:0b:2b:2f:8f:c5:92:0f:3f:d2:c9:
                    9f:d3:8b:da:8e:51:67:64:79:d5:ba:55:03:f1:c6:
                    bd:ba:05:be:8e:e0:9e:d0:d9:f3:3f:52:5c:2f:81:
                    99:ad:fc:1c:e0:3b:4e:a2:a5:40:ba:39:d8:97:40:
                    27:8d:00:34:c1:0e:db:76:2b:0a:03:37:53:d8:fc:
                    58:38:fe:44:1e:92:8c:27:ea:ea:3d:4f:33:9b:e2:
                    43:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7E:EB:38:94:0B:9F:A0:0A:ED:2A:18:EC:E9:8E:78:3B:15:C7:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ec683dd6-06f1-39fa-9271-418db464debb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:0b:cc:0e:8f:55:b0:a7:d0:0e:00:74:9a:4e:58:f6:81:13:
         fd:fd:7c:04:14:15:14:53:75:8f:da:b4:c3:24:c1:6a:d0:5d:
         08:ad:0a:68:5b:4e:f1:9b:1f:37:06:f8:a9:88:7a:1e:f8:9d:
         7a:df:2f:52:2d:90:bc:0c:a4:ff:86:d9:f5:22:7b:f3:0a:76:
         aa:db:95:4c:1d:8f:86:65:ef:81:97:1c:09:ce:7b:f3:9d:ff:
         8e:36:7a:13:a3:f3:0a:85:2d:9a:54:56:e7:45:35:97:88:7d:
         82:a6:8e:ff:1b:04:92:14:fa:1e:80:02:af:e7:0c:b0:25:6b:
         b9:90:24:ae:2e:51:48:9a:66:2a:17:b4:72:b1:55:95:66:f3:
         fc:ba:14:a9:82:cf:63:47:32:8d:cb:32:72:4c:05:8c:de:f3:
         3e:87:50:1a:8d:95:5f:be:db:9e:45:7e:2e:01:ed:0a:93:e6:
         5f:02:fd:9e:ab:b1:8f:2a:b6:87:e6:6e:d9:a5:ff:f3:c6:9f:
         bd:f4:81:f0:a9:3a:e0:af:84:89:3d:5a:a2:db:a2:40:aa:f8:
         97:34:46:af:99:26:d2:1f:e2:a4:6e:5d:96:d7:3e:37:0c:d5:
         24:7e:c0:2e:1e:eb:b5:93:c0:d8:00:12:fb:8f:3d:e2:51:68:
         06:9c:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:02:07 2026 by rpki-client