Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f169cd3a-8ca9-330e-8642-a90f86a55c11.roa
File:                     f169cd3a-8ca9-330e-8642-a90f86a55c11.roa (raw, json)
Hash identifier:          rau4NWt2fHyAg0W9/roqqdrNtyGyiaL+SaeGVkMuXm4=
Subject key identifier:   A3:95:F8:51:F3:A4:35:49:28:AD:F9:7F:04:E9:2F:39:59:B0:91:55
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D1F4A5184D4DF46382F429B00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f169cd3a-8ca9-330e-8642-a90f86a55c11.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36492
IP address blocks:        136.22.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:51:84:d4:df:46:38:2f:42:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=6cf24b17-c16e-4728-9f7c-f8fa7de6df8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:be:f8:af:ed:52:49:36:70:5e:e9:38:9d:d1:
                    89:c6:9d:74:d8:60:98:0d:e0:66:06:d8:9f:d2:af:
                    00:89:31:86:6c:75:b8:c8:10:7c:49:a3:fa:5b:e7:
                    b2:66:31:93:12:7f:f9:96:1d:7c:f8:fe:85:b9:c6:
                    69:bf:bb:19:6d:1c:5b:33:73:e4:15:6d:bf:26:5d:
                    1f:a0:75:76:fa:64:cd:aa:e8:23:74:86:e6:8a:a8:
                    3a:77:79:88:2c:a7:30:79:02:9a:4d:34:5d:6d:42:
                    86:ee:36:b2:8f:c9:04:9b:90:9e:55:b9:fd:d9:3b:
                    02:99:69:a7:fb:cd:c3:e1:d2:00:fb:56:b7:9f:bd:
                    31:a3:b9:73:e9:44:99:f4:fd:96:70:86:4c:bd:80:
                    2f:93:fb:8c:f6:83:e7:a7:4c:ed:96:a9:d3:87:39:
                    2d:cf:aa:6c:06:63:5d:7f:aa:be:64:5c:00:89:3f:
                    04:f2:04:fc:b8:73:34:91:65:79:68:cf:7e:68:03:
                    83:5a:b9:15:74:60:24:bb:8f:aa:7c:38:70:1b:e2:
                    ec:3b:6b:2b:ac:dc:b2:36:c9:df:f9:e2:ce:be:ef:
                    95:00:98:f8:a7:14:25:ad:b7:db:23:0a:f3:07:cf:
                    45:6a:93:1f:59:11:e3:c0:bf:1a:ff:51:ec:99:32:
                    13:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:95:F8:51:F3:A4:35:49:28:AD:F9:7F:04:E9:2F:39:59:B0:91:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f169cd3a-8ca9-330e-8642-a90f86a55c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:77:83:b2:89:07:d3:d1:d7:a7:2e:38:b8:28:d4:7f:63:1f:
         4a:8e:27:37:f5:c2:4e:44:a2:53:3b:c1:68:66:ce:79:2d:87:
         04:16:45:db:f6:6e:54:96:1d:8c:6c:ca:02:c6:32:94:f7:37:
         3f:10:02:61:3a:31:39:f3:2b:a9:a8:e2:6c:48:bc:f7:b5:f5:
         2f:75:45:8c:21:70:7e:95:03:d4:8e:b5:6c:97:bb:1f:17:15:
         c9:62:b9:ac:bc:af:90:a9:3f:bb:21:7f:5c:04:23:b7:7f:a8:
         db:5f:10:bf:8d:a6:cc:ee:98:1f:74:77:c5:32:2c:cf:f5:dc:
         0f:77:de:fc:b5:05:55:e0:4e:ab:fb:e7:86:2c:e6:4e:ec:99:
         c2:58:8c:0e:98:2c:c2:c2:ab:56:8c:f8:b5:81:3a:cf:8b:59:
         7b:bb:eb:6c:69:92:49:05:9c:43:d1:9e:29:3e:e0:31:d4:b1:
         cb:c0:c0:01:04:03:a6:8a:63:1c:bb:58:52:30:d7:b3:56:ee:
         01:46:fa:36:93:69:87:cb:a7:52:03:a0:d4:3f:d3:c9:c2:31:
         fb:19:87:ea:eb:ea:dd:1a:af:66:48:1d:a2:7c:d5:08:6f:e1:
         46:ec:03:d5:7c:a6:05:f6:fa:07:43:30:71:b1:3f:7e:3d:38:
         44:2d:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:44 2026 by rpki-client