Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/36c6970e-5308-3a3e-ac04-e0c3d14c6b81.roa
File:                     36c6970e-5308-3a3e-ac04-e0c3d14c6b81.roa (raw, json)
Hash identifier:          wQSat9EWKP4kt85BPYVTDg/uILd48Ar43XaD+L20Haw=
Subject key identifier:   B2:37:A5:6F:82:7F:74:51:E7:2C:60:25:1C:52:3B:F0:FC:E7:5A:36
Certificate issuer:       /CN=810a26b8-2ddc-4001-9876-52b54c0695fb
Certificate serial:       010D0C9F4328584F4973DDCBC5BA2ED246497480
Authority key identifier: 89:C9:B7:DA:D7:26:DD:6E:D2:E3:A5:FD:4F:31:E0:0C:4F:9E:7E:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/36c6970e-5308-3a3e-ac04-e0c3d14c6b81.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398041
IP address blocks:        23.156.16.0/24 maxlen: 24
                          2605:6840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/810a26b8-2ddc-4001-9876-52b54c0695fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/810a26b8-2ddc-4001-9876-52b54c0695fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:dd:cb:c5:ba:2e:d2:46:49:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810a26b8-2ddc-4001-9876-52b54c0695fb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bc4a746d-c0f9-4bcf-b113-fa71b9ca5ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:53:d0:d4:04:be:99:cc:99:4a:75:b3:63:47:
                    ba:dd:4b:2f:45:9a:23:b4:70:92:d8:1d:de:76:3e:
                    fb:70:e0:41:c6:4c:b2:01:b3:ac:d5:39:b5:a3:0d:
                    fd:39:66:05:78:20:de:d0:85:e6:d8:74:e1:1e:00:
                    33:07:f5:1e:3e:33:88:bb:15:b1:ef:07:09:94:c6:
                    bb:29:ca:bc:e3:35:0b:0e:ac:12:6d:c3:99:1f:dc:
                    92:7e:ac:67:c3:47:f7:a2:d2:66:08:a9:b9:de:89:
                    b5:a2:9f:4e:61:02:e2:90:88:aa:6c:61:f3:80:d8:
                    4f:5c:e2:f5:24:b5:6b:46:c7:e4:7e:2f:09:ac:23:
                    18:50:fd:85:28:b2:24:38:cc:7c:8c:4e:c0:96:28:
                    13:b0:14:ce:f2:a8:79:58:f2:a5:66:fe:a4:fb:2e:
                    e5:ad:2d:ca:d2:22:17:4a:8a:08:1d:30:a4:bf:7f:
                    1d:09:b9:1e:9f:49:0b:db:04:87:02:c3:02:27:57:
                    1a:91:5f:85:54:aa:b5:53:1e:aa:fa:41:0d:e1:a6:
                    c0:23:c8:e7:d3:43:3a:75:0d:68:d8:8f:e2:53:9f:
                    15:69:91:dc:be:77:de:e7:31:c7:29:38:cc:ce:6e:
                    3f:68:ef:e6:17:29:28:ca:f8:f0:0b:b0:65:6c:8a:
                    ca:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:37:A5:6F:82:7F:74:51:E7:2C:60:25:1C:52:3B:F0:FC:E7:5A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/36c6970e-5308-3a3e-ac04-e0c3d14c6b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/810a26b8-2ddc-4001-9876-52b54c0695fb.crl

            X509v3 Authority Key Identifier:
                keyid:89:C9:B7:DA:D7:26:DD:6E:D2:E3:A5:FD:4F:31:E0:0C:4F:9E:7E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.16.0/24
                IPv6:
                  2605:6840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:43:5f:b5:e7:fc:4f:b9:93:cd:8d:f2:ca:90:14:62:a4:c6:
         f5:0b:46:00:07:a7:cf:b8:89:a6:ec:41:c6:16:32:af:f2:06:
         95:30:c5:d1:f4:45:e8:e7:80:da:9c:55:f2:18:b5:4b:5d:8e:
         d4:22:a6:85:1f:b7:96:df:a1:4f:66:51:5d:6a:5b:08:c5:52:
         b8:5e:06:7f:ca:f1:22:4a:72:bf:e5:e1:b8:0e:9e:ac:f7:9c:
         e3:b5:9d:d6:bf:db:d4:be:f5:6d:22:b5:83:09:40:55:6b:a8:
         e6:27:7e:76:ab:cb:1c:52:e1:61:a3:be:42:28:49:cb:f2:e3:
         d5:ba:aa:e6:16:79:ac:40:b6:d3:57:90:df:b4:6f:3e:c6:19:
         61:0f:a3:9e:4a:e0:b9:93:04:da:e8:96:ec:08:d2:d9:e3:28:
         20:55:7e:df:45:8e:49:1e:d9:d0:34:aa:40:f5:b6:4e:cd:4e:
         66:d7:82:a3:46:9a:ec:2a:8c:7e:1f:05:06:cb:fb:ec:3d:90:
         f8:4a:5b:6c:2f:fd:ea:4d:50:a9:24:e4:6c:1d:a5:8d:b5:f6:
         0c:76:43:c4:6c:96:2f:f3:9d:28:e5:a0:f1:e8:67:3a:59:23:
         dd:5d:9b:46:a2:4f:8c:0d:d2:31:94:f2:40:0c:86:1d:38:4a:
         ab:a4:59:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:51:06 2026 by rpki-client