Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/454f1cc4-b48d-3411-844d-c9a3f81eef50.roa
File:                     454f1cc4-b48d-3411-844d-c9a3f81eef50.roa (raw, json)
Hash identifier:          Ih61Uw4eVFR1nkG7+5hhUlYd2HWrf8lr13w/0QQQ4pg=
Subject key identifier:   5F:54:07:F2:47:5F:FD:1A:D2:76:A8:59:F9:32:F9:3D:E0:C9:9F:6E
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584B5F373D84AC687082B8582FC0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/454f1cc4-b48d-3411-844d-c9a3f81eef50.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36040
IP address blocks:        136.22.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:3d:84:ac:68:70:82:b8:58:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=dbac9991-c31b-4b07-aad7-fadff0ac348e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:92:1f:e1:2c:1b:1f:7c:3d:df:83:f3:d4:b8:
                    b4:e4:04:3d:2d:82:83:b1:af:35:3a:52:9a:ff:5e:
                    29:5a:5f:81:b8:a4:fa:b2:e4:34:b8:89:58:47:10:
                    7c:ec:45:43:37:99:f9:0b:cc:1e:c7:5f:e5:82:c8:
                    6b:b1:c9:e6:61:d7:87:53:45:c3:09:ae:e8:23:da:
                    c1:9f:1d:a4:06:b6:26:9f:c5:ec:90:d0:14:35:83:
                    85:c3:77:bc:55:81:31:74:45:da:03:80:79:15:f9:
                    d5:ea:ec:fc:1c:2d:8e:81:02:39:bb:33:6e:d1:d0:
                    84:11:39:f8:99:87:fe:a1:9e:37:c4:05:cf:6b:21:
                    14:b3:99:ea:4c:77:d3:62:e8:b6:0b:ce:9c:fe:36:
                    45:d0:b9:fa:69:23:6f:8e:b2:f8:83:da:a1:3e:36:
                    5d:e6:a2:ab:49:50:33:aa:f1:6a:6c:86:1b:9b:ec:
                    f0:03:42:f2:f8:9b:26:2f:5d:11:3f:02:db:c5:fb:
                    e3:df:0a:a5:ba:f9:13:4f:f8:9d:08:b6:c9:e8:5f:
                    a4:4a:1b:f2:b0:82:b0:a0:ff:34:3a:5d:23:65:76:
                    df:3d:18:23:aa:8b:26:8c:60:2f:48:76:24:f7:e1:
                    f3:f9:93:60:ce:90:ab:d5:46:a2:c7:1a:0a:83:56:
                    b1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:54:07:F2:47:5F:FD:1A:D2:76:A8:59:F9:32:F9:3D:E0:C9:9F:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/454f1cc4-b48d-3411-844d-c9a3f81eef50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:4b:ff:7c:a6:fa:d6:f9:f3:a0:ba:96:52:3a:e0:b1:54:98:
         07:46:c8:29:95:fc:7a:8a:2a:d5:8c:5e:09:89:5e:12:80:94:
         46:ae:f8:c1:a6:ed:26:2f:9f:9c:d3:2c:ef:37:fb:b1:a8:1a:
         34:57:0b:bb:1d:3c:a4:70:b4:f5:95:99:39:96:15:37:6e:9c:
         a9:80:82:ad:05:4a:0b:64:9a:c0:c8:33:9a:f2:c9:ab:40:93:
         dc:60:93:9e:7e:74:15:97:71:9a:2e:07:89:bb:b4:d3:e6:1c:
         db:79:30:e2:e9:64:b5:22:f1:5f:ca:b4:3f:a2:e6:34:64:d7:
         4d:4a:db:5d:14:20:5a:e2:cd:49:fc:a9:ac:43:a2:a9:eb:6c:
         30:ec:e0:19:57:a8:66:a9:bd:29:b1:f1:f2:12:bd:3b:ba:ca:
         19:de:84:fe:06:1b:42:e1:a7:b2:77:2c:50:2e:4a:7b:ac:7b:
         ce:5f:b1:00:6a:53:3d:3e:31:c2:48:ac:a5:41:ce:a7:e9:6b:
         98:8d:55:cf:d3:5f:3d:5e:ff:58:3e:2e:0c:81:82:ad:c7:26:
         d8:00:1d:cc:58:26:73:b6:f6:88:73:67:e7:41:a3:16:87:14:
         77:a6:cd:ad:85:c8:3f:86:f1:09:df:6b:bc:17:d2:5d:d6:05:
         b6:ba:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:33:32 2025 by rpki-client