Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75bcbd78-4640-3856-8f93-24ae6f3712f4.roa
File:                     75bcbd78-4640-3856-8f93-24ae6f3712f4.roa (raw, json)
Hash identifier:          N7TTeB8JT+DZmAS0bdJyIzSpBHA47iPZc2VxT4DUT+o=
Subject key identifier:   1D:A4:EF:37:8D:C0:DF:64:42:1B:37:CD:60:84:F4:05:DB:5B:C7:41
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584F497C9E7C72E1DAF1B7ACB500
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75bcbd78-4640-3856-8f93-24ae6f3712f4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36040
IP address blocks:        136.22.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:9e:7c:72:e1:da:f1:b7:ac:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=458bf664-c8b5-4d12-89d1-1cc2a6c6d26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:98:78:3e:f7:00:d9:20:c9:33:5a:f2:c7:1e:
                    69:0d:2b:fc:7c:eb:a2:03:68:64:ed:71:14:06:f8:
                    dd:06:63:17:93:e1:4b:63:cc:5c:ba:94:14:05:e2:
                    2c:68:95:08:8f:c0:33:43:13:f6:fc:4b:0f:c6:f8:
                    b6:32:bc:d3:cd:cd:a0:99:66:b0:a0:48:cd:11:de:
                    2b:0f:b2:76:ad:2d:68:97:c0:45:be:73:02:91:0d:
                    0a:df:c3:98:bb:24:19:6d:5a:1b:7e:24:c6:cd:54:
                    5c:12:51:85:13:28:1c:34:44:3a:f9:5b:48:a4:ad:
                    ca:b6:8c:48:4a:8f:1d:19:cb:4c:e6:a0:3f:73:ce:
                    f0:b6:09:6b:69:ee:51:69:63:5b:d5:27:ca:7b:86:
                    b0:a4:6b:e3:fc:d2:66:01:86:87:56:c5:32:2e:d0:
                    7b:d0:70:b6:37:53:b1:5f:eb:0a:6f:14:62:27:79:
                    ff:2f:81:68:17:a6:39:ca:2e:ea:21:38:1b:7a:81:
                    5a:71:c5:5d:48:d2:2c:83:5e:fb:0a:f8:c0:9a:27:
                    81:7a:11:e9:75:cf:fe:45:48:11:d2:4d:f5:85:43:
                    3b:c7:ae:59:57:fd:8b:a4:fc:67:98:69:c5:b0:0c:
                    19:87:2c:1a:69:0c:c8:07:1e:9b:40:d6:e4:e7:78:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A4:EF:37:8D:C0:DF:64:42:1B:37:CD:60:84:F4:05:DB:5B:C7:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75bcbd78-4640-3856-8f93-24ae6f3712f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:28:4b:6c:4a:31:52:6e:d9:36:09:c2:b7:84:17:02:74:31:
         a7:55:a9:ad:06:33:ca:03:79:ed:71:a8:af:da:7e:30:33:a2:
         ca:77:73:18:f9:af:a5:39:87:b5:4d:c6:aa:8c:2d:01:07:3b:
         85:93:cf:8a:05:0c:0c:74:27:9a:71:2a:de:9b:ff:cf:54:b7:
         63:f9:66:da:6b:1a:cf:86:c8:10:34:83:bb:e4:b3:40:3a:9d:
         c1:18:51:5c:c8:26:3b:53:e7:84:8f:4c:34:62:b5:af:df:bc:
         a8:c4:f4:de:a7:47:57:55:33:8a:ea:9a:56:2c:fd:d3:5b:a2:
         08:b6:db:22:55:12:54:06:f1:fa:b4:ce:06:c4:f7:36:fc:37:
         92:d0:d5:6b:5e:3f:f2:e1:b0:03:a1:38:d3:1f:ee:79:75:a9:
         89:01:c3:fd:1d:73:37:61:3b:c0:59:7b:b0:41:29:c6:07:bc:
         66:11:ae:72:54:2c:8a:9e:d0:27:d7:6b:b1:3e:ad:6b:7f:ad:
         9c:6b:9b:3f:76:a3:cb:cf:0b:2f:ba:c7:87:11:8e:67:1a:fb:
         39:24:d4:90:4b:63:b3:a7:d5:50:51:30:04:af:a1:cc:00:20:
         19:3a:f1:db:98:34:5b:fd:48:a5:7c:53:6a:8b:24:ba:a3:c5:
         ef:ea:e3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:08:03 2026 by rpki-client