Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87fa9fa2-8b32-3bcc-8216-906b00d550bc.roa
File:                     87fa9fa2-8b32-3bcc-8216-906b00d550bc.roa (raw, json)
Hash identifier:          Yqi7Y+mRHzEd2yQUp/NN7dabIb2E85HyuFMZUhDcAqs=
Subject key identifier:   65:04:2E:22:F9:6A:50:A5:00:34:90:18:8E:91:8F:D2:EC:72:E0:26
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584D1F4A4B5443094ED420169700
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87fa9fa2-8b32-3bcc-8216-906b00d550bc.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36040
IP address blocks:        136.22.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:4b:54:43:09:4e:d4:20:16:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=eb082a13-a1dd-4b8a-ac1d-29c1f408fa43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:17:ed:7b:d7:4e:9e:17:a4:b6:53:59:72:
                    de:37:5a:7a:8c:24:0b:85:49:c4:3b:7e:3d:04:27:
                    7c:5a:99:cb:50:cc:94:a0:7e:c6:dd:5d:dc:14:8e:
                    79:ea:09:50:c7:04:90:c0:a9:31:d0:22:04:06:8d:
                    16:3b:40:25:6a:ee:c7:58:ca:6a:b5:8b:f5:d5:e3:
                    5a:51:48:62:6b:da:f7:ab:34:c5:ae:1d:fa:77:58:
                    90:76:2b:97:fe:ae:3e:42:0c:93:15:45:d6:6b:b0:
                    43:d6:e8:ee:93:09:01:f6:0b:da:1e:cc:4e:61:e6:
                    6c:ee:7a:09:68:aa:ba:2a:47:16:63:de:38:23:d1:
                    e4:ba:a3:0b:d6:35:a6:64:05:8e:e5:b7:82:7c:90:
                    5c:c2:1e:cc:a3:5b:74:18:c1:df:d5:f2:0f:2b:84:
                    31:cd:ee:b3:f6:1f:8d:72:f4:9d:80:5c:bc:93:ec:
                    06:cc:db:82:f7:f2:59:39:a0:fa:59:6a:67:05:97:
                    83:f4:1d:d0:0a:06:08:a8:a0:a4:88:6e:ea:a4:7e:
                    e7:61:19:6e:e7:5f:a6:f8:fd:28:b9:f9:82:54:ed:
                    09:2f:21:f7:eb:61:58:55:e9:af:24:49:8e:3e:ad:
                    0a:c5:85:07:13:16:37:6e:eb:c3:0e:c7:81:3b:73:
                    e8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:04:2E:22:F9:6A:50:A5:00:34:90:18:8E:91:8F:D2:EC:72:E0:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87fa9fa2-8b32-3bcc-8216-906b00d550bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:cc:c2:d2:35:54:f6:e8:84:aa:41:d4:c8:8f:73:0f:8a:ae:
         ea:1b:f2:47:54:13:6c:83:31:be:7f:4f:d8:2d:9d:2e:c8:2f:
         60:fa:8d:95:4b:a7:7c:53:7e:06:a2:b3:16:c3:a6:09:e2:41:
         2f:d0:ec:ff:32:ef:a2:f1:d2:78:1e:56:de:bc:f8:7e:21:06:
         38:43:90:9d:9a:f7:81:b8:03:d5:c6:1a:f4:8d:fc:bd:a4:15:
         86:d7:ab:48:55:d1:7c:d7:24:71:7f:26:98:2f:7c:65:1c:8b:
         45:cd:de:98:97:dd:53:ae:59:b1:c9:c7:11:59:57:66:2f:43:
         d3:70:db:24:2b:29:01:c0:69:27:61:02:f6:30:bf:fb:17:ca:
         f8:af:50:bc:d6:49:7c:6b:2d:e1:1f:5f:a1:84:81:7c:2c:24:
         0b:0a:cb:1b:eb:12:81:21:10:a7:2c:26:04:f5:f6:19:fe:15:
         13:ef:ba:cd:fa:07:33:2f:de:81:99:5b:1d:38:83:b4:53:f0:
         ce:44:b8:b2:17:03:d2:b4:44:d5:6d:19:68:90:0a:fb:d1:81:
         3f:cb:90:90:6f:c9:4a:10:25:a2:9d:0e:f5:ea:2d:b2:54:70:
         b4:5d:63:48:67:a2:49:c5:0a:41:e8:49:1d:e5:c7:64:f0:4e:
         aa:9b:39:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:32 2026 by rpki-client