Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/26496e96-f518-3429-906f-7c10adbdfae2.roa
File:                     26496e96-f518-3429-906f-7c10adbdfae2.roa (raw, json)
Hash identifier:          BjB0QBs+WxhHQ4hyrqulIl7gRMjETqqCv3hHFhImUEY=
Subject key identifier:   C8:AA:7F:B8:6D:60:B1:3A:6B:3F:4E:ED:3C:75:9E:F5:16:6B:30:42
Certificate issuer:       /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
Certificate serial:       010D0C9F4328584ACCA692F5D4024FC71F8A8980
Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/26496e96-f518-3429-906f-7c10adbdfae2.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     198949
IP address blocks:        128.36.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:92:f5:d4:02:4f:c7:1f:8a:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=a0a651fc-8ba4-4da3-8cc9-5e1b12a4ac33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5f:10:a5:94:ce:78:8e:c8:a4:2b:04:fd:2b:
                    b9:92:f5:1d:00:23:ae:5a:d3:44:50:43:a3:a5:c2:
                    31:58:39:80:21:49:16:67:a8:2d:7a:54:87:3b:49:
                    f7:91:ff:9f:b4:5d:75:be:4e:5a:5c:4f:3c:ec:e3:
                    48:5f:aa:33:e2:63:53:1e:c0:5e:7d:ad:29:8d:3a:
                    0a:c5:a8:8d:b0:1b:38:6c:6a:19:10:35:c4:47:27:
                    a3:cb:7b:1b:72:ab:d3:c2:d5:7e:f0:2b:d4:cd:87:
                    31:87:12:27:f2:66:cf:e9:80:07:b4:b8:1d:8e:ea:
                    59:87:6c:3c:a3:6d:73:73:f4:f5:04:a8:02:54:27:
                    37:a1:59:9f:ff:81:de:96:19:f3:d5:0f:ec:2a:9f:
                    30:fe:fe:6e:e8:b9:71:fa:f8:96:51:5c:45:80:5e:
                    7c:3b:74:86:21:78:aa:6c:c2:f1:f2:bf:8b:ab:02:
                    25:01:f4:ed:37:29:3b:18:91:b3:35:df:2c:32:18:
                    82:07:6f:c1:18:bc:f4:e5:da:a2:21:e0:83:b7:c1:
                    f4:54:cf:67:c6:44:47:eb:4c:2e:21:7c:3d:8b:d6:
                    c3:52:b6:56:38:d3:d2:b2:45:b0:9b:f1:98:c5:7a:
                    f5:bd:86:f5:46:94:ef:b1:e9:81:2c:05:50:60:88:
                    30:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AA:7F:B8:6D:60:B1:3A:6B:3F:4E:ED:3C:75:9E:F5:16:6B:30:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/26496e96-f518-3429-906f-7c10adbdfae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl

            X509v3 Authority Key Identifier:
                keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.36.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:be:fa:47:83:3e:da:a6:82:fb:73:3e:e9:0a:86:08:fc:7e:
         5b:48:4a:72:03:cd:f2:d8:2c:37:c9:85:14:c7:b3:53:99:0c:
         03:e2:5c:ee:fa:7d:7c:2c:ce:d9:9a:45:fa:30:57:16:05:c6:
         c7:72:6a:ca:c3:a2:17:de:d8:ff:e4:58:4c:fd:d7:ef:28:0d:
         ee:a8:7b:38:8c:14:d4:05:88:76:22:b1:23:a4:dd:3f:71:fd:
         d5:de:d6:b9:86:d4:92:8f:f5:c2:53:7e:f8:46:9e:07:b7:c8:
         ff:4c:36:72:e7:fa:20:d6:f6:e4:71:0a:c2:78:ab:65:58:75:
         0a:8a:37:c9:86:d7:e5:00:f3:9c:d9:1b:58:0a:c6:9f:d7:9f:
         c8:c0:f8:c3:0e:df:89:26:51:2b:b0:da:d1:18:e2:44:c9:25:
         72:f3:db:d9:c5:d8:d2:e2:65:9a:23:7e:f3:2d:56:10:0a:1a:
         c0:c4:5b:bf:68:01:59:59:43:c5:90:40:50:56:9e:ba:01:a4:
         60:02:40:eb:f1:e3:27:9f:bb:80:56:fb:f4:cf:7a:bd:3d:30:
         77:2e:dd:dc:0e:59:f8:b3:65:90:90:86:87:a0:b8:3c:fe:92:
         bc:ca:b3:21:22:fd:fb:83:19:b4:f9:cd:4b:41:17:b1:ae:19:
         85:63:ca:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:11 2025 by rpki-client