Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa
File:                     36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa (raw, json)
Hash identifier:          JbzprI1wVsizTgEA56jj+lffKwlH3tK+NvC7+kzHgyg=
Subject key identifier:   78:38:02:A7:1E:D7:6F:ED:95:5D:E8:13:44:0B:15:BA:34:A4:68:A8
Certificate issuer:       /CN=7094fef3-a44f-4e12-98ee-72cf53d9de83
Certificate serial:       010D0C9F4328584DAF102B0B011B5221F79D2800
Authority key identifier: 3F:12:DC:25:73:1D:7D:0E:FD:5B:88:B0:07:F2:DE:87:12:16:CC:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     210
IP address blocks:        134.250.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:2b:0b:01:1b:52:21:f7:9d:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094fef3-a44f-4e12-98ee-72cf53d9de83
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=d03cb915-cedd-4663-8f4c-cb287adc7581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:86:0d:c2:5c:f2:db:f6:d4:13:9b:9f:b5:33:
                    d9:5c:c2:15:7c:d7:1e:2c:0d:b6:43:1b:61:c8:c5:
                    a3:87:6f:5e:f5:04:3d:89:31:59:7a:ed:02:57:8b:
                    95:cf:17:c7:46:e9:75:1a:04:85:f5:b5:0a:f4:28:
                    e3:73:73:08:f4:c3:0c:17:b4:65:0f:c7:4c:e6:64:
                    83:d9:c9:39:87:61:9a:09:26:e4:60:5c:49:d1:f5:
                    3b:d8:8c:51:02:4f:a0:ee:d7:30:64:f7:a3:4f:8f:
                    98:37:8b:51:8e:ca:23:ef:a3:59:01:10:3b:71:45:
                    ab:ce:e9:d2:8b:0a:ce:67:92:32:e0:eb:f4:c2:fb:
                    f8:4a:fb:eb:b0:db:a9:6a:c5:11:50:fc:e7:22:38:
                    f5:18:11:da:bc:58:5d:a8:45:07:ef:94:ca:e4:82:
                    cb:b6:89:fc:c1:92:78:ff:ce:0e:c3:d8:8f:85:79:
                    7c:97:e1:d8:89:c7:47:a6:47:ab:a9:84:0b:44:49:
                    73:ac:7e:7c:1e:7e:72:c1:d5:ee:2e:e0:22:03:35:
                    32:14:e4:2c:73:29:58:3a:3f:01:73:4f:74:1f:92:
                    0a:5d:33:eb:35:19:4d:78:6a:b7:7d:d2:b8:49:0e:
                    cb:98:65:5c:22:8a:d1:16:ef:5b:84:97:33:fd:eb:
                    dc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:38:02:A7:1E:D7:6F:ED:95:5D:E8:13:44:0B:15:BA:34:A4:68:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.crl

            X509v3 Authority Key Identifier:
                keyid:3F:12:DC:25:73:1D:7D:0E:FD:5B:88:B0:07:F2:DE:87:12:16:CC:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.250.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:37:3f:41:d3:cc:29:db:1e:1d:1c:ef:bf:7f:9a:e9:67:65:
         4f:fa:21:69:f3:45:9b:f8:33:0d:b2:65:6b:ad:9e:4e:fc:72:
         2a:0a:9b:49:27:b5:65:54:2c:fe:f3:11:48:47:56:46:ee:a6:
         6a:a2:d4:1a:f7:0e:70:97:5d:de:e6:a6:57:11:85:3e:22:5d:
         c9:30:31:bb:f2:0a:5e:ec:80:5a:79:99:97:7c:11:99:c3:94:
         e4:a2:d3:e8:2b:c4:38:ea:5b:c9:55:a3:e9:bc:26:31:41:bf:
         4c:41:a9:de:23:bd:99:57:41:f5:01:ea:42:db:4c:3b:ec:f1:
         9e:9b:d4:c2:ea:fa:4f:f8:43:70:e6:b0:90:38:35:4c:9e:fd:
         d6:c3:46:28:6b:78:97:f3:54:7e:cf:37:35:03:b5:3e:d0:a4:
         1b:9f:ad:06:69:19:a6:5e:46:ab:f6:11:32:57:ef:74:99:55:
         3c:74:4c:63:46:f6:bd:4a:87:94:75:35:8b:17:8b:83:71:03:
         8f:d4:62:ba:3f:4e:b1:b7:e4:d3:5e:67:10:c7:a4:72:ab:af:
         05:41:b6:b5:5f:b9:f6:50:46:46:aa:02:42:0b:1e:9a:b3:e7:
         31:83:29:2b:df:6a:b7:87:e9:f0:1b:51:98:2e:6c:b1:46:7f:
         ce:ff:f9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:59:08 2026 by rpki-client