Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3e179ec3-f36c-3890-b2e4-0ca7cf98fe41.roa
File:                     3e179ec3-f36c-3890-b2e4-0ca7cf98fe41.roa (raw, json)
Hash identifier:          JOPbaQ3mqAABRUVDAjhCocRuhKdLmsmCQOOUZgo6bhQ=
Subject key identifier:   91:AE:CC:56:83:4D:92:29:CD:B8:EA:BA:3D:FF:2E:6E:60:06:86:7E
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584EA787D0A1C8E473EF0D1025C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3e179ec3-f36c-3890-b2e4-0ca7cf98fe41.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     25871
IP address blocks:        8.36.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:d0:a1:c8:e4:73:ef:0d:10:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=975a745c-1bd8-4d11-b626-67cb204c069e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:20:28:ee:f9:f4:c5:d8:89:f4:58:ba:ba:
                    65:22:6a:23:c9:8a:52:89:38:63:b5:84:c2:2d:71:
                    f0:c5:d0:9b:da:cd:37:97:94:dd:3e:8c:aa:17:28:
                    22:b0:39:20:a1:43:8d:8c:7a:e3:54:c5:dc:f1:fb:
                    11:5a:44:87:d2:14:f1:b5:23:45:c5:00:c6:37:a7:
                    16:85:34:85:17:d7:03:21:75:ae:c1:2a:e1:cd:d3:
                    eb:96:d8:3b:11:87:db:d7:b2:b1:cf:f8:63:2a:07:
                    03:46:d0:a9:8b:75:2c:49:6d:77:14:11:49:f9:c6:
                    46:b8:10:c2:0c:af:31:f2:dc:dd:41:a5:1d:da:0c:
                    83:b1:18:b9:29:5a:54:0f:99:2e:93:64:11:0c:ce:
                    4e:a0:b3:24:29:1f:eb:a2:52:5a:af:ea:b0:78:b2:
                    85:52:82:c5:45:f5:cc:64:00:4c:c7:76:92:06:4f:
                    ea:ee:eb:a5:82:d8:19:eb:f7:04:20:b7:8f:31:5b:
                    87:4f:cb:62:c3:41:39:f5:f9:cf:8d:b0:58:51:dd:
                    76:28:57:6f:a8:69:76:ac:11:05:c6:14:42:e1:78:
                    39:6e:f4:45:41:6e:f3:88:ad:7f:86:90:f3:65:0e:
                    2e:de:5b:8a:cb:17:85:91:ec:04:d3:3e:2c:d8:2a:
                    10:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AE:CC:56:83:4D:92:29:CD:B8:EA:BA:3D:FF:2E:6E:60:06:86:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3e179ec3-f36c-3890-b2e4-0ca7cf98fe41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.36.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:cb:5e:dc:85:43:f9:41:19:a5:20:cc:7a:e6:29:8d:52:9d:
         41:63:38:88:e4:0c:1d:cf:a0:09:34:72:aa:35:1a:96:2c:2a:
         12:ff:54:e3:55:46:17:3b:2e:58:ba:47:04:a9:60:41:af:f8:
         46:8c:95:c2:68:a6:05:94:05:12:cd:75:66:fc:59:f5:b7:6b:
         70:ee:3c:bd:d7:5b:70:33:81:2a:b0:79:04:ea:11:71:37:25:
         ee:57:cd:60:6a:fe:e8:32:37:27:ce:4f:a3:22:bf:41:3c:e3:
         73:99:eb:ca:53:b4:af:cf:6e:8b:0f:0c:68:ee:e8:2d:c3:e2:
         58:1f:6c:be:f6:ea:03:75:79:bd:b5:bf:d9:26:e3:c7:08:a6:
         b9:15:79:89:ee:c0:8b:ca:1f:93:90:e6:cf:80:f0:9f:57:86:
         42:b5:d0:0c:08:d9:24:2a:68:31:77:bd:ce:54:0b:10:9e:af:
         0c:1c:82:36:90:ab:58:2a:6a:3a:a9:9a:3b:6e:cb:3d:59:b3:
         33:e9:79:40:27:f9:dc:b3:fd:45:c4:c3:a9:48:6f:da:79:e1:
         40:a2:29:5b:02:c9:89:86:b8:7e:1e:1b:97:29:22:f5:71:bc:
         94:c6:a2:f6:d1:ef:d1:38:3d:0e:4c:49:2f:f6:0d:ce:7e:2a:
         2e:d8:ea:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:31:30 2026 by rpki-client