Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/1f204178-d739-3ae9-8a4e-f369e30a5409.roa
File:                     1f204178-d739-3ae9-8a4e-f369e30a5409.roa (raw, json)
Hash identifier:          1XV0MgBUgowwx0e3UL6uQy+xG2YUVJS0RgnPBHN9Qw4=
Subject key identifier:   D9:70:14:AC:82:46:D5:BB:BE:B1:78:A2:B2:8F:38:2E:13:46:11:DC
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584B970CEB826E532D5B51136D00
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/1f204178-d739-3ae9-8a4e-f369e30a5409.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        136.184.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:eb:82:6e:53:2d:5b:51:13:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=baa62d99-a4c9-4ba0-bedc-3551bf31e598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:43:3e:dd:a8:e3:b0:4b:2b:b3:31:99:25:07:
                    42:7f:58:8e:a7:f9:01:e8:e0:39:33:9e:1a:1d:95:
                    7c:c6:cd:9b:b2:30:32:63:2c:2c:b4:67:72:90:46:
                    45:74:d0:64:c1:c4:e8:65:e8:b9:52:61:ff:ed:d6:
                    ea:47:b5:ad:d9:fd:98:76:6a:67:57:5a:84:28:23:
                    87:5d:d9:39:0b:d3:a2:d8:f8:f0:04:36:d9:9d:32:
                    b2:a8:96:95:0e:0a:b2:d8:63:32:32:53:7c:6f:b3:
                    e8:f8:9b:7b:17:c7:d1:dd:ee:f7:df:c8:a7:b9:53:
                    b9:e5:59:ae:c5:59:99:84:45:40:bd:6e:d6:f2:fa:
                    71:b2:a4:05:0b:fb:b9:25:c6:a7:99:87:76:80:b5:
                    14:71:b4:57:1c:ef:85:3f:62:fd:4c:1f:17:d8:c4:
                    3a:63:32:f3:3d:7c:37:00:25:5b:dc:c4:1a:2c:a9:
                    63:2b:a2:2b:ce:66:2e:88:61:55:e0:ae:4f:68:d1:
                    92:2e:6a:d1:6b:c3:40:31:c9:27:4c:c5:39:0d:93:
                    d8:d6:96:e0:8a:23:16:57:4c:32:14:4d:b7:92:4e:
                    44:02:5a:85:05:f8:f8:b4:b9:bf:49:ad:75:fd:9a:
                    4d:82:61:8f:12:fc:57:d3:e5:2e:bd:f5:a0:d4:89:
                    59:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:70:14:AC:82:46:D5:BB:BE:B1:78:A2:B2:8F:38:2E:13:46:11:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/1f204178-d739-3ae9-8a4e-f369e30a5409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:7c:db:ab:c8:69:d8:2f:c7:df:ee:63:b1:c7:7a:b9:98:a3:
         2d:8d:8d:ba:18:72:9a:df:bc:cd:99:50:ae:db:a5:84:17:ef:
         77:cc:11:9d:23:2d:12:84:9d:16:1a:35:16:89:13:50:7f:7d:
         6f:1d:36:df:1a:bf:a8:df:42:f1:9a:b4:3d:d9:86:c0:39:47:
         6a:50:3f:40:ff:7e:88:fe:6a:a4:1f:ed:07:2e:6c:8e:cb:a5:
         d1:09:10:38:f4:91:d8:ca:9d:d0:07:47:14:16:2a:92:6e:e9:
         08:ef:22:2d:3b:69:37:14:ff:af:32:e4:89:a5:58:19:c4:9e:
         73:00:f6:7f:8c:c5:c6:dd:7c:bc:7f:97:5d:f0:f3:ae:a1:5a:
         ab:70:ee:50:55:a3:d1:60:ae:d5:fa:2c:6b:f0:36:e7:c3:07:
         e8:4d:f1:ea:c1:bd:33:cb:fa:0c:89:c2:1a:28:0a:72:7a:6a:
         47:ae:8f:bc:7c:2a:cb:5a:98:af:e4:45:8c:c7:c5:f8:3a:86:
         92:b6:1b:77:f6:ce:e9:1a:38:91:3b:69:5e:51:1b:fd:15:f9:
         58:03:91:01:9b:ec:49:50:1a:e1:f0:05:2d:20:23:98:bd:ea:
         13:c5:6a:2f:a1:ce:72:9b:5b:39:c3:e7:03:e5:e0:0b:fe:3c:
         81:f2:ca:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:53:22 2025 by rpki-client