Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/a963b5da-a4cc-3ee5-9316-4b2242e454b9.roa
File:                     a963b5da-a4cc-3ee5-9316-4b2242e454b9.roa (raw, json)
Hash identifier:          L3hvtjclDgS6quzkCozPG9xbuZrUdU/MTtiWcBGOuQU=
Subject key identifier:   FE:F0:79:32:6C:EC:42:BA:4A:6D:BB:92:D2:AC:A1:ED:07:21:DE:43
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584B970CEB6D4C02C8CAEAD9FE40
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/a963b5da-a4cc-3ee5-9316-4b2242e454b9.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        136.184.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:eb:6d:4c:02:c8:ca:ea:d9:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=6bd6b1fa-d9e9-4fcb-921e-d88df1d3d5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b3:63:8c:44:02:0b:cf:5f:0b:22:d6:f9:5b:
                    2d:13:7a:f0:84:fb:13:c1:06:5e:54:b4:85:18:72:
                    08:15:79:80:dc:e9:90:e5:8d:da:a7:79:bc:5e:67:
                    48:79:38:af:87:1e:84:27:2c:a5:76:b6:87:12:66:
                    5d:f7:05:94:b2:1d:3d:09:5c:9a:56:63:0d:5e:1e:
                    a0:74:3a:a9:54:f0:6f:83:db:a3:e1:d3:d9:69:5c:
                    25:d3:eb:b2:47:d7:9a:c8:a6:ab:ef:c4:f2:3a:79:
                    3c:06:2e:33:c0:63:56:19:08:26:84:a7:33:e0:71:
                    67:e8:71:22:69:cb:5f:95:2e:3d:03:e7:47:aa:5c:
                    5e:c9:0a:af:3a:d2:a3:ec:a9:ea:9c:7f:d6:05:ae:
                    a2:de:ef:3c:cf:fc:d0:1b:31:89:4a:ed:b0:89:9e:
                    61:7c:ce:24:f0:af:89:69:02:dc:24:48:40:3e:ce:
                    94:af:fa:8c:4d:f1:c3:20:0f:a4:96:7a:b1:8e:3b:
                    c6:02:64:e4:8b:26:5a:70:2f:47:1e:92:1b:56:d1:
                    1c:55:80:d7:88:41:21:67:06:d1:59:d1:51:8e:70:
                    93:72:d8:48:18:78:cb:34:14:ff:6d:bf:82:a3:ba:
                    86:5f:b4:43:6f:03:04:c4:7f:d4:f8:64:a3:35:56:
                    a7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F0:79:32:6C:EC:42:BA:4A:6D:BB:92:D2:AC:A1:ED:07:21:DE:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/a963b5da-a4cc-3ee5-9316-4b2242e454b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:75:59:2e:73:86:aa:68:2e:c2:02:2b:c1:0d:52:b3:68:ba:
         ed:3b:c5:c5:21:ec:fa:dd:28:2e:aa:90:e1:c3:3b:b3:83:17:
         1c:3f:b8:6f:b3:16:50:5a:b7:73:ee:67:b9:26:44:30:8b:38:
         67:b2:39:c9:01:72:5f:c6:1c:af:ed:91:58:9f:f1:1b:3c:74:
         da:df:a4:d8:43:ca:c4:5b:ea:37:12:9b:62:39:c0:7e:75:c0:
         5c:30:75:72:b7:ad:a2:32:4b:21:2f:bc:ba:92:66:ff:15:3a:
         2e:31:a3:a0:45:b9:8b:1f:39:39:ca:08:d8:de:de:4d:56:fa:
         44:6a:43:d1:d5:b7:41:a2:02:1b:cc:e8:dd:31:c3:3d:8b:3b:
         0b:d1:42:d1:a5:5b:74:5b:e0:e7:92:07:1c:b4:ac:c1:25:85:
         e3:11:15:c9:5b:5d:e1:c0:21:12:a8:38:f6:a7:00:29:3a:69:
         a6:53:3e:09:7a:b4:ee:bb:ac:19:6d:43:8a:5b:35:d0:d7:57:
         65:ed:8f:a8:bc:2c:d4:6c:f8:e5:e8:d1:d2:92:eb:70:e3:0e:
         78:e6:25:5f:61:68:76:e4:79:4d:6c:7b:bb:5d:1a:89:08:d6:
         df:d7:2c:74:89:4f:0c:10:23:db:b6:c6:2c:33:f9:2d:94:9e:
         db:ec:7b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:44:36 2025 by rpki-client