Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/07e15b06-2c48-3f47-b133-4e94bb31fd5f.roa
File:                     07e15b06-2c48-3f47-b133-4e94bb31fd5f.roa (raw, json)
Hash identifier:          sKIKilY39vq22ytXL8pzNZTsFKVLxK9oQ/vOKszKG/0=
Subject key identifier:   89:92:39:1F:1E:6C:57:35:D8:05:98:ED:B5:C4:CE:25:05:44:BA:74
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584F49851A733CA02DA094BC8C40
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/07e15b06-2c48-3f47-b133-4e94bb31fd5f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.23.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:1a:73:3c:a0:2d:a0:94:bc:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=196dc317-3081-44dd-b19d-3a20be29051a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:71:8a:51:f5:34:eb:3f:d7:2b:a1:5f:03:20:
                    a8:33:e1:22:68:9e:73:56:e9:3f:a9:81:e5:b9:b3:
                    f3:c6:d8:0c:fb:ea:61:1d:61:33:e8:0d:3e:b9:09:
                    5b:ab:55:8c:da:5e:ca:91:04:15:50:33:8f:bc:1e:
                    9f:ee:a2:8f:e2:05:5e:3a:fb:d1:f4:7c:12:b5:07:
                    0e:40:0d:0b:aa:80:df:60:2b:be:c1:fd:0a:cd:43:
                    f0:85:99:05:f1:2c:72:7c:5d:3d:24:b9:b0:c2:4c:
                    c7:36:9e:57:2c:32:fe:dd:58:3d:be:d3:cb:fd:70:
                    24:00:ac:6f:fd:80:58:a4:5a:cf:7e:3d:58:f9:97:
                    91:1b:96:da:13:e8:b8:ea:98:c3:3d:a6:f6:16:7d:
                    5e:fb:c2:73:38:cf:8b:86:d2:32:d7:6c:12:ff:98:
                    5c:c6:3c:e9:9f:90:ad:23:d0:62:80:87:20:e1:f0:
                    17:a1:3c:db:ac:48:61:b2:00:a2:ab:3c:3c:89:ee:
                    ca:96:68:f7:0b:d6:1a:49:35:14:38:ac:fb:fb:5e:
                    d8:26:96:8b:9a:55:09:97:aa:be:4c:19:aa:3b:d3:
                    ef:c3:52:87:54:01:a0:a2:d8:ed:c8:1d:35:dc:d5:
                    69:4c:82:de:bd:da:92:22:19:4f:ab:d6:53:9e:f0:
                    1e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:92:39:1F:1E:6C:57:35:D8:05:98:ED:B5:C4:CE:25:05:44:BA:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/07e15b06-2c48-3f47-b133-4e94bb31fd5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:96:cd:0f:0f:95:dd:15:4e:9c:3a:4b:86:c9:63:61:27:d9:
         5a:65:61:05:9a:b7:10:fa:49:e8:e8:9a:46:af:2e:cb:07:15:
         4b:bf:07:c2:57:c4:58:eb:0c:0f:8c:1a:59:05:d3:63:47:4c:
         65:2e:56:85:80:f8:b5:2b:67:df:b9:91:a2:80:b9:5d:e3:5c:
         b0:30:c0:b0:e4:9a:08:ef:68:66:ee:9a:82:98:c8:19:a1:61:
         1c:d5:fd:d8:af:07:ba:ce:19:54:62:8e:6c:52:4a:8f:92:f8:
         ab:d8:16:82:f1:94:f9:1d:1d:84:b5:f4:2b:56:0e:c1:01:11:
         54:58:c3:9e:46:c8:85:09:d9:c9:a4:a3:ab:07:18:3d:83:21:
         b0:e5:ab:c5:13:12:37:72:ad:e5:12:10:de:13:53:5b:74:64:
         59:66:f2:0c:c4:32:e3:96:49:db:cd:83:6c:c1:e4:e9:8b:88:
         30:16:14:9b:f8:9a:bd:0a:2e:75:ed:10:a8:ab:80:73:61:90:
         5a:21:be:d6:4d:3d:18:32:cd:ca:39:61:4b:ad:70:06:7e:bd:
         91:a6:f7:69:b9:9f:8f:d3:56:15:40:e0:6e:d9:73:62:18:d8:
         c4:69:f1:70:f7:f8:53:8a:fb:dc:b0:f1:09:86:2c:6d:51:8d:
         3c:51:6f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:39:45 2026 by rpki-client