Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/3788643e-a1c2-3cf8-a35f-008410af4062.roa
File:                     3788643e-a1c2-3cf8-a35f-008410af4062.roa (raw, json)
Hash identifier:          oa6R6FRfzSbIVEmy9xncFub8FoSRLd2sF1ugJNLJJew=
Subject key identifier:   E6:E9:FB:9F:2D:AD:EF:AB:C1:01:E0:8C:85:CA:72:93:E4:B6:CA:54
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A84117A98152626DDF9665540
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/3788643e-a1c2-3cf8-a35f-008410af4062.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.23.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:7a:98:15:26:26:dd:f9:66:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c2c335d1-deea-4c9d-8f70-1eb513cf0cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:21:6d:54:94:fb:f8:ca:b4:fd:9f:f2:25:10:
                    4d:af:0d:1c:88:76:21:f8:b2:28:97:60:db:b5:b8:
                    ef:5c:57:eb:41:41:e9:8f:2d:9f:52:61:0f:37:77:
                    46:6c:45:08:05:ef:9f:e8:7e:c9:52:80:93:0c:ea:
                    89:8a:91:5e:f1:93:8e:f6:a7:e9:20:6d:9e:28:9f:
                    38:1a:f7:d8:f3:b5:5a:52:54:7c:5a:1d:0f:b7:a1:
                    d3:5d:af:89:af:99:aa:2f:ef:17:64:95:ca:b9:80:
                    2e:fa:f8:fe:dd:ed:ed:41:be:c3:10:99:0c:89:4c:
                    8a:b9:ec:e6:e1:63:d0:c6:dd:7a:53:c3:3d:a8:dc:
                    53:f4:0e:d6:d0:f5:8b:ae:03:7a:c9:4d:6e:52:f0:
                    e8:2a:ad:21:54:1e:cf:7c:99:6c:dc:45:12:8a:a8:
                    bb:10:c0:03:34:f0:af:3d:65:81:2f:bd:fe:68:99:
                    12:d4:93:d5:a2:fa:9a:4a:34:df:79:46:66:a6:04:
                    a6:6b:66:5e:e7:f2:a9:e3:af:e4:0d:f2:df:e5:63:
                    4f:c6:cc:be:07:20:7d:35:a9:10:01:a1:93:b8:25:
                    38:5c:6d:b0:25:14:97:0b:1e:06:78:a0:66:e9:f8:
                    ea:1d:65:1b:bc:25:8a:28:9f:0e:38:94:39:70:92:
                    40:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E9:FB:9F:2D:AD:EF:AB:C1:01:E0:8C:85:CA:72:93:E4:B6:CA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/3788643e-a1c2-3cf8-a35f-008410af4062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d2:45:0e:50:c5:fd:24:a3:4b:cc:26:14:5d:ec:42:4a:85:
         82:af:b7:38:fa:b1:1a:f6:54:9f:cc:16:21:12:db:96:45:7a:
         04:a9:e7:2e:42:b2:a5:9f:bd:35:d3:28:19:cd:fd:e2:3a:3c:
         5e:aa:e1:7a:85:0d:93:37:25:d2:f7:99:f1:f3:f6:25:d7:0f:
         30:5f:56:e1:2f:be:11:bc:25:96:e2:69:ba:cd:ad:53:ec:50:
         9a:28:81:b4:0a:09:74:03:7b:6d:ad:56:ec:83:a5:8d:88:ec:
         79:42:6a:e2:99:e8:9c:d7:45:81:14:3a:f0:36:a6:4b:4c:86:
         08:40:bf:00:df:70:11:bb:06:b0:df:c5:b8:ff:1f:80:20:9e:
         28:23:f7:6f:dc:80:b1:0b:0c:0b:82:17:c4:ba:00:80:16:a2:
         16:5b:9a:b9:ca:a2:26:34:dd:ae:17:9f:2d:68:e6:81:f4:91:
         75:6a:e8:a4:b3:2d:76:94:a9:e9:bc:ca:c0:7c:b8:38:52:54:
         a3:06:34:d9:10:2d:b1:6d:85:79:a9:d1:d7:3d:d8:36:35:96:
         3a:92:20:e6:ae:21:ac:ab:8d:b5:d7:6c:a9:c8:4b:de:3f:3f:
         c0:b6:9e:71:ab:62:76:6c:04:13:31:25:28:b3:d0:58:61:27:
         72:a2:1d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:55:09 2025 by rpki-client