Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/37cc9905-b07e-3ac1-a6dc-921843b37658.roa
File:                     37cc9905-b07e-3ac1-a6dc-921843b37658.roa (raw, json)
Hash identifier:          hofb5ifX12sVq6P+RC/zIAxBrKhviZBOrQ2+yZhbyAw=
Subject key identifier:   B9:14:80:4D:72:48:18:8C:6D:42:C5:FA:42:61:58:87:17:EB:73:F2
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A84117DCC478CBC8DA1793A00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/37cc9905-b07e-3ac1-a6dc-921843b37658.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.23.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:7d:cc:47:8c:bc:8d:a1:79:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=17f515ff-cdb1-4727-aeac-cec3b15f6530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:8a:dc:05:ef:39:22:65:cd:77:04:1a:85:
                    37:ef:cf:6a:c1:13:94:03:95:e6:0c:ea:b9:44:a3:
                    a6:b1:c2:e1:89:ca:63:ea:73:c9:fd:08:22:50:cf:
                    4b:2a:e2:ef:ea:13:9d:a2:94:29:04:69:3f:2f:64:
                    99:c5:2c:3f:91:0e:ed:9a:23:2f:70:a8:d8:18:56:
                    b7:6c:9f:4c:60:51:c5:c5:67:0d:04:b5:1b:3f:ff:
                    f6:15:76:6f:78:40:bd:04:c9:dc:0b:84:cb:07:e8:
                    68:2f:03:fa:50:b8:62:5b:3d:ff:9f:0f:b7:54:72:
                    70:ce:f0:7b:8f:25:c0:1c:3e:da:81:b4:85:b2:bb:
                    37:17:d1:a4:7a:85:5a:03:e9:c4:ab:be:6f:ef:f5:
                    e6:2e:d3:64:8c:04:2e:d5:82:ac:71:9f:77:99:63:
                    d0:16:32:21:34:ee:5e:da:af:ba:ed:cd:f5:42:be:
                    21:41:18:cf:f0:e5:b5:88:5f:6d:d0:eb:aa:55:4d:
                    ca:7f:81:9b:45:9f:90:fe:e6:30:aa:5e:7f:ff:0b:
                    de:d1:84:1e:c3:ba:b7:81:fb:31:10:5f:ab:4f:bb:
                    3a:16:d3:d7:46:f8:16:fb:b0:55:6c:53:24:c0:28:
                    9a:78:63:04:6a:3f:0f:0b:27:18:ab:48:ad:58:38:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:14:80:4D:72:48:18:8C:6D:42:C5:FA:42:61:58:87:17:EB:73:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/37cc9905-b07e-3ac1-a6dc-921843b37658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:9a:5c:f0:d7:55:c1:c0:d7:0d:f0:f8:a1:c8:f1:e0:82:
         81:f8:3a:0c:ec:53:73:82:0a:64:e8:57:9d:a6:c1:6f:7f:fe:
         1c:78:db:dd:61:51:53:e2:ee:c6:d9:48:c5:61:e5:35:2f:9a:
         21:e9:22:12:f4:f3:9a:4a:42:1e:b9:5c:8b:4f:15:ae:38:9c:
         21:8f:fb:ce:cd:12:26:32:ed:58:dc:ac:6f:0f:76:ba:4a:5d:
         ce:53:44:a2:51:00:81:7a:7b:56:98:05:c7:42:8d:9b:a8:0a:
         3b:9e:f4:84:85:ca:4f:69:d6:ac:31:82:56:41:05:dc:87:b4:
         eb:20:77:6d:1b:dc:a2:e0:3b:af:79:7b:d1:ad:98:69:eb:8c:
         dc:ba:19:8d:0d:34:25:00:3f:e5:aa:80:0a:9c:3b:19:a5:e7:
         89:47:58:d1:d1:50:84:eb:c4:e6:a0:fc:23:cc:5f:64:38:ec:
         73:52:df:e3:44:c0:f1:33:97:d3:81:b1:7c:8e:c8:f5:1d:70:
         0d:30:da:cb:55:d4:f4:b9:5d:78:3d:32:15:13:df:a5:84:70:
         b9:4e:f8:69:da:9a:d2:9c:d5:50:20:1e:c8:88:0c:e3:c6:bd:
         bb:d5:48:b0:93:25:b9:ec:ad:0c:9a:18:6e:34:13:b3:96:0a:
         43:cb:47:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:22:22 2025 by rpki-client