Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6ce2d994-caf5-3b36-9cd1-e11e50d95707.roa
File:                     6ce2d994-caf5-3b36-9cd1-e11e50d95707.roa (raw, json)
Hash identifier:          IGyUpYt687tupgr4iGNcejOXlPpFUgSsUZQqnvM/TcY=
Subject key identifier:   30:F4:AA:DE:18:CA:C7:5D:D4:CE:C6:58:68:AE:14:DA:EE:9F:33:36
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584F497D23997888E8C0E8450200
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6ce2d994-caf5-3b36-9cd1-e11e50d95707.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.23.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:23:99:78:88:e8:c0:e8:45:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3cf051a7-6916-4b76-8eec-8ba4d9aa6eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5e:de:d9:6d:32:86:31:4d:af:30:49:3c:7b:
                    40:c6:75:12:25:30:d6:43:2c:42:5b:68:03:e3:f3:
                    c4:eb:99:5d:60:f8:6f:10:0d:d9:7b:76:7e:b7:98:
                    d1:a9:84:f4:0e:d8:5e:21:07:91:f7:6d:e7:ad:5d:
                    b6:b1:b3:d1:4d:8a:0d:3a:b3:af:a8:db:f2:aa:93:
                    cf:05:04:8e:dc:b2:64:5d:e7:ee:f6:66:e3:35:1b:
                    a9:1c:90:22:6a:af:06:33:4b:56:09:a2:ee:41:ec:
                    92:bd:b5:78:23:99:38:e7:03:b4:dd:4c:8f:82:4f:
                    e0:b8:c2:a8:74:64:20:ec:e4:1e:37:86:4c:c7:f1:
                    c3:91:53:23:c9:b3:af:3d:a6:fc:46:63:f9:ad:c8:
                    f3:63:43:83:34:fc:cc:c8:2e:ee:72:11:06:aa:08:
                    df:16:f8:5c:8d:0d:98:11:a6:46:ca:18:99:57:df:
                    3f:bc:8d:5d:40:a0:c5:e8:94:40:ba:ba:9c:d0:a9:
                    21:86:98:b7:22:d9:95:70:2a:4a:4e:72:d1:20:49:
                    10:bf:23:2b:d4:fd:84:f7:02:93:00:9a:be:09:fe:
                    b6:c2:78:b6:11:29:60:09:65:aa:f2:6f:8e:06:ca:
                    e9:e2:08:49:2d:17:5e:f3:4e:0f:e8:1c:f2:35:6a:
                    20:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F4:AA:DE:18:CA:C7:5D:D4:CE:C6:58:68:AE:14:DA:EE:9F:33:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6ce2d994-caf5-3b36-9cd1-e11e50d95707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:b4:9d:e8:c0:97:49:f2:a5:d9:4a:72:91:9e:3b:ac:b9:27:
         06:18:92:d8:b5:07:eb:3d:a3:6f:69:a3:1f:bb:cb:a0:8d:b7:
         f0:dc:96:e8:a0:79:d4:a5:e8:cf:13:7f:25:52:af:f9:d6:7f:
         5e:ad:f1:70:93:44:aa:b5:3b:e8:64:14:4c:70:30:c4:fb:77:
         6d:1b:c9:dc:fa:a1:dd:e5:8e:0c:1d:08:f8:2d:82:fd:ab:84:
         c6:85:05:ef:26:ad:43:cb:94:f7:e2:48:04:3d:ed:08:58:4c:
         b1:8f:52:76:f8:50:b1:c6:a9:34:dc:b2:9a:ce:08:02:69:70:
         0b:55:d1:8d:a5:72:13:a4:fa:cd:43:96:e2:8b:07:8a:24:8e:
         48:68:ca:08:c9:44:c9:35:08:24:f6:aa:97:d5:87:28:f2:aa:
         13:fa:49:df:64:05:c7:e3:e0:10:93:79:17:1d:a1:05:b5:4e:
         91:7d:74:29:1b:6e:11:18:26:76:c5:1e:52:74:5a:88:d2:3d:
         ce:ca:3f:60:8b:01:17:9a:e2:12:67:f3:4c:27:21:49:f3:18:
         73:5d:67:61:d5:73:a5:03:0b:ba:fb:f4:bc:20:1b:1b:b8:3b:
         11:b5:f1:89:cf:01:89:b6:89:f1:18:cc:3d:e4:f1:69:94:19:
         3d:50:0d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:05:26 2026 by rpki-client