Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9e6fab49-e91d-3179-82d3-64b31c7b0b29.roa
File:                     9e6fab49-e91d-3179-82d3-64b31c7b0b29.roa (raw, json)
Hash identifier:          rA1Dg8qFSc0tKemkioDWd7drwiL6CDeQ7oa2bgVl6v8=
Subject key identifier:   64:F1:1A:43:0D:6E:3D:1F:AC:EC:DB:6D:3F:52:7A:AA:35:64:B8:E7
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A841182F5657F8280B0A10C80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9e6fab49-e91d-3179-82d3-64b31c7b0b29.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:82:f5:65:7f:82:80:b0:a1:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=74dea253-a3af-48bb-b788-e5ab3a69f2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c4:47:b3:31:86:df:04:cc:dd:fc:0f:ad:98:
                    2a:17:f9:48:42:29:c4:43:83:bc:fe:e6:ef:b7:32:
                    a0:5b:94:99:a6:18:e3:b1:b6:e2:35:bb:2a:d6:8a:
                    67:9b:0f:5f:2a:b4:76:97:7d:ab:08:44:fd:0b:e9:
                    0c:da:4b:ac:76:db:cb:3e:84:f3:e4:25:6c:71:1c:
                    24:17:fb:83:93:84:21:7a:ce:ec:e0:2c:f8:9b:22:
                    b6:e6:95:49:e3:fd:2d:2f:be:31:bd:7d:b7:ec:06:
                    ff:80:36:35:b0:2c:f8:5f:9f:30:6c:25:94:d5:29:
                    b1:b3:79:6d:01:27:dc:3a:41:a8:ad:6a:56:72:71:
                    7c:f0:b5:36:f8:fa:f1:b3:15:0a:eb:eb:b0:6f:74:
                    ac:d0:a4:6e:33:28:5f:ec:3a:a4:b4:75:24:5d:8d:
                    bb:6b:6d:fd:80:e6:6b:05:05:9e:89:f2:ca:9c:07:
                    31:61:87:a4:b2:a0:08:05:f6:5c:26:7f:6d:b4:3b:
                    bc:cd:00:e6:84:19:41:f2:1d:12:67:23:86:6b:4e:
                    2a:d3:f3:ee:61:fb:50:0b:e7:de:79:63:86:0c:dd:
                    04:a5:44:2c:93:87:b5:71:bc:7c:ec:9b:74:60:f2:
                    50:1d:dc:5d:53:80:99:5c:4f:2b:d1:62:41:61:e9:
                    a1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F1:1A:43:0D:6E:3D:1F:AC:EC:DB:6D:3F:52:7A:AA:35:64:B8:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9e6fab49-e91d-3179-82d3-64b31c7b0b29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:23:93:51:20:9b:52:f4:65:13:9e:54:65:57:fe:fe:bc:18:
         b9:ab:dc:72:f3:2b:c5:16:40:a7:28:17:07:4b:1a:8c:1a:c6:
         dc:97:c5:7e:40:45:3a:73:40:1d:a6:37:90:ba:7a:61:1b:07:
         32:f8:da:14:c1:84:87:26:11:83:80:46:1b:d0:6d:52:cb:7b:
         4c:df:55:93:33:bb:5c:30:91:3c:10:37:d5:97:fc:d7:49:6e:
         7a:26:fd:83:a1:6e:ee:e5:03:73:6a:22:20:a7:9f:51:bb:1c:
         ae:60:c8:c4:4c:1e:c3:23:46:a0:39:c9:e8:5b:eb:31:09:79:
         8d:32:84:10:6a:af:ec:fd:d6:60:9b:80:87:28:f9:d1:90:8b:
         4c:4f:7f:de:a8:45:96:0e:75:fe:70:fc:d5:02:15:fa:d5:cc:
         8a:23:76:fb:7a:72:e0:f9:d2:16:db:34:d0:9c:43:69:93:05:
         0a:6c:50:9c:2f:a8:bb:b3:97:ee:55:13:12:26:cd:11:d0:63:
         06:a0:da:a8:9b:ef:c1:71:65:2c:43:80:14:d9:59:96:b5:46:
         82:ee:d9:bf:3c:f5:63:65:d6:a2:3e:c2:1e:b2:f6:31:9f:a1:
         5a:3b:3e:f9:0c:b6:89:3f:f4:9b:b6:42:df:04:b2:ca:04:d5:
         a9:8a:ee:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYL1ZX+CgLChDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NzRkZWEyNTMtYTNhZi00OGJiLWI3ODgtZTVhYjNhNjlmMmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcRHszGG3wTM3fwPrZgqF/lIQinEQ4O8/ubv
tzKgW5SZphjjsbbiNbsq1opnmw9fKrR2l32rCET9C+kM2kusdtvLPoTz5CVscRwk
F/uDk4Qhes7s4Cz4myK25pVJ4/0tL74xvX237Ab/gDY1sCz4X58wbCWU1Smxs3lt
ASfcOkGorWpWcnF88LU2+PrxsxUK6+uwb3Ss0KRuMyhf7DqktHUkXY27a239gOZr
BQWeifLKnAcxYYeksqAIBfZcJn9ttDu8zQDmhBlB8h0SZyOGa04q0/PuYftQC+fe
eWOGDN0EpUQsk4e1cbx87Jt0YPJQHdxdU4CZXE8r0WJBYemhnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTxGkMNbj0frOzbbT9Seqo1ZLjnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvOWU2ZmFiNDktZTkxZC0z
MTc5LTgyZDMtNjRiMzFjN2IwYjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBYXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGsjk1Egm1L0ZROeVGVX/v68GLmr3HLzK8UWQKcoFwdLGowaxtyXxX5A
RTpzQB2mN5C6emEbBzL42hTBhIcmEYOARhvQbVLLe0zfVZMzu1wwkTwQN9WX/NdJ
bnom/YOhbu7lA3NqIiCnn1G7HK5gyMRMHsMjRqA5yehb6zEJeY0yhBBqr+z91mCb
gIco+dGQi0xPf96oRZYOdf5w/NUCFfrVzIojdvt6cuD50hbbNNCcQ2mTBQpsUJwv
qLuzl+5VExImzRHQYwag2qib78FxZSxDgBTZWZa1RoLu2b889WNl1qI+wh6y9jGf
oVo7PvkMtok/9Ju2Qt8EssoE1amK7sk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:02:03 2025 by rpki-client