Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ad905813-84eb-3a88-add4-dbaf125aa1f1.roa
File:                     ad905813-84eb-3a88-add4-dbaf125aa1f1.roa (raw, json)
Hash identifier:          bM8mD4aGBrFFMXPwqFmIaYJW3Ae4oasN1nSQG70573Q=
Subject key identifier:   DE:99:16:B5:67:4F:1A:16:10:D0:60:D6:79:97:B3:51:AC:52:8B:30
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584E059C4A551F82B73494AE8100
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ad905813-84eb-3a88-add4-dbaf125aa1f1.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.23.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:4a:55:1f:82:b7:34:94:ae:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=aeff6ee1-7644-4b3c-9e9c-46bd4619ed77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:60:30:d4:72:13:a9:f6:62:ce:73:d1:49:13:
                    46:20:10:16:b9:be:b4:2f:dc:47:0d:74:08:96:03:
                    35:7c:c1:12:38:56:9e:4b:7b:33:bd:57:36:06:ab:
                    aa:98:7b:3e:1d:1a:b6:01:1c:4c:eb:50:54:08:00:
                    e2:3a:3b:2c:77:f6:45:6b:9f:91:59:4a:47:ad:60:
                    0e:ec:50:36:92:d7:f9:83:ac:d5:86:0a:c7:96:92:
                    b1:96:06:0d:df:98:c1:c6:db:0a:1a:7b:47:3e:64:
                    13:e3:43:44:ce:ca:d2:63:7f:59:a1:7e:33:7b:ac:
                    72:e4:1e:48:11:29:13:54:b8:1c:68:4c:d5:53:35:
                    ae:58:8e:38:cd:03:74:3d:f8:60:a6:6c:01:12:e3:
                    ca:c1:e5:8a:cb:6a:69:09:80:53:80:8b:28:ee:20:
                    0e:53:b0:bb:5f:be:86:9b:7c:ce:93:ac:a0:2e:da:
                    6c:80:e3:b2:87:9d:d7:83:ce:7f:f1:57:62:33:6d:
                    f3:e4:7f:e8:76:19:f3:c0:da:b5:54:48:13:37:d4:
                    0c:7d:e5:12:a4:90:e2:0b:05:0f:7f:83:09:7c:8e:
                    40:31:36:fd:e7:05:c9:e3:74:be:6e:91:87:60:b2:
                    83:58:2b:04:12:5a:3a:94:78:19:57:89:0b:82:89:
                    30:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:99:16:B5:67:4F:1A:16:10:D0:60:D6:79:97:B3:51:AC:52:8B:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ad905813-84eb-3a88-add4-dbaf125aa1f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:e3:f5:06:d9:dc:77:3d:73:1e:3f:3c:36:e1:5a:48:24:b5:
         a3:5f:ea:ce:31:d9:b6:39:4c:44:62:ad:03:ab:b0:3a:a0:c7:
         77:18:a0:31:d4:c9:8b:8d:e0:83:41:2a:93:ed:be:be:6f:72:
         0b:e3:7e:d2:a0:56:0f:3f:61:f0:45:69:d5:26:28:05:bf:c9:
         d9:5d:ac:67:18:bf:f1:e9:04:48:0f:33:f5:d3:85:4e:cc:b2:
         1c:e8:88:e8:a2:e4:21:d9:26:d6:4b:b4:a8:fe:34:d6:04:b6:
         79:a3:8f:2e:b3:b0:8a:92:0c:34:3c:a6:7a:ba:49:07:d4:70:
         8e:f8:eb:04:1d:2c:e7:36:21:78:56:3a:9f:98:5d:b2:4d:1a:
         29:dc:3a:e3:f0:15:d6:fd:d0:4f:09:84:23:d8:1e:de:3c:5c:
         ce:d8:ac:40:9f:03:8e:88:ea:d9:af:44:70:76:b2:65:07:1d:
         c5:fa:4e:f4:96:12:b0:8f:f1:6e:d7:8f:7c:39:69:b6:3a:26:
         44:6b:1c:b0:4c:98:92:74:d1:3c:d2:c2:af:3b:53:4d:ed:c9:
         79:96:d9:f0:72:59:2c:13:d2:12:02:60:83:42:94:93:35:46:
         28:a3:42:ea:21:d9:81:3e:26:4e:82:08:8a:56:66:a3:ff:2a:
         de:28:16:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:40:11 2026 by rpki-client