Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/af9729bf-46ca-3260-8318-5dfc2a40835b.roa
File:                     af9729bf-46ca-3260-8318-5dfc2a40835b.roa (raw, json)
Hash identifier:          HYt0mKzkdYSsu5ftyWwpaspUABwpJDVglqZrj1tDu6A=
Subject key identifier:   00:E4:10:57:A7:53:17:88:C6:3E:1C:B1:B9:00:9B:7D:A7:DC:27:6F
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A841229F62C6348E72C170900
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/af9729bf-46ca-3260-8318-5dfc2a40835b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.23.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:29:f6:2c:63:48:e7:2c:17:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e40506ff-a879-4049-8ff7-1a6fa0a23147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:cb:b7:72:c0:13:88:4c:14:06:8f:60:c0:
                    91:91:71:c2:d6:03:64:6c:4f:12:01:e3:01:e0:f2:
                    05:59:ad:44:0e:0b:7d:9d:d7:d8:cd:71:73:c4:60:
                    79:51:34:37:b4:4c:0f:1b:02:41:05:22:dd:ea:12:
                    df:3e:52:92:85:0a:f1:f5:f4:ff:a4:94:43:3c:7e:
                    33:29:0e:18:97:5a:7e:d2:91:b6:76:01:56:cc:ce:
                    d9:48:f3:f7:56:63:ca:e1:b5:04:5f:bf:2d:95:7a:
                    61:c0:8e:a6:c4:2a:00:e4:90:17:53:e3:d2:28:91:
                    a2:af:dd:af:2b:e5:50:2e:3c:15:28:41:ae:92:16:
                    27:1c:9e:d8:91:da:87:d5:bf:76:f0:44:22:e5:19:
                    a5:5e:c7:32:36:d8:d1:c5:cd:a6:8b:68:ef:7a:a6:
                    77:9f:6a:5b:a2:09:3d:34:77:1d:4d:9b:56:de:d4:
                    28:12:63:45:73:eb:27:42:c3:84:8d:7a:35:23:3a:
                    6a:9b:0c:94:3f:57:a5:52:1f:78:cc:67:97:30:b2:
                    e5:ef:74:e9:12:f8:f9:c8:cc:7c:9a:50:aa:8e:ae:
                    59:e2:ba:ee:7d:c1:44:25:6f:25:f4:5f:49:41:64:
                    e4:89:38:6f:5a:4d:9f:28:48:40:9e:14:63:02:fb:
                    17:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E4:10:57:A7:53:17:88:C6:3E:1C:B1:B9:00:9B:7D:A7:DC:27:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/af9729bf-46ca-3260-8318-5dfc2a40835b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:64:94:10:99:66:25:d2:ad:ee:21:a6:91:9e:88:40:c5:64:
         45:0b:2c:ea:dc:80:03:a8:40:b8:ac:28:97:70:a5:0a:db:25:
         bd:dd:c6:ea:7f:2f:51:c5:37:c8:38:2d:8e:ae:0e:2f:ff:55:
         c2:c9:a5:16:ad:1f:3c:53:b7:a7:a8:2e:6d:12:48:22:4b:31:
         56:f9:01:3a:fd:e1:ce:05:df:7c:5e:c6:d3:40:1c:6c:0f:e2:
         2b:67:0b:ae:43:02:0e:38:f6:4f:a4:a3:7e:c8:75:49:8d:e1:
         6b:c1:c4:38:4f:5f:4b:83:73:7a:24:33:4a:58:d0:6d:a5:3b:
         47:d9:df:05:53:de:ba:b8:e4:aa:92:db:8d:2f:1b:ac:c0:33:
         a3:8f:7f:3c:54:64:5d:72:3a:72:87:4c:c4:72:bd:a8:2b:0c:
         6d:14:72:b8:b8:67:40:da:89:dc:05:bd:af:06:96:2d:47:6d:
         69:58:b6:c9:8e:dd:ec:13:e3:66:08:82:9f:39:2e:66:ec:1b:
         12:18:0d:7f:e2:da:41:db:3c:b8:68:23:86:8d:cd:0c:6e:f3:
         d0:0d:13:57:9d:e0:19:b9:7e:dc:89:e8:4b:db:e7:d9:1a:ad:
         b5:e0:da:ea:19:72:23:be:8c:ec:5a:48:a8:2e:3b:76:7a:5e:
         be:68:26:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:16:52 2025 by rpki-client