Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e7cbfd79-6186-308c-ad94-2f84134ef321.roa
File:                     e7cbfd79-6186-308c-ad94-2f84134ef321.roa (raw, json)
Hash identifier:          ZqKgm2XrH5KUiK5hiau8jtjUCVQ06V16/xWlMDhea28=
Subject key identifier:   3E:9E:E3:2A:6F:EC:83:7F:FD:DD:16:AC:9C:32:20:E1:0B:05:62:F2
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A84123063727713A7546671A0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e7cbfd79-6186-308c-ad94-2f84134ef321.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.23.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:30:63:72:77:13:a7:54:66:71:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=46f1c891-d67b-4e01-8b80-4d7695a08ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:ae:53:cb:21:11:12:8c:13:19:4d:5e:dd:
                    16:3f:4a:e0:15:d0:4a:84:c4:7c:0b:c8:d8:b2:36:
                    a4:e4:63:b2:c2:3c:5f:3d:1c:1e:6a:44:50:aa:dd:
                    e9:b0:ab:f3:3b:cc:c0:06:7f:a2:ab:0a:e9:d6:4c:
                    a2:09:9c:7a:6d:c5:87:6e:48:d2:4d:e6:70:65:f3:
                    40:28:2b:aa:d6:79:95:87:a8:49:5a:a0:31:51:89:
                    65:6e:17:c2:39:49:97:11:f1:b9:e9:89:1b:5a:ce:
                    f7:63:43:91:94:83:17:b3:32:56:0f:8c:1c:21:a7:
                    90:09:de:6f:8c:83:d9:75:b8:32:eb:a0:d2:8b:ff:
                    93:c0:f8:c6:77:bf:44:64:2a:70:83:8b:a7:b9:10:
                    ea:f7:44:88:1e:28:26:02:c9:42:ae:2c:01:fc:d2:
                    8d:4b:2f:78:96:5c:10:00:c8:e1:e3:54:65:cf:53:
                    6c:3d:e0:00:8f:a6:27:8f:f6:68:da:81:41:46:1a:
                    9f:16:ae:14:ff:2d:9b:14:56:10:34:a4:ba:37:e6:
                    4d:dd:78:7b:ca:b7:ae:6f:94:78:3d:b3:3a:05:0a:
                    75:e3:13:c7:e6:8f:b2:42:cc:88:c0:26:9d:37:c8:
                    fb:4b:f7:68:6f:1e:ea:30:13:67:e5:3f:28:15:b3:
                    d0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9E:E3:2A:6F:EC:83:7F:FD:DD:16:AC:9C:32:20:E1:0B:05:62:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e7cbfd79-6186-308c-ad94-2f84134ef321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:3f:b3:71:7d:a4:9f:00:0f:a8:04:d0:5b:e8:bd:87:3d:ee:
         f4:cf:4c:10:6e:d0:70:7c:52:58:28:2e:4a:07:9e:ac:58:70:
         e1:ee:4e:37:5b:11:11:ef:0d:05:5b:fe:b4:7f:6f:47:bc:93:
         57:87:a8:2a:a8:d5:6d:a3:67:c8:44:ce:e5:36:f0:23:8d:db:
         07:2d:ff:d5:11:1f:5c:55:a9:ba:40:17:af:04:77:c9:1a:76:
         ec:4e:77:ae:37:09:2a:b5:7e:ba:6d:48:bd:9a:13:d9:c0:ef:
         85:18:7b:55:22:64:9f:50:30:67:9c:f3:82:2b:25:9c:6e:96:
         04:cf:8d:11:c6:b8:e4:0e:6a:53:be:67:31:65:38:b1:10:08:
         e9:77:84:de:f2:65:58:bf:f2:c0:6c:11:d5:bf:81:40:c6:66:
         6c:c1:1d:7f:e0:8b:0b:a8:97:8b:99:f7:10:04:b0:5a:69:d1:
         64:97:68:db:39:18:d1:ac:7d:ca:9d:c0:bd:f2:80:7a:f2:ba:
         f5:77:66:b9:70:42:7b:1d:3b:06:bc:ff:4b:02:fa:28:ce:24:
         08:02:49:a7:08:97:67:70:43:0f:df:99:aa:55:8b:c1:3d:08:
         29:90:d7:04:01:e4:df:37:63:74:ed:66:14:76:1b:3d:c2:d8:
         f6:4e:d7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:21:46 2025 by rpki-client