Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e8f1b4e3-de81-3c21-ac96-804b3dd64682.roa
File:                     e8f1b4e3-de81-3c21-ac96-804b3dd64682.roa (raw, json)
Hash identifier:          jrFDc+bVOCqHTqkiW7SZc3i4kBE++/Wjhe+Q+kg4DRQ=
Subject key identifier:   66:6B:53:AC:B2:84:8E:1D:10:DC:37:8A:C3:89:47:03:7C:99:8B:0D
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A8411894EA0CF702D00A2E100
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e8f1b4e3-de81-3c21-ac96-804b3dd64682.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.23.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:89:4e:a0:cf:70:2d:00:a2:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4e29ca19-5135-425f-9a97-9a59c4d57ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:03:f9:7e:2d:69:66:a5:5a:00:50:03:ac:5c:
                    bd:38:1e:f7:45:c4:06:45:48:60:ee:9a:c1:37:ed:
                    d4:7b:ac:a2:c8:ad:aa:e0:b6:7d:e3:85:cf:01:f3:
                    0a:b7:6e:d5:ca:e8:37:47:09:9d:0d:cf:eb:e4:19:
                    40:4d:d6:65:7b:19:41:c1:a5:10:e5:c8:11:ca:95:
                    3b:b0:9c:d7:87:1b:d1:ae:62:3e:f3:a4:c9:a4:6e:
                    40:f2:e9:0d:4b:f8:60:db:12:1d:bb:17:2e:37:ba:
                    dc:da:46:40:fc:3c:0d:15:2b:7c:46:4e:80:23:8c:
                    81:3f:e5:35:53:a2:0e:78:0f:d8:c1:ef:2c:a1:9a:
                    c4:ac:69:4a:6e:e9:2a:df:d2:1e:28:c1:8d:48:ae:
                    d5:fd:29:00:fd:17:59:83:f4:c5:25:1c:71:b7:42:
                    45:ac:37:f4:fc:11:5c:8d:7d:0f:6b:ae:4b:2c:02:
                    2b:44:3a:5e:6b:cf:b3:82:22:16:b3:f2:2d:5f:27:
                    eb:d9:af:7f:94:65:0e:1d:77:89:35:cd:f2:0c:4d:
                    43:38:8d:bb:27:8b:20:12:3b:39:e5:94:70:ad:fb:
                    9c:f4:36:cb:01:83:3c:f7:b5:b5:df:ee:fd:21:60:
                    b3:cd:c7:26:2a:46:ff:99:3a:48:c1:b4:7f:58:00:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6B:53:AC:B2:84:8E:1D:10:DC:37:8A:C3:89:47:03:7C:99:8B:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e8f1b4e3-de81-3c21-ac96-804b3dd64682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:cb:5c:a2:f6:c1:0e:6c:47:8f:1d:16:75:b3:1a:a0:03:43:
         d1:4c:33:f3:ef:61:75:a2:a7:d8:5a:64:f9:16:cc:5e:07:51:
         ef:af:04:8c:c3:97:9f:d5:19:2f:cd:e9:99:cd:61:f2:bd:c4:
         45:b1:01:12:1b:02:76:5e:eb:43:e4:42:aa:f6:43:7b:f6:03:
         8a:ff:37:41:45:25:95:cf:38:ed:a1:19:7f:16:a3:8d:72:33:
         5b:a1:77:1b:7e:41:64:3e:14:bc:22:9b:fc:46:02:23:1e:c2:
         6f:c1:96:0f:d7:8f:bb:d4:2a:a2:ac:78:78:42:93:b9:b1:71:
         55:99:6f:68:df:5a:a5:9c:ae:da:fc:14:9b:9d:6c:e6:cc:ed:
         f9:a4:80:7c:35:1f:34:3f:f4:b1:d9:e2:5d:54:5c:d2:d4:11:
         c1:95:82:38:af:b2:92:80:18:97:13:54:90:85:dd:30:8c:75:
         c8:d0:06:43:53:20:25:3a:09:4d:b2:07:66:ac:cb:58:5e:f4:
         e5:5c:bc:7e:4b:26:3d:cd:d7:df:ee:e4:3d:e2:40:50:f2:d2:
         48:f7:83:28:b0:be:7a:6f:0a:ed:e8:93:d4:bf:dd:e9:f2:20:
         24:ec:c4:31:1e:b6:17:90:aa:44:74:4c:9d:77:b9:61:5f:9e:
         51:c6:18:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:38:20 2025 by rpki-client