Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/cc7d01c9-827b-307e-8d2d-9acee59d91cd.roa
File:                     cc7d01c9-827b-307e-8d2d-9acee59d91cd.roa (raw, json)
Hash identifier:          pWzWkbh+aRzPVGs5u31NDbWwbDzCVVGUA2SecL6+sc4=
Subject key identifier:   8A:1F:66:BF:C8:F2:39:E8:85:06:52:70:FE:16:C7:4D:8E:68:F3:AF
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584B6631EE3A428D288A3373EFF0
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/cc7d01c9-827b-307e-8d2d-9acee59d91cd.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     401307
IP address blocks:        136.228.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:ee:3a:42:8d:28:8a:33:73:ef:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=9e4a8a8d-6c91-4a76-947c-356b95eebf63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:25:bc:ef:d0:ce:dc:bd:29:31:16:96:68:
                    69:82:f8:60:bc:9a:d2:76:92:e2:d1:b2:01:b5:45:
                    58:c1:99:7e:d0:fe:d8:f5:9f:06:06:57:93:a6:3a:
                    5e:e1:1a:89:30:78:56:e4:6b:5c:19:92:27:d0:74:
                    d5:81:8e:3e:9c:a5:30:6c:fa:3d:0e:86:77:a7:30:
                    69:5f:ad:82:f4:eb:51:36:71:bc:44:79:04:8f:86:
                    a7:27:64:fb:ef:d5:5f:79:40:59:62:20:5e:86:39:
                    db:99:35:73:d0:0e:22:c8:28:ed:6b:70:53:b3:2d:
                    a0:6c:74:48:c8:41:0f:8f:68:ce:3f:e7:3f:26:32:
                    3e:0d:5e:1e:11:a9:e7:39:08:68:f5:67:17:05:77:
                    b2:76:1f:5c:13:81:6a:bf:9d:ba:10:33:a3:5d:b9:
                    ee:a9:66:4d:6f:dc:90:30:7e:6f:26:03:be:f4:58:
                    30:af:f1:63:32:e7:f8:ff:71:e2:bb:c9:49:5d:41:
                    17:74:49:3f:39:11:08:8b:e3:35:1e:40:0a:df:d5:
                    92:87:e2:5d:2d:47:bd:14:cf:43:46:a0:58:af:6e:
                    2c:2f:58:94:49:ff:2d:8b:31:9d:22:ef:45:2d:30:
                    7b:08:d7:86:26:18:0e:35:8e:d9:4d:0a:da:36:da:
                    c5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1F:66:BF:C8:F2:39:E8:85:06:52:70:FE:16:C7:4D:8E:68:F3:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/cc7d01c9-827b-307e-8d2d-9acee59d91cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e5:b9:f6:83:ca:ac:83:3e:28:2e:3d:5d:c2:e2:16:f5:14:
         8d:1e:c5:77:22:09:6d:54:9b:b9:a7:47:e7:17:1f:a2:a2:85:
         16:49:9b:74:61:b9:8f:d2:20:1c:5b:e3:5e:30:dc:0c:91:0d:
         5d:76:58:37:77:4d:7e:ec:71:99:7b:76:6d:42:81:bb:db:41:
         43:a9:4a:91:74:24:1c:77:25:75:62:bf:6a:f1:6d:d9:1d:5a:
         75:14:60:f4:68:c3:3c:9a:3b:f5:6f:60:07:45:dc:84:6e:2c:
         f1:d2:08:cf:f9:1e:5b:92:d6:a2:77:7c:cd:1c:6a:8d:6b:14:
         d7:08:1a:2b:ed:fe:10:5e:aa:db:c0:78:83:97:a7:e9:f6:d4:
         23:7e:56:f0:04:45:ac:48:3c:8f:4d:84:ea:8b:02:50:8b:8f:
         c9:8a:61:78:bf:8b:9d:01:21:6b:0f:e5:aa:ad:1c:37:53:8c:
         d4:c4:f4:97:92:dd:5e:09:64:0a:10:f7:c4:c9:ec:d7:14:1e:
         7c:cc:03:01:25:85:3d:29:c6:f1:18:77:ee:4b:a8:8b:6b:6c:
         49:2d:19:83:e6:04:c8:ee:b4:ef:96:55:18:8e:96:31:66:fe:
         8e:29:b8:57:c2:4c:93:e0:07:09:51:63:6b:61:72:d7:dd:5b:
         f8:e1:fc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:39:54 2025 by rpki-client