Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/ce598923-679e-3594-b4f6-b7a9b100bcab.roa
File:                     ce598923-679e-3594-b4f6-b7a9b100bcab.roa (raw, json)
Hash identifier:          +8EgWu94gWYMi90HbTdk8PrfgScjSsv6mM62Doi9xtI=
Subject key identifier:   BD:0C:F7:86:DD:82:21:F1:37:FC:C9:2A:F4:EB:D0:F9:CD:1E:AC:5F
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584B6A61DFA11B034912DAC3ECC0
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/ce598923-679e-3594-b4f6-b7a9b100bcab.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     399363
IP address blocks:        136.228.34.0/23 maxlen: 24
                          136.228.59.0/24 maxlen: 24
                          136.228.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:df:a1:1b:03:49:12:da:c3:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=f1c14921-5ed8-4792-b576-58919ba0e1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:16:ea:62:40:e9:79:cc:de:c1:70:9a:df:
                    3b:c0:7c:16:2a:43:0d:56:26:7b:ca:20:b2:c4:95:
                    dc:ac:2a:6f:6e:67:29:a7:71:35:db:f6:3e:c8:d4:
                    a3:c5:ae:c2:68:3d:51:8d:00:39:38:31:c2:42:cc:
                    9c:44:a9:4e:f8:e8:85:c4:68:14:83:d2:b0:13:41:
                    6a:9c:8e:39:4a:f0:d0:82:17:4c:df:d3:4f:38:c4:
                    04:79:e7:88:09:b0:0a:a2:b7:e7:a3:08:6d:b3:39:
                    83:68:55:f7:79:eb:0c:42:07:47:11:df:49:c7:9f:
                    50:51:84:09:45:7a:5b:68:3a:27:12:32:e2:ed:25:
                    65:10:c5:ec:14:74:db:bb:6d:02:f1:46:62:72:71:
                    28:7f:b7:02:84:3e:7e:0e:25:e0:49:b6:d0:36:9d:
                    28:21:52:d6:67:b6:3d:9b:70:6b:2e:55:b8:d7:e0:
                    67:5f:bf:31:d9:17:7f:c6:33:6b:8b:f9:14:a9:f8:
                    d2:6a:02:32:99:e3:73:d8:2e:40:8b:64:09:ac:7d:
                    7d:da:1d:dc:34:ef:d2:03:49:eb:4e:04:c2:1d:7f:
                    16:d3:16:f8:d3:d7:c1:10:c9:95:a7:7f:ea:ee:9c:
                    c6:f5:e5:d8:40:6b:02:30:e6:e0:7f:f8:2a:3b:d3:
                    6a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0C:F7:86:DD:82:21:F1:37:FC:C9:2A:F4:EB:D0:F9:CD:1E:AC:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/ce598923-679e-3594-b4f6-b7a9b100bcab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.34.0/23
                  136.228.59.0/24
                  136.228.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:64:71:7e:a2:87:50:71:9f:25:9d:6b:5f:f2:28:ed:db:65:
         1c:82:48:34:0f:89:0e:8e:82:f8:50:39:32:82:60:62:25:d3:
         31:6a:e2:1d:ec:fe:2c:f3:20:b2:18:ba:45:56:a1:4f:63:96:
         4a:87:34:eb:86:81:3d:72:72:4e:7b:ae:2c:5a:20:02:dd:2b:
         fd:3a:43:47:31:93:55:6a:e1:80:65:d4:3e:23:71:bf:16:29:
         f2:93:de:f7:b2:9d:22:36:5e:7e:8f:e6:40:9e:db:e3:29:45:
         52:cf:a0:7c:28:81:b2:8b:9d:7d:50:3f:2c:f7:5f:fb:6a:2a:
         6f:3b:b7:58:bc:9e:0c:65:0b:70:7e:9f:97:88:cd:2a:52:42:
         1b:d0:ee:27:8c:e5:ef:5f:4c:18:95:80:9d:5e:85:11:25:9d:
         f3:af:80:e2:92:2f:35:45:e6:8d:ba:86:4d:3e:ef:d1:ad:91:
         a6:14:07:99:86:ae:9e:ae:59:03:14:8f:e9:1c:d2:b4:13:a3:
         b4:75:86:ad:b9:79:48:26:64:9e:a2:92:04:14:b5:19:af:28:
         63:fa:84:35:7d:57:10:f4:a9:bb:d1:5c:ba:e5:39:34:3e:a6:
         d2:4d:dc:92:ee:42:78:30:f9:f8:3b:9a:2b:53:b3:74:db:ce:
         e7:e6:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:37:11 2025 by rpki-client