Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/cf7480b3-10dc-3490-bf3a-db5619371838.roa
File:                     cf7480b3-10dc-3490-bf3a-db5619371838.roa (raw, json)
Hash identifier:          7PYpk5OCnYC8iMHgJGMOY+rfA+N4259BsIcD/unTYuY=
Subject key identifier:   86:F5:63:11:78:3A:16:A5:F5:B7:55:DE:4A:04:24:09:B0:B8:1A:80
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584B6A61DFB63D816E861D3D5BA0
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/cf7480b3-10dc-3490-bf3a-db5619371838.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     401307
IP address blocks:        136.228.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:df:b6:3d:81:6e:86:1d:3d:5b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=fa0d161d-866e-4111-8150-f83a2381e728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:4e:3f:36:16:93:b8:93:51:8f:28:a2:0b:
                    87:c1:c2:22:51:3f:a3:a3:43:f0:17:1f:cc:ff:8d:
                    ff:6d:f1:a3:93:9c:7d:ba:64:aa:e6:a0:4e:d5:9f:
                    c0:57:a1:be:89:59:fc:e4:06:e5:6a:c7:51:68:e7:
                    03:a6:43:08:4c:c0:a1:0d:1a:f3:a1:50:fe:e4:f2:
                    fb:8b:66:78:29:71:08:5d:20:d7:66:44:22:a5:c7:
                    05:6b:15:f1:f1:83:e8:da:a4:c2:01:0e:15:7f:a8:
                    59:30:f0:e2:81:c0:f4:92:1e:47:c1:a5:68:92:49:
                    8d:e6:36:a4:05:7c:70:7b:e3:b2:a6:a2:10:36:a9:
                    7d:e2:f6:95:34:62:30:13:c6:68:2d:63:61:90:16:
                    0a:fd:06:8f:6e:65:b1:c1:d4:52:16:5e:62:c8:85:
                    26:09:96:d6:fb:52:d9:c0:51:f2:6c:4d:4d:b7:53:
                    5a:8a:15:aa:25:d9:6b:2a:37:b7:ad:1c:c4:b0:63:
                    85:c6:52:43:36:92:de:b1:d1:ea:53:76:6c:7e:69:
                    20:f3:17:e5:b1:5e:14:73:37:ea:87:8f:89:55:20:
                    79:a9:7f:f9:01:05:2b:a9:e2:a0:67:4b:a8:f3:a7:
                    ce:a0:0a:18:79:fa:ab:fb:39:46:df:77:4b:fd:99:
                    b4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F5:63:11:78:3A:16:A5:F5:B7:55:DE:4A:04:24:09:B0:B8:1A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/cf7480b3-10dc-3490-bf3a-db5619371838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f6:27:22:71:19:6a:bd:2d:42:58:ad:9b:7d:d8:41:d8:c0:
         eb:c9:d1:98:1a:4b:f6:a7:37:c4:c8:6c:f2:63:e5:65:99:b3:
         e7:36:31:9a:c9:c8:3b:31:0d:0a:a1:90:bc:a2:e7:92:67:c6:
         c3:b0:18:c6:e9:87:00:32:ed:5b:bf:1a:91:10:b8:fb:28:06:
         c7:9d:d5:cc:18:42:13:57:4c:ce:b3:4c:fa:d8:95:ac:2a:9b:
         8e:ce:2b:01:3c:b2:57:3b:53:2b:86:d0:fa:2b:88:1a:cd:47:
         d1:83:09:c0:3c:c8:bd:09:8a:a1:ef:84:f4:77:d9:51:ce:b9:
         e3:21:f0:fa:d0:f0:8e:1c:9d:38:14:0d:f5:1a:95:82:9a:a8:
         3a:fc:3b:71:73:7e:9b:92:3c:ae:4a:92:e1:1a:90:2d:76:f3:
         62:99:eb:7a:54:ae:2c:bb:2b:b9:27:46:8e:c2:30:26:d2:fc:
         8d:25:f3:31:33:63:48:89:58:db:f2:7b:bf:07:71:5c:b6:8b:
         67:d2:7e:ab:e6:cf:43:ad:d6:36:a3:31:0b:96:4f:f2:d8:34:
         af:bb:6b:b0:75:0d:55:8b:a0:4c:6c:ab:90:e6:ac:97:b3:4f:
         78:33:60:92:be:4f:10:64:17:1d:0a:fb:dc:71:76:36:31:e7:
         c8:d2:2e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:37:14 2025 by rpki-client