Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa
File:                     df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa (raw, json)
Hash identifier:          qCysGMVBAFE2AuFDROArl4LvKl17JX0R/6SDeXmOYck=
Subject key identifier:   AE:99:6A:DC:37:FD:B8:ED:B5:B3:0D:B0:1F:B9:94:29:AB:0C:34:DF
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584B6631EE4D44AB85450270C780
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     401307
IP address blocks:        136.228.47.0/24 maxlen: 24
                          136.228.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:ee:4d:44:ab:85:45:02:70:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=9d6abfdf-e692-4e2d-aa0f-5c96677d68bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:3d:3a:ed:6d:c0:68:b2:52:c9:cb:59:03:
                    1a:dc:c3:74:64:4e:b8:53:72:27:fc:17:16:39:89:
                    c9:ee:e6:24:4d:c0:0e:4d:f0:6d:d3:d8:9e:a1:03:
                    cc:0d:7b:aa:e6:52:62:08:00:be:25:47:d4:02:55:
                    40:3f:73:45:9d:59:9a:c2:de:b7:2a:b8:13:57:0a:
                    d3:c3:f7:ee:8a:f7:4a:d5:e6:91:82:fc:59:63:35:
                    d4:17:8b:90:34:08:1e:cf:6a:4f:5d:4b:d0:80:b8:
                    d1:07:cd:7b:ad:06:d3:77:d7:dd:33:81:a9:7f:37:
                    9f:45:c1:64:85:7f:56:54:37:fa:d6:32:69:b6:0a:
                    ac:d8:fc:45:ec:28:47:98:8d:43:6a:38:81:65:ad:
                    9d:35:5c:b3:ab:1b:c6:2a:bf:69:5b:29:b3:23:54:
                    72:57:9c:32:97:6e:ad:13:b3:0d:0b:67:45:87:c8:
                    c0:05:d5:c4:1f:87:1e:95:d0:e7:b6:d8:2d:90:84:
                    5f:85:a3:17:19:67:47:81:0e:f6:13:bc:70:13:f2:
                    7a:fa:9f:ec:74:ca:35:22:70:29:c4:a1:2b:9f:90:
                    e1:ea:c2:d0:68:66:90:aa:52:8b:54:50:a4:f8:0d:
                    30:86:e6:2c:72:ee:42:51:58:16:23:d1:ea:1f:48:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:99:6A:DC:37:FD:B8:ED:B5:B3:0D:B0:1F:B9:94:29:AB:0C:34:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.47.0/24
                  136.228.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:79:62:5c:1c:e2:48:e9:64:fa:5b:95:19:86:4f:53:20:f1:
         86:bb:da:78:a7:85:40:5e:8a:98:fa:dd:38:f5:af:e8:0c:f3:
         bb:02:a8:19:5d:ac:17:51:5b:9e:57:5a:87:27:b0:f6:ea:21:
         c0:57:02:b7:fc:bc:86:1e:8f:69:67:b1:db:df:06:35:1a:b6:
         d4:f3:04:ee:5f:81:33:1d:b6:ae:97:cd:01:7d:51:ff:de:83:
         8e:73:26:60:8b:80:49:b8:6b:1d:88:6e:40:64:fa:77:7f:1f:
         f9:cf:15:04:0a:4f:2a:b7:6f:59:52:69:cd:ba:32:6a:00:69:
         5a:5a:2d:aa:7b:5c:16:cb:7d:a8:92:cd:b6:07:b2:65:c1:5b:
         0d:e3:39:f1:aa:09:13:77:e0:f2:a2:aa:23:54:6c:3c:f4:bb:
         bf:15:2a:1d:49:0d:9d:42:d0:bd:cb:31:7b:30:07:52:ab:81:
         6c:05:66:35:e7:60:05:67:15:ce:d0:2c:cd:1a:88:bc:5a:91:
         20:e3:cd:19:86:b5:1b:8b:ba:11:5c:6d:36:55:ec:cf:8f:f6:
         6e:15:6d:7e:38:db:30:dc:6c:92:90:cd:8f:27:cd:13:83:9e:
         eb:fa:ec:65:0f:3e:73:d9:5b:a0:f3:57:86:fa:f4:ce:da:a7:
         bc:be:54:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:39:49 2025 by rpki-client