Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0b94d7d7-8a69-3b0d-998f-e45bcbe92933.roa
File:                     0b94d7d7-8a69-3b0d-998f-e45bcbe92933.roa (raw, json)
Hash identifier:          oNN8JV3BUm/8izCcJKv+0u7sRf7XQliGInAOs1I8Bm8=
Subject key identifier:   E1:9A:66:F3:02:21:40:DB:FC:BB:92:FB:41:87:F1:2E:CC:D8:92:39
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584B64CE179F5FC4D05044D8C540
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0b94d7d7-8a69-3b0d-998f-e45bcbe92933.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.23.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:17:9f:5f:c4:d0:50:44:d8:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=db146311-67af-4473-85b2-ee55351d4bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e3:d4:1d:ef:a0:52:4b:be:2e:8a:13:f0:91:
                    a6:f1:83:67:7a:5b:f0:e0:05:33:8b:64:ce:1b:c1:
                    f1:0d:dc:17:74:87:fb:49:93:9b:5e:85:d0:f5:85:
                    a8:0f:8a:9b:1b:44:78:a9:48:42:2e:7b:f5:b0:a7:
                    4b:43:a9:7c:a0:2a:39:d3:74:3d:88:71:59:9f:25:
                    c6:ab:44:e2:78:dd:43:9b:36:6a:e3:0b:0d:9c:bd:
                    dc:de:60:d2:61:36:02:e6:e4:05:f3:35:80:d1:a4:
                    a8:92:5a:bc:59:c6:56:a0:81:84:a9:1c:45:6b:1a:
                    18:0b:1b:e3:7d:44:43:9f:fe:2a:84:7c:13:c2:ff:
                    e2:30:de:ad:a6:82:cb:f9:6b:4f:fc:86:52:1f:a5:
                    9b:65:8f:50:1e:02:4b:83:67:12:a7:8f:04:7a:87:
                    d0:b9:f2:59:d7:09:5d:22:5b:37:d9:ea:15:c9:9c:
                    03:a5:c4:05:f9:b1:96:ed:d6:61:86:77:cb:a8:09:
                    71:b4:5c:44:0c:b2:4e:2a:60:ab:23:e5:b0:87:f8:
                    da:48:3b:6c:77:4a:aa:e1:a2:bb:53:ca:57:2a:e2:
                    4e:44:ea:57:4f:9d:f8:e3:0a:8a:95:a6:0f:7e:e3:
                    96:41:ce:49:b0:7e:a0:5c:20:bc:86:de:a3:b5:bc:
                    63:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9A:66:F3:02:21:40:DB:FC:BB:92:FB:41:87:F1:2E:CC:D8:92:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0b94d7d7-8a69-3b0d-998f-e45bcbe92933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:a0:dc:7a:a8:af:77:f8:01:99:ae:fa:fe:82:2c:d3:b4:10:
         a3:8b:fd:d1:aa:f0:c4:20:ff:7f:ef:a9:d7:fc:30:00:ea:71:
         e6:24:2f:7b:89:e2:59:8b:cc:ff:86:be:9d:e1:c9:8c:c5:1e:
         35:90:46:a6:5d:f3:f5:07:4d:db:9b:e9:29:9b:9f:9f:5b:50:
         f4:dd:46:01:da:3f:01:fe:9a:9c:f4:a4:ac:25:8d:cc:ed:dd:
         ab:f7:64:1a:63:5e:0b:93:31:9e:f6:e7:a4:29:a0:f5:c3:76:
         1d:38:d2:0b:01:6a:ca:47:14:ae:ce:1c:60:20:66:2b:36:69:
         44:0c:a5:ad:b6:09:d5:c2:a6:9e:17:14:d2:7c:c7:03:c3:60:
         04:f0:31:e7:af:7a:a3:5c:0c:2a:71:a6:98:a5:b7:3c:c7:95:
         4d:33:3d:86:74:3a:41:b2:8b:2c:4f:6e:80:9c:d4:45:94:42:
         9f:d8:49:e6:d8:7c:39:95:bc:98:52:c1:ae:f9:87:7e:b8:3f:
         60:6f:c7:52:c5:70:3f:09:e1:86:f0:f1:b3:53:c0:e9:55:83:
         37:8d:7f:71:7e:f4:c1:ab:ec:39:c6:60:d5:36:2b:ab:d9:f0:
         7e:45:86:03:21:fd:bb:17:ad:e3:43:ec:d4:34:e4:05:12:86:
         13:85:7e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:11:06 2025 by rpki-client