Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/118f5b01-7f55-3165-a8e4-3128d1f6327a.roa
File:                     118f5b01-7f55-3165-a8e4-3128d1f6327a.roa (raw, json)
Hash identifier:          8r/vfoWSCMuAJMGAsH6y4cb7KzW+GWlgoeThfx3anTU=
Subject key identifier:   AB:3B:BB:73:8B:D7:AA:8E:25:93:BA:A0:CA:84:CF:3A:C5:2E:58:B7
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584B64CE1894EE90A2BBE5BE6340
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/118f5b01-7f55-3165-a8e4-3128d1f6327a.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.23.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:18:94:ee:90:a2:bb:e5:be:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=09d81aca-14a8-4733-b838-64ad32d3c0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c3:55:21:c9:9e:db:0d:f2:a9:a7:4b:12:0e:
                    eb:c8:a7:08:ee:1a:ad:21:3c:38:53:bb:36:3c:4b:
                    d9:9d:e9:f7:15:de:a1:af:19:5f:10:c8:5a:f7:ec:
                    03:6f:ad:f0:1e:35:ed:18:73:85:92:77:42:6a:d3:
                    8f:41:f7:fc:a9:5f:a8:a6:11:5c:73:a9:1a:06:53:
                    6c:9d:dd:cd:2e:cd:8d:b7:a3:ec:be:a1:23:af:d0:
                    ce:5f:62:36:6a:2a:b7:99:a5:f6:01:49:90:fb:9c:
                    75:f6:60:67:24:6d:8a:39:04:50:e3:ec:01:9b:25:
                    a9:66:b9:91:ba:11:de:e0:0c:15:3d:59:fa:08:2f:
                    6d:52:aa:67:9c:91:67:5c:37:c8:cd:9b:1d:f8:17:
                    bf:ae:82:bc:49:7f:c0:a3:3c:8a:de:f0:82:00:b0:
                    f5:d1:43:a8:27:af:f2:25:ef:ae:88:c1:10:43:36:
                    41:f4:ed:3a:91:a6:76:9d:0a:67:d8:c2:37:8d:6d:
                    4a:00:52:1e:64:df:8e:2e:63:c5:37:cc:77:59:5f:
                    1e:a5:90:44:df:8b:a9:b4:50:a4:3e:71:ca:55:23:
                    a2:10:5e:87:64:ca:7b:ba:24:50:83:5b:bc:f8:ab:
                    76:4f:55:2d:47:33:a2:a8:66:aa:3c:cb:97:0d:b4:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3B:BB:73:8B:D7:AA:8E:25:93:BA:A0:CA:84:CF:3A:C5:2E:58:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/118f5b01-7f55-3165-a8e4-3128d1f6327a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8c:d5:76:31:1b:e8:68:19:cf:70:90:2b:bd:2b:a2:e6:50:
         12:07:74:db:d6:72:98:e9:d3:39:27:67:10:86:0a:48:39:7c:
         e9:a2:49:65:a7:eb:6f:1a:46:8a:1d:d6:e8:e7:01:bd:65:37:
         22:56:c1:ce:11:74:68:d0:29:da:9c:d2:4d:15:42:06:2c:7e:
         2d:5a:85:7c:fc:9a:b8:03:6c:4f:40:e2:5b:97:c0:b4:68:58:
         8c:11:17:bc:7b:5a:42:d1:83:ef:41:9c:7a:3b:1e:f6:2a:6b:
         22:f5:f4:91:32:4f:b5:7c:9c:ae:fc:b9:a5:da:64:bf:6b:6d:
         18:52:b8:2e:df:b3:7c:3f:ea:d4:81:9f:79:b7:24:18:af:7f:
         d8:3d:18:03:8f:33:03:c0:a8:be:c0:bb:6f:ad:ca:ba:9b:53:
         b3:89:74:df:aa:26:0e:b5:53:74:81:99:73:67:75:ee:84:39:
         c9:e2:4d:83:d3:58:fc:9c:cf:95:22:95:5f:23:43:7a:38:55:
         ad:fe:79:13:63:80:f2:c2:8f:47:5c:74:f0:ab:23:52:6c:49:
         4e:3a:e8:f9:9c:34:da:3b:bf:43:ce:be:b7:c7:89:33:ab:4a:
         0f:97:44:2b:0a:32:62:d1:d3:b7:2e:e9:02:e4:97:7e:1a:fe:
         a0:38:93:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:11:33 2025 by rpki-client