Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1296611f-35e4-3dc6-b8f6-4780285a5dca.roa
File:                     1296611f-35e4-3dc6-b8f6-4780285a5dca.roa (raw, json)
Hash identifier:          WzFgPJvMzoIubqVTfdaPOrGtC+Sl/FW7jRLalwYOunc=
Subject key identifier:   89:01:B8:0C:CE:E6:48:8C:30:25:33:22:D3:1F:08:40:75:C4:E3:DD
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584B64CE1C195D1BFE496AA2F400
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1296611f-35e4-3dc6-b8f6-4780285a5dca.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.23.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:1c:19:5d:1b:fe:49:6a:a2:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=07225e45-87dd-4fb4-bf09-1b76153b7a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:ca:07:db:d4:64:5c:1e:7a:e2:16:16:81:
                    db:05:f3:84:d9:a3:68:49:90:1e:a5:de:d4:2d:f5:
                    9f:e0:48:40:bb:3b:69:91:66:e3:a2:c6:8c:b2:64:
                    f5:e7:ca:7b:34:7f:c9:6f:c3:1c:ad:cd:9c:38:33:
                    a4:dc:66:49:95:a8:7f:f2:35:97:0a:9c:4a:40:99:
                    da:fd:ad:b9:ac:ac:42:6d:d3:52:c3:83:39:49:c2:
                    57:fb:9f:22:95:f2:06:83:f0:77:19:c4:fe:42:50:
                    be:a8:6a:b1:5d:34:6c:1e:98:86:35:7d:6b:d0:90:
                    73:d4:57:0b:be:67:a8:d3:8e:01:04:4e:0e:ec:b6:
                    71:6f:b2:3b:20:bc:94:2a:cd:19:d0:cf:a9:6b:4f:
                    14:f3:76:63:be:d2:81:fe:9e:0f:7d:20:78:9a:1c:
                    07:f6:27:a2:1c:7a:8f:99:82:c5:9f:7d:47:a9:03:
                    bf:1c:bb:9d:c1:45:89:df:6b:2f:35:8b:57:bc:ce:
                    2c:ef:8c:ee:88:6b:73:ca:3b:75:8a:30:2c:07:6a:
                    cc:56:f5:2f:29:5c:6a:f6:aa:ba:32:7b:d6:57:69:
                    0b:da:a9:6c:ca:94:44:07:c6:28:97:4d:49:fa:79:
                    5b:30:53:27:46:77:56:f7:51:a3:1c:72:9e:5b:b3:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:01:B8:0C:CE:E6:48:8C:30:25:33:22:D3:1F:08:40:75:C4:E3:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1296611f-35e4-3dc6-b8f6-4780285a5dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:6e:62:0e:4a:dd:e0:30:98:10:25:c0:9b:7c:67:52:46:45:
         9e:19:ed:4d:13:83:a0:b8:42:71:df:1b:e1:42:60:cd:04:38:
         80:33:71:5b:f8:42:98:ac:aa:34:f8:27:42:7c:93:78:bf:97:
         7e:ce:ec:5e:ed:a3:1d:7f:57:28:6b:fd:b2:1b:ed:2b:63:1a:
         e2:f3:90:a6:ab:f9:03:3f:d2:d2:bf:6e:43:44:e4:bf:06:2f:
         ba:0a:7b:40:e0:a1:80:62:7c:13:13:97:45:5f:c8:b9:68:ce:
         de:61:c5:52:f6:15:ff:1a:3d:f2:97:47:42:b8:2d:60:6f:c0:
         27:fa:82:1f:38:62:14:88:72:d7:1d:b3:b5:1d:12:b2:87:ae:
         19:af:84:94:d9:a6:ad:f8:93:b0:69:fd:74:4b:95:40:2e:42:
         f2:f0:39:b4:77:29:78:41:15:98:2e:4f:be:37:d5:fd:d1:b3:
         49:08:0e:4d:bd:bd:31:24:d8:0f:42:72:f1:71:bd:0d:37:3a:
         d6:ca:8f:28:74:37:f6:10:07:c2:d1:e6:f4:d0:49:73:cf:33:
         34:22:06:59:ce:65:87:70:35:af:a5:7a:ee:0d:8a:37:6b:c6:
         61:a6:0b:9c:ac:b0:07:20:74:68:1f:46:1e:9f:2c:66:29:a8:
         45:7f:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:14:21 2025 by rpki-client