Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d045909c-f696-3adb-860f-521055bc18ce.roa
File:                     d045909c-f696-3adb-860f-521055bc18ce.roa (raw, json)
Hash identifier:          Wywq19pmFz19nq1YRVfkRAoxewgBAzXMmdFub1xIScY=
Subject key identifier:   92:9F:58:42:A6:C1:40:A0:B8:C8:B3:89:6D:B7:80:3A:AB:F7:17:4D
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584B64CD5279C77D1FED7DA2C080
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d045909c-f696-3adb-860f-521055bc18ce.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.23.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:52:79:c7:7d:1f:ed:7d:a2:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=4203c910-db9b-4a30-9c65-2192a5de7196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:46:4f:f1:9e:7c:f3:88:99:11:11:3e:5d:9e:
                    9e:55:2a:da:11:0a:26:42:48:77:e5:ba:93:97:3c:
                    51:65:40:39:a4:a1:4f:2b:e6:f4:18:9f:23:09:23:
                    bb:13:c8:36:71:42:e8:eb:34:e2:e0:5d:82:2c:22:
                    6b:42:ba:be:f4:fc:d3:99:ae:44:23:f4:b6:76:b9:
                    e1:82:7e:0f:95:71:d3:46:7f:41:c8:82:51:14:d5:
                    bc:5a:6e:1c:5c:44:bf:a8:75:93:e5:86:9b:b7:d3:
                    37:34:91:97:56:73:12:0c:ca:f4:56:7c:d4:bf:4c:
                    87:00:29:ca:53:3a:11:2d:51:71:11:b5:53:14:61:
                    78:96:c0:54:0d:91:de:b3:36:01:65:f9:b6:c8:9e:
                    dd:58:09:a9:d0:67:c9:c3:2c:75:8b:a4:ae:3b:22:
                    20:11:3a:09:a4:01:fe:93:b5:cb:3c:22:60:ba:ff:
                    ea:1b:d3:4f:47:3d:1b:93:ac:58:25:b4:91:b4:66:
                    9f:c3:bc:a1:39:07:f5:7f:4b:73:ac:76:a0:6b:cf:
                    18:b7:6a:b2:3b:e4:dc:56:12:5b:30:21:34:cc:47:
                    77:71:95:74:ce:a8:34:9b:70:5a:18:8f:55:92:ff:
                    df:98:0c:25:de:99:2a:f3:cd:ba:c2:dd:86:88:42:
                    8f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9F:58:42:A6:C1:40:A0:B8:C8:B3:89:6D:B7:80:3A:AB:F7:17:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d045909c-f696-3adb-860f-521055bc18ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:97:18:f7:01:65:6e:88:c6:c9:fd:a9:14:93:68:f6:a0:22:
         cd:64:7a:18:02:11:16:ba:07:5c:f9:66:f8:00:a4:ab:14:e7:
         a4:f2:54:3d:45:76:6e:a4:06:0d:db:49:b4:9a:0f:fa:ac:86:
         1a:d1:cb:91:89:16:60:9a:f5:f6:8a:cd:19:43:ff:1b:8d:0c:
         33:d7:5f:19:ce:d1:c5:d4:6d:61:2b:28:f9:e9:c3:6b:74:2c:
         93:b2:bd:69:42:69:04:9f:56:17:92:23:ff:31:87:ba:43:53:
         5b:f2:0a:29:41:81:65:59:14:1c:aa:fc:3b:92:0f:e0:1b:44:
         23:f7:d7:48:df:47:80:75:a4:96:1f:b4:f7:6d:40:f3:93:8d:
         7b:c9:06:28:0a:eb:6d:7e:a7:75:a0:bd:e1:42:16:bd:8b:fa:
         37:78:a4:44:06:9f:ba:5a:92:4f:7a:d0:5c:15:fd:94:92:be:
         67:0d:7a:ce:57:00:8f:8e:f6:3b:0f:c1:d3:64:6f:1a:3c:3c:
         2b:28:75:00:59:ac:ed:01:f8:2a:c0:54:82:9d:b6:41:a1:d2:
         34:0b:36:9f:8b:99:ca:0d:3e:38:bb:99:fb:bf:9f:39:06:48:
         09:8e:41:59:3c:6f:fb:17:a3:62:44:31:f4:43:01:45:dc:e6:
         4b:20:ad:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:11:33 2025 by rpki-client