Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a7bc0ccb-0335-34de-bfa9-c684ec6aa3ca.roa
File:                     a7bc0ccb-0335-34de-bfa9-c684ec6aa3ca.roa (raw, json)
Hash identifier:          79Pv8SIcETY1nikdCUPG9BzryWKeTpEVi5/joGIqD1s=
Subject key identifier:   35:FF:BB:18:36:83:66:04:A4:6A:60:40:D3:73:89:B3:87:5B:28:FB
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584ED431CD7ED839150C83F31780
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a7bc0ccb-0335-34de-bfa9-c684ec6aa3ca.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     63023
IP address blocks:        136.176.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:cd:7e:d8:39:15:0c:83:f3:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=103ecbb5-da19-463e-8945-f956b47e570b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:89:60:89:da:9f:5c:b3:59:7b:b1:a1:c0:c7:
                    9b:4d:7d:98:85:30:82:33:3c:ca:17:a2:2c:eb:09:
                    42:8f:85:ea:5c:c3:f2:33:b9:cc:c4:94:8e:71:aa:
                    77:b8:68:c3:a1:55:90:20:7c:53:97:1a:57:4b:b6:
                    23:ce:49:d9:a0:17:dc:82:4c:77:2f:03:cf:e8:76:
                    eb:69:57:70:10:b5:f2:57:d3:b3:e8:86:bf:f0:d1:
                    ba:48:cb:db:02:e8:80:6a:0c:3f:f1:95:e8:40:fb:
                    dc:7c:52:a7:09:32:f8:af:86:da:d3:63:f9:9b:8b:
                    6f:a6:8d:3a:31:9c:6a:1f:9c:55:68:f9:ef:03:a7:
                    27:50:50:c7:c4:b5:1a:8b:bb:f4:fc:a1:21:91:42:
                    31:af:12:87:3f:bb:6e:b9:7a:52:b0:16:bc:32:b1:
                    62:36:ac:f7:fe:ff:36:0c:b9:f6:15:07:0d:25:8f:
                    ce:3e:0d:b5:13:73:9f:d9:79:ab:b0:9c:16:43:99:
                    2a:c1:67:dd:a6:3d:49:63:28:f6:7c:e5:9f:f4:80:
                    bb:88:35:f0:90:9e:54:dc:4e:5c:66:95:18:f9:30:
                    60:0d:58:62:37:36:b8:90:ea:e0:7d:0e:a1:b1:d8:
                    b0:c6:53:0a:2f:fc:52:ea:07:33:98:cd:72:04:e8:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FF:BB:18:36:83:66:04:A4:6A:60:40:D3:73:89:B3:87:5B:28:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a7bc0ccb-0335-34de-bfa9-c684ec6aa3ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.176.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c9:13:4e:0c:33:3b:d1:2b:09:ee:db:32:88:ad:00:1d:63:
         f9:94:3e:83:0b:97:ec:ec:38:10:0a:3c:f9:80:00:21:be:f6:
         fd:06:dd:87:3c:68:a3:dc:cd:4e:e1:1f:f5:66:c2:25:11:e2:
         be:05:1b:f9:99:03:8a:d7:b7:34:2a:28:83:06:eb:7a:02:65:
         cc:df:ca:8c:3a:51:0f:36:e2:f9:ea:67:0c:97:1a:43:c8:54:
         08:89:b3:3a:b0:88:c6:bf:8e:c1:2b:82:68:96:93:39:69:93:
         c6:2a:6f:ba:63:9e:de:da:d6:93:6d:51:4c:55:3c:0d:56:70:
         c2:91:9e:33:ea:37:d6:d4:f8:88:fa:56:64:7b:76:ef:1a:fd:
         e6:e5:0f:b8:f5:02:7b:f7:92:3a:a0:46:70:de:39:1d:6e:b5:
         83:d5:51:01:42:11:06:b3:1b:dd:a4:37:52:b0:06:b1:d5:ef:
         e3:89:9b:56:82:60:f3:89:cf:1f:36:39:0f:00:75:6c:10:c8:
         28:83:f3:c8:4a:2a:44:8e:eb:b8:da:34:ac:dc:64:11:28:c9:
         17:3e:63:c9:05:09:78:e0:8e:9f:c6:36:c6:9d:fb:25:86:83:
         f8:aa:6f:25:7f:67:0d:f0:d2:74:25:a3:f8:e0:0a:d6:29:c0:
         0f:d3:2a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:23:41 2026 by rpki-client