Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/60e3467e-7c4f-345e-9f66-70c3ec08b496.roa
File:                     60e3467e-7c4f-345e-9f66-70c3ec08b496.roa (raw, json)
Hash identifier:          /cF9ccKB2lSO1209jqrUmm3AIuHQf5SCQhhUb77Kx+M=
Subject key identifier:   7D:E7:5D:76:61:8C:44:86:05:43:AD:BC:39:39:C3:00:87:AE:E1:9C
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584F4973ED9B17401F4159B42D80
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/60e3467e-7c4f-345e-9f66-70c3ec08b496.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     202276
IP address blocks:        136.228.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ed:9b:17:40:1f:41:59:b4:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=68beb3d0-55dd-4df9-856d-285952ef177c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e4:51:82:a4:4d:4f:18:cc:25:b4:27:2c:85:
                    9b:d5:52:50:d5:2c:f3:b7:e3:f2:07:eb:be:ce:3f:
                    ed:fe:75:df:fb:6d:6f:32:b7:6b:57:8b:43:f1:4a:
                    70:db:93:a0:a3:65:8b:6a:0d:df:e8:df:6e:3d:72:
                    c1:a5:7c:45:36:a2:71:ed:07:6f:08:a1:85:d6:b3:
                    d6:37:97:6e:d1:a4:7a:60:f8:06:5d:bd:f6:50:d9:
                    81:09:c5:aa:65:bd:00:29:fd:43:7e:b7:b1:64:06:
                    d6:fb:ca:62:14:c8:18:03:2e:fe:4b:cb:3c:0c:2f:
                    90:e5:6a:b4:c8:7f:1c:13:cd:e0:aa:ea:e4:30:22:
                    6e:30:01:bc:7c:ef:8b:15:2d:43:4f:5f:e0:a9:58:
                    b1:20:c3:04:8d:bf:d9:fa:6b:55:6f:28:38:9d:66:
                    df:56:99:1f:7a:fb:ae:e7:53:64:ab:8d:26:ff:c1:
                    69:0c:77:73:0e:cd:9d:78:7c:42:5c:a6:31:13:15:
                    68:c5:85:38:51:f4:de:38:20:43:a9:1f:18:e8:d1:
                    a1:58:44:53:22:59:7d:bb:89:d6:1a:b6:46:3a:e8:
                    b7:f6:cd:f3:99:84:7a:3d:93:9b:a1:df:80:89:5b:
                    e3:39:df:2f:97:34:c0:d6:77:36:e1:bf:3a:44:97:
                    13:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E7:5D:76:61:8C:44:86:05:43:AD:BC:39:39:C3:00:87:AE:E1:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/60e3467e-7c4f-345e-9f66-70c3ec08b496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:84:68:c3:3e:aa:9e:a9:46:9b:72:2b:4f:20:41:20:a3:63:
         87:29:66:b7:f3:f6:69:1d:97:79:5c:3f:09:2b:02:5e:07:04:
         b6:68:c6:e0:84:8d:a7:a8:f2:ed:1b:ef:07:c5:c3:56:1b:ab:
         fe:6c:fc:62:26:5b:d2:b1:aa:a4:ad:a1:ef:42:a8:67:4e:e7:
         31:55:ac:19:ee:4f:37:b7:ca:26:0a:e0:89:45:7c:db:66:9e:
         c3:61:40:96:07:db:1e:82:9d:3c:bf:f2:af:ef:db:29:e7:82:
         46:37:b3:39:cb:8a:ae:a1:3a:da:ca:95:1f:3c:ba:a3:94:33:
         e2:59:f6:6b:23:d5:50:17:fd:6d:6f:1c:b6:2f:fe:d1:1a:8a:
         f0:72:b8:23:31:1a:5c:69:c4:27:b2:53:ae:46:02:d0:1e:80:
         1b:c3:42:c5:32:2b:00:ad:af:79:43:e3:78:26:67:dc:90:d4:
         fa:37:10:4c:bd:a9:44:59:f0:44:a9:93:36:7f:ef:30:be:70:
         f2:8b:e4:1e:c4:c3:c5:5d:c1:cb:ce:c8:a3:1d:34:75:83:c7:
         72:0c:94:b8:7f:9c:e5:1d:0f:15:c0:e3:6a:c0:8f:f3:50:1c:
         0a:5b:08:c2:af:73:28:47:6b:cf:0c:49:73:c7:a2:ee:40:ce:
         1f:05:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:46:26 2026 by rpki-client