Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/7cd7d03d-37bd-375c-a9a0-143249c23df0.roa
File:                     7cd7d03d-37bd-375c-a9a0-143249c23df0.roa (raw, json)
Hash identifier:          L+TSDiJa75J8pLcLEEzqFfJHucEYMLYZ7R1D1PY+b20=
Subject key identifier:   C2:E9:49:7D:EA:AB:4F:7D:6D:66:C9:16:53:26:63:55:2D:61:1F:4A
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584F4C3D4911000DD3B679CC0960
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/7cd7d03d-37bd-375c-a9a0-143249c23df0.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     401307
IP address blocks:        136.228.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:49:11:00:0d:d3:b6:79:cc:09:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=77c3b4fc-c4cf-4a62-879e-eea0b4f6bf34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:3e:48:d1:86:35:db:92:c6:ad:e2:83:53:
                    65:65:0f:a4:8b:76:02:d5:94:91:59:79:bf:78:e3:
                    2d:5c:64:90:23:aa:80:c3:86:d3:a3:32:b0:f5:4c:
                    e5:42:82:3b:76:7f:f7:04:62:72:f2:0f:2f:ba:25:
                    29:ef:f8:af:55:23:bf:97:bc:b1:01:f7:37:c5:e2:
                    78:3e:52:39:1c:cf:30:fb:b7:ed:ef:0b:c7:bd:d6:
                    21:a5:13:a3:d4:5b:af:fb:a2:aa:c3:f0:1a:84:d0:
                    27:92:96:3a:a7:da:bf:2a:38:d1:aa:3a:d7:ad:f5:
                    55:66:78:67:6d:c7:b1:c7:93:22:06:e4:34:aa:6d:
                    90:48:de:fe:37:c2:de:6a:09:00:3f:a6:cf:db:74:
                    2e:35:a1:ef:9f:9b:bb:2c:19:3f:fd:6d:dd:84:67:
                    f7:d3:4b:19:6f:e7:11:36:03:c0:e9:55:08:5e:fc:
                    9c:72:46:2d:ed:f4:9f:5f:7f:17:dd:65:70:20:fc:
                    48:12:be:0d:ed:48:de:2c:a9:56:8d:15:dc:02:f4:
                    b6:5a:c3:18:c4:c1:ac:be:0e:05:b6:03:1c:47:c0:
                    66:6e:99:7c:5a:4c:7a:70:2b:f8:6f:db:d3:32:d5:
                    6c:25:c5:e3:6a:e7:a2:fa:89:cb:83:b2:78:ff:7b:
                    53:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E9:49:7D:EA:AB:4F:7D:6D:66:C9:16:53:26:63:55:2D:61:1F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/7cd7d03d-37bd-375c-a9a0-143249c23df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:59:64:13:4e:02:e9:25:83:39:ff:31:50:6c:ac:ef:0c:d5:
         9f:38:fb:2c:48:ca:4b:d2:8b:08:48:89:5d:33:02:08:89:ad:
         ed:a7:db:ad:d8:e2:d5:4e:16:af:67:d1:07:23:85:2a:45:ce:
         a0:11:57:55:df:45:d5:7b:5a:0b:86:2f:0f:4d:4c:36:95:fe:
         45:de:25:fd:01:80:4f:c5:33:f8:04:20:0f:49:fe:e7:4e:52:
         66:0f:df:64:44:45:7e:cf:91:66:20:a6:fb:07:04:54:9c:e0:
         45:f0:da:35:4b:2a:7a:63:a6:6d:57:6a:57:75:c7:c4:0b:8e:
         cb:b4:2c:0d:9c:93:41:6b:57:8d:71:5e:34:c4:70:8b:68:6a:
         89:a8:b3:4e:da:e0:b1:47:db:d8:82:7b:aa:45:f0:c7:e7:4f:
         2b:36:99:40:15:7f:7e:a6:a8:b4:3a:b5:4d:c8:73:dc:37:93:
         8a:43:d3:b3:23:16:b1:0b:b4:69:2e:f4:a3:47:65:7e:16:98:
         15:51:ec:16:cd:42:95:a0:89:d6:29:7c:5a:e2:02:92:dc:ca:
         63:eb:48:00:0a:f3:b1:1c:80:28:4d:88:95:05:4a:8b:30:37:
         76:b6:67:e4:6c:03:5a:95:13:c2:cd:7b:80:31:3b:93:fa:40:
         f7:5e:8d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:15:25 2026 by rpki-client