Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa
File:                     df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa (raw, json)
Hash identifier:          CZ0ZIsH085HplRKbVvpfr/bxOODvJQERkFFsDOybkW0=
Subject key identifier:   B0:1F:71:A3:4C:82:F1:EB:2C:48:72:21:69:31:D1:EF:9E:E9:00:32
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584D2644B198CE787366CD5BCA80
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     401307
IP address blocks:        136.228.47.0/24 maxlen: 24
                          136.228.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:b1:98:ce:78:73:66:cd:5b:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=bf2115ea-4657-4097-baaa-fed3d52e46fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:83:34:68:eb:46:58:6e:8a:f8:da:25:ff:
                    e4:c2:8d:34:59:12:0b:2b:1c:36:48:b7:85:95:bf:
                    35:9d:7a:5a:e8:4f:fa:f6:39:cc:25:9a:a9:7d:67:
                    73:1f:f6:d2:9f:03:59:c7:f4:67:d3:14:9e:b9:ff:
                    8a:bd:f8:fd:cf:a2:26:35:1c:15:2e:6c:7c:a1:c8:
                    b1:a8:81:a0:fd:3d:67:65:61:6a:a3:eb:17:9c:fa:
                    63:48:f7:78:bf:b8:b6:f6:68:f5:28:84:e3:22:58:
                    b7:17:26:32:21:07:43:d7:ae:7a:e8:0a:67:9c:ea:
                    8b:1e:6a:c2:ef:74:ac:ca:a8:f6:fb:f4:e1:aa:e7:
                    66:3b:93:49:ed:29:64:97:a8:f0:8f:6f:6b:f7:e3:
                    be:c2:3b:c3:dc:06:f2:69:b9:d0:ba:fe:8b:49:de:
                    ab:4f:7a:0a:0c:f3:ba:b6:57:2c:fb:67:77:2d:24:
                    27:54:1d:d8:75:54:b3:76:af:1e:d8:6c:6f:1a:ef:
                    d6:8e:a5:69:35:4d:a0:d7:05:5e:5b:4a:67:20:e1:
                    2e:d6:a3:01:9a:b2:a5:00:70:3b:21:a7:43:3b:95:
                    a8:c0:cc:69:a6:57:99:0f:d1:e3:60:ff:76:41:66:
                    47:fe:51:e5:57:a8:ed:18:bb:18:46:c8:27:ef:ef:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1F:71:A3:4C:82:F1:EB:2C:48:72:21:69:31:D1:EF:9E:E9:00:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.47.0/24
                  136.228.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8b:cd:fe:b8:60:d2:ab:8a:cd:4c:3b:20:60:81:e3:17:57:
         a9:b2:0f:01:90:81:f9:e0:61:91:d1:9a:dd:3a:ad:2b:c5:00:
         0a:d6:34:50:33:ce:48:c6:bc:0e:a0:0b:bb:c0:e9:68:b7:7a:
         5c:80:e9:60:71:71:4b:7c:43:5d:42:12:ef:b6:f0:9f:87:f0:
         66:a4:42:09:a8:78:c8:0c:a3:ef:64:57:35:1a:53:35:4a:bf:
         db:fc:99:75:4d:a4:2e:64:71:0c:de:13:bd:de:ec:79:8b:4b:
         f1:29:fa:72:f6:7f:ef:c4:a6:00:7e:89:e9:44:6f:ab:2f:cd:
         8f:4b:45:87:c0:9a:9b:1a:3a:f1:50:54:8a:32:ad:09:d7:da:
         fa:c9:84:51:d6:d5:b4:74:d4:fa:a5:70:b4:34:0a:c6:ed:a1:
         70:ca:ce:9e:62:a0:66:56:f8:cc:a3:69:74:fa:50:4b:db:a9:
         7b:77:d2:b6:aa:38:fc:54:40:a8:3b:29:83:37:ec:05:81:9d:
         be:cf:f7:6f:ca:86:9c:92:2e:99:1b:0b:dd:54:fb:97:10:5b:
         f6:03:ca:40:5d:ff:d2:23:17:89:77:54:5f:2a:c1:a4:92:b9:
         ee:b2:e9:f3:29:51:38:a6:28:c9:c6:e8:95:e7:26:5d:aa:41:
         49:43:05:a4
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0mRLGYznhzZs1byoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjA2MzgxNGQtNTE4My00OWRlLTkwZWUtODRjYmJlY2Rl
NDIyMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
YmYyMTE1ZWEtNDY1Ny00MDk3LWJhYWEtZmVkM2Q1MmU0NmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4uDNGjrRlhuivjaJf/kwo00WRILKxw2SLeF
lb81nXpa6E/69jnMJZqpfWdzH/bSnwNZx/Rn0xSeuf+Kvfj9z6ImNRwVLmx8ocix
qIGg/T1nZWFqo+sXnPpjSPd4v7i29mj1KITjIli3FyYyIQdD16566ApnnOqLHmrC
73Ssyqj2+/ThqudmO5NJ7Slkl6jwj29r9+O+wjvD3AbyabnQuv6LSd6rT3oKDPO6
tlcs+2d3LSQnVB3YdVSzdq8e2GxvGu/WjqVpNU2g1wVeW0pnIOEu1qMBmrKlAHA7
IadDO5WowMxppleZD9HjYP92QWZH/lHlV6jtGLsYRsgn7+8pawIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLAfcaNMgvHrLEhyIWkx0e+e6QAyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MDYz
ODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNiYmVjZGU0MjIvZGYxZmZlMmEtYjkzOS0z
MDNkLWI4NzUtYjc2ZjU0Y2Q2ZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjA2MzgxNGQtNTE4My00OWRlLTkw
ZWUtODRjYmJlY2RlNDIyLzYwNjM4MTRkLTUxODMtNDlkZS05MGVlLTg0Y2JiZWNk
ZTQyMi5jcmwwHwYDVR0jBBgwFoAU+oFKWYuHd/AMGvqgYA7Dhlv3AcAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82MDYzODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNi
YmVjZGU0MjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAiOQvAwQA
iOQyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAF2Lzf64YNKris1MOyBggeMXV6myDwGQgfngYZHRmt06rSvF
AArWNFAzzkjGvA6gC7vA6Wi3elyA6WBxcUt8Q11CEu+28J+H8GakQgmoeMgMo+9k
VzUaUzVKv9v8mXVNpC5kcQzeE73e7HmLS/Ep+nL2f+/EpgB+ielEb6svzY9LRYfA
mpsaOvFQVIoyrQnX2vrJhFHW1bR01PqlcLQ0CsbtoXDKzp5ioGZW+MyjaXT6UEvb
qXt30raqOPxUQKg7KYM37AWBnb7P92/KhpySLpkbC91U+5cQW/YDykBd/9IjF4l3
VF8qwaSSue6y6fMpUTimKMnG6JXnJl2qQUlDBaQ=
-----END CERTIFICATE-----
Generated at Sat Mar 14 13:54:13 2026 by rpki-client