Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/36978efc-05ad-3800-8d99-f6cc4c31661f.roa
File:                     36978efc-05ad-3800-8d99-f6cc4c31661f.roa (raw, json)
Hash identifier:          iIcXmtO/EEHDU1JqX29SwnxQeQkvcNBWAEpu2SK2V1g=
Subject key identifier:   A3:F1:97:E6:61:DC:0E:01:A8:5E:CD:B6:88:34:2E:96:B8:26:04:30
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F4328584D386A4E3685865559EEE6D180
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/36978efc-05ad-3800-8d99-f6cc4c31661f.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     206051
IP address blocks:        161.195.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:4e:36:85:86:55:59:ee:e6:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=a7d7af68-fd35-420a-8f1a-dc10c82b0502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:13:5c:78:f3:0e:fa:21:9b:70:b1:f5:f8:
                    58:5c:9b:53:35:78:6d:08:97:3b:d8:e1:8b:78:d7:
                    2e:18:93:2d:9c:4b:8a:b4:d4:09:24:a1:24:ad:c4:
                    ab:32:64:e6:92:3e:1c:64:b1:81:ba:f5:9f:a8:ef:
                    63:ba:5b:68:02:f2:ea:db:ee:39:72:f4:73:1d:a4:
                    27:8d:f4:a4:9c:bf:e4:75:63:1e:8c:89:65:0e:0c:
                    93:80:e0:b1:d8:e1:9c:9c:e8:ff:13:5e:78:d9:de:
                    cc:18:b3:28:4d:21:e9:78:89:30:99:14:f7:67:d0:
                    c7:f8:b5:43:74:30:80:d4:76:c2:5b:27:da:24:3c:
                    d3:a6:02:7c:90:60:52:70:dd:7e:ed:b5:be:06:03:
                    fd:55:7a:8b:00:68:1a:62:36:24:f3:8d:b0:3e:df:
                    7d:b7:0f:6b:fd:a3:a6:ea:90:8c:60:8f:44:d7:0e:
                    cf:d2:e9:60:8d:bf:e8:74:e0:40:db:18:42:36:a2:
                    ad:36:55:38:c4:31:25:fa:7a:31:69:40:b2:c8:13:
                    55:d2:ee:c4:ea:e2:8e:f3:46:f0:41:2f:01:91:f4:
                    09:bf:bd:fc:6c:3f:12:49:2f:6c:a9:63:25:f1:5c:
                    a6:16:ca:9a:30:e2:f0:26:be:87:db:fb:ae:ed:6b:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F1:97:E6:61:DC:0E:01:A8:5E:CD:B6:88:34:2E:96:B8:26:04:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/36978efc-05ad-3800-8d99-f6cc4c31661f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:12:6e:9f:12:22:e3:44:b1:1a:0b:79:bc:25:a1:02:be:3a:
         1d:71:38:93:8c:6c:6d:e8:7b:d0:45:6b:75:61:b2:3e:60:ad:
         b6:9d:3f:fe:89:62:54:c6:12:cf:c3:52:a3:5e:9f:48:9d:f2:
         78:ae:e0:fd:5e:06:c4:7f:af:4a:51:6f:97:a3:d2:12:04:c3:
         98:3c:b6:a3:1d:29:56:02:3d:df:00:58:53:41:b1:2d:10:e6:
         47:ce:f6:a7:e4:36:f6:fe:65:16:0e:67:f7:55:31:bb:09:15:
         34:45:4e:09:59:cd:7a:30:f9:0e:12:a2:4d:03:d7:0b:cb:23:
         7f:6f:bb:d1:a0:35:64:d0:61:36:0d:46:a0:7d:54:15:3e:a5:
         cd:a3:50:bc:9c:91:ac:67:37:07:40:93:7e:a9:36:0a:bf:58:
         84:46:fb:db:bb:06:d6:10:90:dd:0a:0c:9f:ff:ab:56:a4:a8:
         c9:a6:35:78:5d:46:5c:82:84:37:b0:0f:08:29:bc:b2:46:b6:
         b2:ce:57:4d:35:07:40:11:04:e6:23:00:e6:27:46:71:25:c9:
         20:38:91:46:5e:cf:fe:3b:31:8a:55:d0:93:5a:93:e2:00:cc:
         1a:21:f3:98:7a:00:b4:51:3c:eb:62:c2:40:d6:08:d6:92:95:
         f5:ff:0f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 11:04:25 2026 by rpki-client