Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa
File:                     523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa (raw, json)
Hash identifier:          j8la6PnP8Id/TyG7zfz39hg49mKoA0krucJiZTHJO3M=
Subject key identifier:   C1:1F:12:48:55:E4:C7:63:34:75:DD:42:CC:72:06:D0:F4:2C:AB:61
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F4328584F4973B04E5E1C93A866929F80
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     211373
IP address blocks:        136.175.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:b0:4e:5e:1c:93:a8:66:92:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c79a07b8-544b-4b72-b3f1-e4fc715d252e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:88:6d:9f:1b:59:ff:d3:00:4c:71:9e:5b:a2:
                    ee:d1:28:5e:3b:74:0c:db:d2:97:ac:10:e5:f9:a2:
                    fd:27:83:a0:74:57:e6:31:65:ed:a2:2a:38:3e:fb:
                    07:01:7b:b8:84:b5:cc:cd:4f:65:19:54:f2:56:19:
                    7a:27:c3:75:77:05:29:66:35:a5:34:70:4a:84:3e:
                    aa:67:72:fb:6e:f2:c1:94:9f:60:03:99:df:42:96:
                    85:9f:06:83:45:cb:38:b4:5b:fb:04:0f:48:63:cd:
                    54:14:ca:22:31:38:5f:0b:e5:bc:9d:60:68:52:89:
                    f7:8a:ab:7a:ab:95:20:a7:9c:3a:f0:54:c8:c0:95:
                    3e:ea:46:e2:26:aa:c2:c6:ae:fb:c5:e2:75:17:0c:
                    32:7a:0e:18:cb:3e:a4:2c:ac:2b:85:ea:1c:35:7d:
                    0a:bd:10:6f:d8:dc:a1:7b:85:55:53:8d:86:09:a5:
                    51:d4:c1:0c:8a:ab:24:f3:39:54:0f:3a:0e:60:1d:
                    1e:f7:af:b6:b5:87:5c:53:36:d3:d1:32:75:62:40:
                    db:cc:5e:00:d7:a9:c0:2c:a4:8f:37:08:69:4c:ee:
                    65:84:bb:70:c9:7b:b3:fc:db:04:62:40:8f:7f:1c:
                    e6:fb:e9:9a:4d:29:e6:23:57:ca:42:46:9f:d4:79:
                    e6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1F:12:48:55:E4:C7:63:34:75:DD:42:CC:72:06:D0:F4:2C:AB:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/523c1c5b-45fc-3345-b9c8-bd62476a96a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:be:ab:18:80:8b:c8:f8:59:78:1f:d7:f9:6f:c6:ef:44:72:
         92:94:0e:9d:4c:7c:44:57:83:11:28:69:07:c2:75:da:1a:89:
         ff:55:2f:a4:ed:16:a8:55:ae:6a:86:71:9c:40:4a:bd:20:a1:
         df:c4:77:09:d6:07:0e:d9:cf:bb:72:8f:db:f7:72:16:92:c6:
         4c:ed:58:02:28:99:e6:71:e1:fb:c2:9b:40:7a:6e:95:85:48:
         be:c0:69:8d:bc:95:fd:cb:ac:e1:b9:53:86:d1:ed:5f:9a:b5:
         6c:22:09:bf:58:42:c2:02:d9:b0:80:9f:7a:8a:b8:e2:57:88:
         6e:ba:e9:97:a3:19:24:c8:d3:47:93:b8:d3:cb:4d:57:8d:4e:
         5b:46:3d:aa:fb:cb:90:79:cf:ec:1b:a3:82:49:a9:45:8e:97:
         63:8a:aa:bb:6e:2e:da:5b:c2:d8:63:ec:44:07:89:b4:9b:72:
         cf:32:14:f6:39:d2:8b:ff:3c:9b:d8:c4:07:41:eb:09:c5:01:
         91:53:09:f2:81:10:60:b5:33:5f:54:dc:de:8e:2a:60:fe:72:
         c0:33:2e:17:42:9e:0d:1a:21:62:c2:31:ba:f3:24:a0:57:5f:
         75:79:f5:4e:d6:ce:16:d9:ae:bb:7c:27:c4:ba:87:44:a9:bf:
         ea:15:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:03:31 2026 by rpki-client