Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0ae6ca4d-4670-3a68-98f7-89f55c7d312a.roa
File:                     0ae6ca4d-4670-3a68-98f7-89f55c7d312a.roa (raw, json)
Hash identifier:          Vc3UVK4IH25RsOZ7FT3krxcfsZJMedCCOFyGo8qwnXw=
Subject key identifier:   1F:F3:25:65:22:9C:97:AA:06:B8:FC:18:04:5F:BA:8F:E1:FF:FB:E1
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F8EF0051EA4E9C7998EBB3F00
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0ae6ca4d-4670-3a68-98f7-89f55c7d312a.roa
Signing time:             Mon 19 Oct 2026 22:23:51 +0000
ROA not before:           Mon 19 Oct 2026 22:23:51 +0000
ROA not after:            Sun 17 Jan 2027 23:23:51 +0000
asID:                     30088
IP address blocks:        136.176.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8e:f0:05:1e:a4:e9:c7:99:8e:bb:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Oct 19 22:23:51 2026 GMT
            Not After : Jan 17 23:23:51 2027 GMT
        Subject: CN=06b7f539-dfaf-48d4-9d10-f0b2136e0cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:be:31:43:b0:41:a5:19:82:a1:46:66:6b:ab:
                    41:28:df:89:a0:77:c2:a3:c5:22:21:36:c9:56:88:
                    3d:bb:b2:c8:2d:06:96:6f:34:94:dc:ba:d5:67:3a:
                    a5:a8:c3:06:57:39:a3:a5:7d:3d:2b:32:cf:cb:ee:
                    3e:50:27:b3:7b:03:44:88:d1:3c:1e:30:72:b3:62:
                    40:d2:42:66:f4:c3:f9:e5:ef:b1:05:0c:08:0c:98:
                    de:5c:fd:a1:8d:61:21:1a:7a:87:57:f2:22:b2:39:
                    78:cf:e7:ee:de:4e:94:69:bd:6b:d2:c2:3b:5a:87:
                    77:4b:eb:24:25:59:19:9d:b9:0f:63:fb:83:92:c8:
                    dc:85:36:ed:3c:24:86:45:39:d5:2b:d7:53:74:8a:
                    60:40:66:fb:3e:ac:e8:88:30:dd:ee:91:46:46:5b:
                    57:5d:1b:d2:e3:d8:30:85:84:97:ff:5b:0f:73:b7:
                    29:d3:95:1a:d6:fd:1c:b9:37:6e:e4:e2:21:87:df:
                    db:3c:56:d3:e4:c9:a9:fa:8c:24:2f:14:09:8e:38:
                    54:c9:1b:e7:50:64:64:9f:f9:5f:d2:e0:c6:59:ac:
                    c2:3d:d3:0d:5e:6d:b7:55:5c:59:e1:df:04:1a:98:
                    15:17:1b:27:60:b4:26:a1:2b:4f:58:07:7a:6f:8c:
                    b2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F3:25:65:22:9C:97:AA:06:B8:FC:18:04:5F:BA:8F:E1:FF:FB:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0ae6ca4d-4670-3a68-98f7-89f55c7d312a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.176.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:73:cb:ab:4b:bb:47:61:4c:2b:c3:fb:27:70:fd:6d:ed:94:
         f9:34:b0:6c:5a:77:b9:7e:8b:2c:87:53:61:64:c2:48:93:4a:
         5c:2e:a8:45:3d:2d:1e:3c:e4:c0:f6:06:65:a7:57:80:aa:f6:
         7d:eb:55:fd:5d:51:3e:8e:89:42:70:4f:ea:db:9f:20:6c:29:
         50:70:0c:47:8b:19:f9:23:db:ca:12:42:84:db:e2:c2:0f:cc:
         37:14:f1:bd:5d:58:5c:f6:d2:ae:80:73:3a:9e:63:d6:0e:22:
         a3:63:ad:72:df:74:78:67:87:a5:52:d1:83:9a:27:20:1f:be:
         88:c0:12:cf:19:22:3b:b6:8a:3b:38:b3:23:30:ad:e6:ff:ee:
         ba:56:40:f0:76:33:49:e5:46:0a:01:ca:44:b5:bb:35:69:5e:
         39:78:9d:e2:e2:f8:74:bd:a1:91:5a:52:10:8d:00:9a:e2:2e:
         ab:35:ef:03:a4:51:a3:28:30:64:14:cd:d7:88:17:9c:13:28:
         cc:b8:99:7d:ef:f6:8a:3e:61:a2:01:71:6a:d2:c4:c0:70:e6:
         5f:a2:81:95:70:e2:a8:12:f4:ab:cb:c8:04:76:a2:8d:7e:df:
         7e:59:cf:96:96:a0:d9:62:7e:f3:c3:e0:40:f0:63:79:98:6a:
         b0:1e:2e:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+O8AUepOnHmY67PwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz
OWUwMB4XDTI2MTAxOTIyMjM1MVoXDTI3MDExNzIzMjM1MVowLzEtMCsGA1UEAxMk
MDZiN2Y1MzktZGZhZi00OGQ0LTlkMTAtZjBiMjEzNmUwY2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz74xQ7BBpRmCoUZma6tBKN+JoHfCo8UiITbJ
Vog9u7LILQaWbzSU3LrVZzqlqMMGVzmjpX09KzLPy+4+UCezewNEiNE8HjBys2JA
0kJm9MP55e+xBQwIDJjeXP2hjWEhGnqHV/Iisjl4z+fu3k6Uab1r0sI7Wod3S+sk
JVkZnbkPY/uDksjchTbtPCSGRTnVK9dTdIpgQGb7PqzoiDDd7pFGRltXXRvS49gw
hYSX/1sPc7cp05Ua1v0cuTdu5OIhh9/bPFbT5Mmp+owkLxQJjjhUyRvnUGRkn/lf
0uDGWazCPdMNXm23VVxZ4d8EGpgVFxsnYLQmoStPWAd6b4yyQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB/zJWUinJeqBrj8GARfuo/h//vhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk
ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMGFlNmNhNGQtNDY3MC0z
YTY4LTk4ZjctODlmNTVjN2QzMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk
ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh
MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5
NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJzy6tLu0dhTCvD+ydw/W3tlPk0sGxad7l+iyyHU2FkwkiTSlwuqEU9
LR485MD2BmWnV4Cq9n3rVf1dUT6OiUJwT+rbnyBsKVBwDEeLGfkj28oSQoTb4sIP
zDcU8b1dWFz20q6AczqeY9YOIqNjrXLfdHhnh6VS0YOaJyAfvojAEs8ZIju2ijs4
syMwreb/7rpWQPB2M0nlRgoBykS1uzVpXjl4neLi+HS9oZFaUhCNAJriLqs17wOk
UaMoMGQUzdeIF5wTKMy4mX3v9oo+YaIBcWrSxMBw5l+igZVw4qgS9KvLyAR2oo1+
335Zz5aWoNlifvPD4EDwY3mYarAeLhE=
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:04 2026 by rpki-client