Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c3446a6d-0e20-3114-92d1-212c71aaefd5.roa
File:                     c3446a6d-0e20-3114-92d1-212c71aaefd5.roa (raw, json)
Hash identifier:          tb5L2h2OY90PzcFJQNdESk606Q3gf+OxB4wdXwz5fZ8=
Subject key identifier:   D3:2C:1C:29:7E:27:65:4B:68:A5:44:D1:58:30:C3:7D:D3:FD:AE:81
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F778367F8747F8E8C34204AC0
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c3446a6d-0e20-3114-92d1-212c71aaefd5.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     63023
IP address blocks:        136.176.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:67:f8:74:7f:8e:8c:34:20:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=a83608a4-fed6-4556-9877-7c7bc7553f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f4:8a:c2:3c:46:49:29:9d:d3:b9:2b:da:f1:
                    0c:a2:0e:ef:cc:06:29:46:5a:d1:f6:dd:6c:12:23:
                    17:ea:80:5a:ed:7f:4f:bb:bc:5e:af:a9:9e:c8:c1:
                    09:9e:6e:eb:09:16:6a:c1:f5:2d:38:95:a9:b1:dd:
                    b0:12:c6:c1:3c:34:5a:17:af:c1:fa:a4:2e:32:6c:
                    6a:2b:e8:3e:89:d2:fd:b5:7a:e5:d4:2c:12:c4:fc:
                    a3:88:31:39:a0:8c:74:c0:51:e0:b0:4f:45:47:3a:
                    f4:b3:b1:f8:0f:35:d9:1d:37:17:75:c1:9d:d4:4c:
                    6f:f4:bf:ce:64:16:d4:b3:6d:74:9a:db:a5:14:49:
                    1a:79:07:2d:ad:d8:4a:fd:18:4c:e2:1e:17:c1:94:
                    9b:e3:d5:f3:04:9a:ce:99:82:b0:fc:d0:8d:8b:48:
                    e8:ab:b2:b1:cb:67:03:25:2d:21:76:73:9e:56:a6:
                    28:03:c5:81:44:b5:3f:76:ca:8b:af:ce:77:63:b6:
                    ba:a8:41:e6:0e:1c:5b:d1:29:50:64:de:97:03:c2:
                    36:28:f2:a9:71:d4:f0:74:9d:ff:f3:a6:13:e7:3b:
                    c1:f0:05:89:01:99:36:d2:cd:0d:d8:d1:d6:03:53:
                    c8:90:f8:d3:36:5f:e2:3f:2b:0f:f7:99:e8:23:c5:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2C:1C:29:7E:27:65:4B:68:A5:44:D1:58:30:C3:7D:D3:FD:AE:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c3446a6d-0e20-3114-92d1-212c71aaefd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.176.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:9e:ea:c9:76:95:17:63:67:c3:88:bc:fe:c1:07:6c:de:f9:
         1a:26:bf:53:09:2e:cc:f4:ed:78:3c:10:bd:f4:0a:80:15:a9:
         8e:06:aa:1d:5a:e2:13:b3:52:98:7d:04:57:7b:d7:1d:1f:d4:
         09:59:7b:94:41:08:8a:43:91:34:5b:89:93:94:e1:16:3d:cb:
         cb:1d:23:84:c7:92:96:a4:f0:6d:f5:16:0c:6f:cf:29:ba:3a:
         dc:1a:86:f9:48:3d:f5:21:cf:3f:fd:22:93:f7:b8:cd:f0:2a:
         8a:af:e3:16:dd:e5:43:89:11:3a:16:9c:59:b6:48:46:77:ea:
         e0:8d:05:a6:cd:8f:a9:78:dc:cc:54:5b:a5:03:96:e5:0e:2f:
         bd:dc:54:35:03:f0:40:f3:ef:7b:61:af:d2:1b:b8:ec:5a:51:
         52:95:5e:ee:76:5e:8a:02:22:ef:cf:58:42:66:9b:79:25:c6:
         74:14:ce:29:cb:ab:09:9d:89:63:74:ac:ca:64:d8:a0:a5:3d:
         73:3c:cb:7e:33:e5:27:ca:e1:f2:ad:cd:71:65:aa:4b:4d:f3:
         7e:3a:8a:42:32:6f:7c:23:a4:91:0d:2e:6f:35:e9:f7:b5:4d:
         15:47:49:0e:92:ed:1d:13:ed:9c:4a:3f:33:b9:18:37:ab:0e:
         47:34:59:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:52:49 2026 by rpki-client