Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8d45cdd3-283e-4f9e-8f90-bf26199bff04/b83f7309-34a0-3f61-807f-ab0ab875fc01.roa
File:                     b83f7309-34a0-3f61-807f-ab0ab875fc01.roa (raw, json)
Hash identifier:          4NESGhfdDsLRuujqF+491Zdsxy/tBwIfGu6iQLlybio=
Subject key identifier:   FD:22:7B:03:BD:88:B7:8E:4A:02:C6:A4:61:BD:12:3A:D5:80:CD:1A
Certificate issuer:       /CN=8d45cdd3-283e-4f9e-8f90-bf26199bff04
Certificate serial:       010D0C9F4328584E58E497321405A6DD223A9BE0
Authority key identifier: 0E:74:BE:66:76:C9:84:07:5B:F0:23:3E:FC:21:31:74:D7:A4:D9:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8d45cdd3-283e-4f9e-8f90-bf26199bff04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8d45cdd3-283e-4f9e-8f90-bf26199bff04/b83f7309-34a0-3f61-807f-ab0ab875fc01.roa
Signing time:             Tue 30 Jun 2026 21:00:12 +0000
ROA not before:           Tue 30 Jun 2026 21:00:12 +0000
ROA not after:            Mon 28 Sep 2026 21:00:12 +0000
asID:                     3507
IP address blocks:        136.175.56.0/24 maxlen: 24
                          136.175.57.0/24 maxlen: 24
                          136.175.58.0/24 maxlen: 24
                          136.175.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8d45cdd3-283e-4f9e-8f90-bf26199bff04/8d45cdd3-283e-4f9e-8f90-bf26199bff04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8d45cdd3-283e-4f9e-8f90-bf26199bff04/8d45cdd3-283e-4f9e-8f90-bf26199bff04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8d45cdd3-283e-4f9e-8f90-bf26199bff04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:58:e4:97:32:14:05:a6:dd:22:3a:9b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d45cdd3-283e-4f9e-8f90-bf26199bff04
        Validity
            Not Before: Jun 30 21:00:12 2026 GMT
            Not After : Sep 28 21:00:12 2026 GMT
        Subject: CN=3f4a1f3e-38c2-475f-bda8-1a2ffcdd7e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:34:23:8c:ec:b0:a5:c8:ef:72:bb:84:7a:
                    35:1d:6b:40:76:a1:56:0a:51:0d:74:dd:dc:7c:a6:
                    06:b7:5c:25:30:53:af:2f:39:cb:17:45:42:7a:25:
                    3c:6a:9d:71:38:b7:d5:99:cc:3e:d9:c5:ce:e0:47:
                    21:53:e0:db:a0:10:80:b0:90:89:3c:57:dd:7c:56:
                    39:56:8f:f4:36:00:0f:49:46:0a:31:db:55:25:fb:
                    59:0d:82:66:90:ee:db:52:be:01:64:08:0c:12:ac:
                    93:42:71:27:b5:ca:bb:b2:00:48:76:58:73:d9:b7:
                    13:6d:c1:04:59:78:f5:d9:33:02:3a:04:88:11:bf:
                    c3:06:be:8f:00:3e:43:a8:c4:7b:66:d7:39:c5:89:
                    95:90:bb:42:31:ac:0b:cf:2c:fe:04:cb:2e:d4:d4:
                    58:87:eb:b4:72:4d:a5:3b:be:17:67:4d:89:d9:6d:
                    cb:34:39:86:13:0a:9e:08:81:d2:f4:96:81:eb:ee:
                    d0:97:64:9c:c1:54:c4:f0:9e:8c:b9:27:eb:0a:86:
                    46:0c:80:d5:9c:b7:96:02:05:ca:3d:2c:a5:9c:d5:
                    2e:bd:91:1d:3a:2d:09:ae:aa:c6:f3:68:c4:13:14:
                    0d:eb:62:8e:85:5d:8d:bd:64:1c:a5:50:26:90:d1:
                    97:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:22:7B:03:BD:88:B7:8E:4A:02:C6:A4:61:BD:12:3A:D5:80:CD:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8d45cdd3-283e-4f9e-8f90-bf26199bff04/b83f7309-34a0-3f61-807f-ab0ab875fc01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8d45cdd3-283e-4f9e-8f90-bf26199bff04/8d45cdd3-283e-4f9e-8f90-bf26199bff04.crl

            X509v3 Authority Key Identifier:
                keyid:0E:74:BE:66:76:C9:84:07:5B:F0:23:3E:FC:21:31:74:D7:A4:D9:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8d45cdd3-283e-4f9e-8f90-bf26199bff04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c8:68:07:dd:ec:98:9b:20:62:1b:b0:77:2b:c6:be:90:4c:
         64:cc:11:40:18:02:c5:52:2a:63:86:3b:71:3c:1a:5a:e4:c3:
         5e:35:43:37:fb:f9:94:45:07:ff:76:3a:5c:93:e4:d9:30:8a:
         22:16:a5:d5:3e:1f:99:4b:73:5d:40:c5:c6:85:8b:6b:37:fc:
         07:c1:9b:7f:6a:2a:24:50:a9:fe:63:81:9c:e9:dd:84:91:72:
         60:f3:09:73:07:4f:8d:58:3f:9b:f1:ed:a8:9a:d4:1f:2e:45:
         3c:f7:a9:1c:17:6c:2a:22:ef:b4:f0:39:d5:82:35:91:39:f3:
         f8:d1:1b:09:d1:71:3d:f5:01:16:ca:31:85:59:25:3a:b6:7e:
         3c:4c:01:52:b2:76:dd:f9:a4:ab:d1:d7:7e:64:3d:fc:26:bf:
         6e:98:64:88:fe:1b:f4:46:ea:51:44:76:da:b8:51:23:11:b4:
         c0:31:aa:90:24:af:1d:79:d2:94:9a:85:40:a8:53:91:ed:4c:
         3d:5a:82:87:0d:cd:a8:86:b7:52:84:3a:e3:30:78:9d:64:a5:
         74:8f:43:56:7d:d8:d6:24:3a:4d:9d:bd:c9:6f:fe:d2:ed:7e:
         22:6f:44:c2:06:7c:66:7a:03:90:c8:5a:8e:c7:79:31:20:41:
         79:97:8d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:21:48 2026 by rpki-client