Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS136809.roa
File:                     AS136809.roa (raw, json)
Hash identifier:          UZV5e4pB/ejYlDN4VgxY8lUIVfkovriZM1AKEX/9Eak=
Subject key identifier:   6E:08:13:CC:C9:C2:0D:9C:F6:AE:6D:E9:FE:4D:E3:C6:79:2F:40:38
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       319F38418A571D3F7F45F6028914036EDCCAF680
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS136809.roa
Signing time:             Tue 27 Oct 2026 07:43:09 +0000
ROA not before:           Tue 27 Oct 2026 07:38:09 +0000
ROA not after:            Tue 26 Oct 2027 07:43:09 +0000
asID:                     136809
IP address blocks:        206.53.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Nov 2026 03:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9f:38:41:8a:57:1d:3f:7f:45:f6:02:89:14:03:6e:dc:ca:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 27 07:38:09 2026 GMT
            Not After : Oct 26 07:43:09 2027 GMT
        Subject: CN=6E0813CCC9C20D9CF6AE6DE9FE4DE3C6792F4038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:b9:b6:4b:9f:48:16:fa:eb:9c:34:44:74:
                    4c:cd:d6:2b:56:16:23:9b:85:de:d9:dd:39:c6:d1:
                    3d:0e:e3:05:d5:96:12:18:fa:26:60:fa:55:cc:ba:
                    c9:c2:7f:ac:6e:d5:c8:96:ab:ad:9e:c2:ef:ac:ba:
                    a2:84:38:4a:5d:df:bf:73:7b:d8:96:e9:e2:3b:2c:
                    e9:d6:71:12:d0:7f:1a:15:2e:96:9b:c5:8e:8b:ce:
                    d1:56:68:d4:27:d9:37:e3:f3:05:57:33:d4:b9:df:
                    9f:6d:a8:3e:21:91:9b:0b:20:a3:27:50:0c:68:ae:
                    18:90:14:39:a2:f2:13:ac:c0:cd:cf:57:12:b8:79:
                    c7:69:69:aa:f5:77:9a:70:ab:c1:98:4e:70:24:7f:
                    45:7a:4f:3e:7c:64:54:a3:a5:9c:41:79:e9:6e:2a:
                    02:d6:2a:68:d1:1c:cc:ac:1f:80:8b:57:f7:84:21:
                    ee:a1:84:d1:5a:b9:79:46:7e:86:d5:57:f7:09:03:
                    41:45:05:f7:65:e0:56:c9:fa:cf:18:d8:aa:62:55:
                    b2:ea:fa:f6:b8:ea:90:f8:ce:41:ef:5f:76:cf:78:
                    4a:07:a9:0b:22:aa:fe:a7:59:94:8d:8d:12:8c:d9:
                    07:92:4e:09:2b:90:e9:e5:e0:bb:fe:42:e7:c7:29:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:08:13:CC:C9:C2:0D:9C:F6:AE:6D:E9:FE:4D:E3:C6:79:2F:40:38
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS136809.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:5c:bb:6c:6e:f7:a0:f2:b1:be:47:af:ea:2a:46:68:01:6c:
         5c:97:a3:48:ec:2f:5b:26:cf:a2:6d:dc:a8:bb:38:89:4a:ce:
         eb:9a:33:a1:c5:52:c6:d0:cb:8d:3d:db:ad:67:7a:6e:b2:4b:
         0c:11:af:c4:91:9b:a4:2f:c9:5a:2a:53:a3:ec:90:4b:9c:b0:
         74:18:91:32:79:7d:2b:ef:5a:24:fe:0a:a9:19:d4:e3:76:63:
         af:03:c1:80:28:4e:6c:4f:10:5c:c0:0b:60:5e:50:ff:dc:3e:
         b1:b7:13:98:af:62:92:57:8a:d8:a5:5d:36:92:ba:02:b9:90:
         71:e9:e9:6a:c2:75:2a:df:04:fb:f7:31:13:bb:47:eb:25:9e:
         7d:7b:35:4a:73:a7:7e:82:2e:ed:e4:42:f5:3a:e2:be:e5:0a:
         58:7c:36:d9:7a:1b:80:42:3f:4c:51:7d:a5:3c:72:7e:66:ce:
         80:cf:2e:05:e1:de:21:70:df:08:ac:5f:61:6a:ca:b5:9b:c3:
         ae:d6:37:74:fa:22:ab:d0:58:c1:4a:f4:f0:f0:e7:3d:23:7e:
         6a:8a:83:e2:19:92:e7:04:5c:0d:70:4c:83:17:42:43:e0:b1:
         65:37:f8:5e:3b:dc:08:0b:3a:87:c1:4b:01:f4:a7:75:9f:33:
         7d:30:7d:c7
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUMZ84QYpXHT9/RfYCiRQDbtzK9oAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYxMDI3MDczODA5WhcNMjcxMDI2MDc0MzA5
WjAzMTEwLwYDVQQDEyg2RTA4MTNDQ0M5QzIwRDlDRjZBRTZERTlGRTRERTNDNjc5
MkY0MDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRq5tkufSBb6
65w0RHRMzdYrVhYjm4Xe2d05xtE9DuMF1ZYSGPomYPpVzLrJwn+sbtXIlqutnsLv
rLqihDhKXd+/c3vYluniOyzp1nES0H8aFS6Wm8WOi87RVmjUJ9k34/MFVzPUud+f
bag+IZGbCyCjJ1AMaK4YkBQ5ovITrMDNz1cSuHnHaWmq9XeacKvBmE5wJH9Fek8+
fGRUo6WcQXnpbioC1ipo0RzMrB+Ai1f3hCHuoYTRWrl5Rn6G1Vf3CQNBRQX3ZeBW
yfrPGNiqYlWy6vr2uOqQ+M5B7192z3hKB6kLIqr+p1mUjY0SjNkHkk4JK5Dp5eC7
/kLnxylD5wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFG4IE8zJwg2c9q5t6f5N48Z5
L0A4MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzEzNjgwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM41PjANBgkqhkiG9w0BAQsFAAOC
AQEAqVy7bG73oPKxvkev6ipGaAFsXJejSOwvWybPom3cqLs4iUrO65ozocVSxtDL
jT3brWd6brJLDBGvxJGbpC/JWipTo+yQS5ywdBiRMnl9K+9aJP4KqRnU43ZjrwPB
gChObE8QXMALYF5Q/9w+sbcTmK9ikleK2KVdNpK6ArmQcenpasJ1Kt8E+/cxE7tH
6yWefXs1SnOnfoIu7eRC9TrivuUKWHw22XobgEI/TFF9pTxyfmbOgM8uBeHeIXDf
CKxfYWrKtZvDrtY3dPoiq9BYwUr08PDnPSN+aoqD4hmS5wRcDXBMgxdCQ+CxZTf4
XjvcCAs6h8FLAfSndZ8zfTB9xw==
-----END CERTIFICATE-----
Generated at Wed Nov 11 08:17:50 2026 by rpki-client