Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/9ea4cf00-8a06-3820-829d-bc31538b7381.roa
File:                     9ea4cf00-8a06-3820-829d-bc31538b7381.roa (raw, json)
Hash identifier:          cEVrcV41XSVEYnaVs8/V7IAylWdu8CKwvp/DlFoWAYA=
Subject key identifier:   5A:68:F1:1F:8E:3F:A8:0D:AB:F3:AF:56:5E:30:17:3B:62:A4:51:C6
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F43285849A61F4042BDA6FDC84D9B28E8
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/9ea4cf00-8a06-3820-829d-bc31538b7381.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     395926
IP address blocks:        136.228.38.0/23 maxlen: 24
                          136.228.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:40:42:bd:a6:fd:c8:4d:9b:28:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=3539da34-b9b1-4c21-95eb-691b96353c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:00:03:6c:95:b4:21:bd:a7:ef:5b:1d:08:
                    1c:ce:c9:23:2b:25:d2:58:92:fc:64:03:7f:37:c3:
                    95:16:53:29:28:45:ed:ad:8f:6d:67:69:ad:02:31:
                    c1:8b:7b:11:a6:9a:19:ef:f8:7d:1c:30:9c:d4:d5:
                    63:a4:8f:87:1b:09:26:8a:5b:52:e8:15:e1:1c:3c:
                    8d:87:b4:10:53:5e:54:de:de:d9:18:99:07:85:57:
                    48:d7:0d:de:fd:96:c2:ff:90:2e:63:96:6c:c4:31:
                    1f:0c:de:7b:1d:38:58:cd:07:77:fa:23:79:33:8d:
                    3f:49:fe:4a:c3:0f:11:d6:51:5f:03:a2:93:d4:c0:
                    2f:26:3b:26:0c:7e:76:1f:53:14:50:dc:5d:ff:07:
                    69:b2:f4:95:5c:19:a4:49:ad:69:4f:2e:e2:a4:63:
                    30:03:a8:0b:31:11:f7:5a:d9:bb:32:64:51:06:f1:
                    fd:fd:76:3e:7b:b9:0e:30:eb:a0:96:a6:b6:65:a6:
                    fb:05:d1:cd:f5:da:a8:48:5e:47:46:6e:da:04:6d:
                    44:0d:c6:db:96:be:06:1c:59:d3:eb:77:a4:cd:13:
                    89:7e:d1:85:44:6a:35:2f:b8:b9:14:db:1c:3f:50:
                    90:c2:5b:21:19:c0:25:c8:a9:3d:30:6b:f3:55:8b:
                    ce:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:68:F1:1F:8E:3F:A8:0D:AB:F3:AF:56:5E:30:17:3B:62:A4:51:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/9ea4cf00-8a06-3820-829d-bc31538b7381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.38.0/23
                  136.228.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:eb:66:4f:d5:f0:84:1f:71:9c:3f:eb:d4:66:ca:62:c3:fd:
         9f:28:11:c3:49:88:ed:51:a6:b5:f9:06:95:b4:e8:f9:5e:13:
         88:19:35:a1:85:14:fb:e3:01:65:07:5f:5f:a8:01:b1:49:e7:
         f1:4e:5c:27:48:e0:a6:a8:79:49:93:cc:00:fc:c4:27:93:fd:
         66:14:2e:d2:98:08:f0:13:09:26:58:ab:34:1d:4a:b0:02:b7:
         62:93:29:b4:e1:49:a3:bb:4f:77:94:d0:e1:65:92:c6:94:5b:
         6e:2e:06:4b:3b:53:34:fc:29:a3:9b:5b:1e:bf:ad:91:69:76:
         96:8e:1c:5a:3d:f9:ad:b8:ba:61:a3:71:db:7e:3d:e8:18:b4:
         af:39:ac:33:ac:99:c9:96:57:ec:ee:17:fa:f1:8c:27:8a:a3:
         a6:b7:17:ea:08:40:bf:cd:5c:e3:dc:00:79:fa:d7:a0:5a:0b:
         94:8a:60:4b:89:8a:e0:cb:34:1a:55:a8:fd:a5:92:c2:cb:70:
         0d:96:93:db:f4:43:61:6f:37:8f:1e:d9:aa:6a:27:c1:b2:cc:
         a2:f4:54:21:7e:b9:b5:82:ce:7a:0a:a3:98:5a:46:e9:93:bc:
         e7:68:73:3a:96:3f:a5:14:aa:db:87:21:5a:7f:6d:a4:14:1b:
         59:70:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:16:45 2025 by rpki-client