Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/635c034d-6d0c-34f2-849b-d85c78053351.roa
File:                     635c034d-6d0c-34f2-849b-d85c78053351.roa (raw, json)
Hash identifier:          c/G6VEqD5keqlzauvXpnbYUkHPtlfLck7X94Oeu9jNw=
Subject key identifier:   53:E4:5B:BF:5A:82:C3:8F:CC:39:BF:3E:68:E7:B6:7A:CA:B6:8D:9E
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584DC830402B787347D52D01C280
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/635c034d-6d0c-34f2-849b-d85c78053351.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        136.184.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:40:2b:78:73:47:d5:2d:01:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=0dd17f9d-1ecc-4b8c-ba19-cd648ab64521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:07:c7:07:b5:c2:c3:42:43:bd:95:37:76:bb:
                    2a:d8:92:3f:5e:fd:b5:e2:2a:6f:6c:82:21:f5:bb:
                    f8:16:77:35:47:6b:48:f0:c8:25:70:03:88:1f:58:
                    de:58:4e:ba:e8:64:a1:1c:08:30:1e:c1:bb:57:6f:
                    05:9c:5c:17:aa:6e:95:79:5b:bb:42:fe:25:1b:48:
                    59:7b:ee:2c:8e:00:1e:90:cb:07:f3:aa:21:84:bc:
                    f1:53:cc:9f:a2:0c:80:df:31:99:82:1a:73:db:0d:
                    f2:44:17:fe:8b:1f:4f:10:5a:75:80:30:e7:c1:19:
                    02:56:ec:44:f1:0f:bc:cc:d1:ec:07:a6:66:2b:63:
                    39:87:b3:a1:d8:f0:cc:de:ff:5a:2b:36:01:0b:77:
                    23:15:75:13:29:4f:64:3e:3c:90:1c:d2:b4:ff:de:
                    79:26:6d:a8:d1:6d:0a:5b:4d:5a:ce:da:95:45:6f:
                    66:9b:56:d2:70:75:e3:58:76:48:25:f9:f6:51:63:
                    53:1c:01:b7:20:fc:c0:ca:b7:4a:32:9b:e0:60:21:
                    5d:d4:de:97:d2:45:0a:a6:7e:8f:68:d1:1b:65:8f:
                    86:af:7a:79:98:c8:8a:a2:ca:d1:4f:8a:42:1e:81:
                    88:c4:65:c5:ac:12:b1:58:08:8f:ea:75:23:99:3a:
                    05:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E4:5B:BF:5A:82:C3:8F:CC:39:BF:3E:68:E7:B6:7A:CA:B6:8D:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/635c034d-6d0c-34f2-849b-d85c78053351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:49:8d:25:e8:39:d0:cd:74:d1:fe:18:f6:d5:00:96:bb:51:
         24:b1:c8:5f:ff:13:d9:fc:fc:c4:5e:f4:0b:4e:13:5e:15:63:
         02:a4:b0:d0:59:3b:8f:4f:10:cc:52:2f:00:84:2e:52:2c:22:
         92:bd:10:95:9d:0b:ac:d5:6e:a0:1b:aa:91:46:4c:48:12:6a:
         19:4f:88:74:b4:da:60:60:1a:34:02:cf:3b:cb:23:44:69:a8:
         21:68:ec:55:62:d4:3d:da:c4:83:7b:27:70:f2:01:5f:5b:50:
         4c:1a:16:d3:5c:4a:95:f0:2a:ef:28:7a:66:d5:e1:96:4f:6e:
         8f:49:37:4c:d4:22:b4:a5:49:d5:e6:cf:ff:81:08:95:f0:41:
         c2:1b:37:30:01:41:8b:2a:9f:22:26:f6:42:04:ff:0f:ad:25:
         09:6f:05:6d:8a:c4:c3:e5:37:95:56:a2:5e:9a:5c:9e:58:1a:
         f2:8e:34:1f:22:cb:14:3b:d0:a3:a6:8b:c7:af:17:9c:03:94:
         41:51:a6:3e:80:76:dd:0c:2c:5a:6f:9f:1e:13:55:df:39:48:
         c8:c5:3f:d2:2f:a2:b8:a1:e8:eb:c1:76:65:c0:fe:b8:a6:fe:
         58:a5:a5:24:e1:12:9c:e3:41:4b:a7:d9:b6:f9:60:e4:29:3c:
         a2:b3:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:53:58 2026 by rpki-client