Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/31cbf703-1c8e-324a-8b08-26fde1392750.roa
File:                     31cbf703-1c8e-324a-8b08-26fde1392750.roa (raw, json)
Hash identifier:          PF2/VYvUGLvrXQsiZzFMpo2ECF6EHEo4F+vKImIadZM=
Subject key identifier:   C6:BE:06:47:E2:7C:06:B8:70:BC:93:15:15:48:23:D7:AF:27:C6:CE
Certificate issuer:       /CN=3f36b13d-55d3-434f-95fc-91af494e0add
Certificate serial:       010D0C9F4328584D300A31411D3AC3482F47FDC0
Authority key identifier: DA:A5:40:61:2C:D5:5E:57:98:AF:02:4A:B8:7D:DA:12:A7:24:4A:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/31cbf703-1c8e-324a-8b08-26fde1392750.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     32225
IP address blocks:        136.228.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:31:41:1d:3a:c3:48:2f:47:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f36b13d-55d3-434f-95fc-91af494e0add
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=a98b2fa4-d138-47c4-8f0c-33d1d05b82fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:f2:b8:f7:d9:03:51:8a:2a:87:72:8c:3a:
                    72:f3:e5:56:60:06:59:a7:51:bf:2b:f6:8d:27:3e:
                    36:a3:77:91:59:d5:ce:ea:e1:cb:12:74:50:28:d1:
                    21:cb:3b:ce:32:7f:f1:3f:64:56:de:e4:fa:9e:3f:
                    ee:1d:a8:19:6d:19:06:9e:78:91:0c:5b:8f:bf:38:
                    65:a9:f2:c6:43:27:41:58:2b:c2:77:c1:ef:3a:b7:
                    1d:e0:af:cc:57:1d:83:40:4e:73:40:9e:b1:76:58:
                    37:68:cd:59:a6:d3:6a:a7:fd:b9:02:bc:e7:34:0e:
                    3c:84:43:ab:f1:e4:c5:ae:7d:89:64:45:c7:38:9c:
                    c3:14:0a:9e:29:42:52:1f:2d:1f:ba:21:b3:76:f5:
                    f1:79:ca:01:fa:d8:cc:7a:d9:b8:d4:33:d6:43:b9:
                    fe:cc:03:9c:72:7a:cb:7e:a6:00:2c:e4:7a:e8:5a:
                    02:e2:2e:3f:c6:16:a9:77:cf:e2:fb:e5:6f:d8:2b:
                    b1:0d:e3:a0:ab:a1:93:8f:6f:13:9b:77:0e:0c:5e:
                    3b:6b:20:dd:63:ea:ba:ce:46:85:72:31:58:f3:96:
                    e5:44:23:14:15:58:ee:1f:cc:47:b6:00:fd:32:eb:
                    5e:7f:85:de:06:a7:d7:b8:d7:f4:18:5e:3e:8a:15:
                    76:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BE:06:47:E2:7C:06:B8:70:BC:93:15:15:48:23:D7:AF:27:C6:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/31cbf703-1c8e-324a-8b08-26fde1392750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.crl

            X509v3 Authority Key Identifier:
                keyid:DA:A5:40:61:2C:D5:5E:57:98:AF:02:4A:B8:7D:DA:12:A7:24:4A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ca:a5:33:e6:d7:7b:20:c2:39:93:ad:97:01:c0:df:09:bf:
         b4:c5:65:cf:2e:25:f9:1d:a4:78:d6:7b:aa:1b:d0:e0:be:70:
         2e:78:d5:2c:10:01:25:7f:2d:68:ff:b6:d9:92:30:99:e5:95:
         0c:75:b3:71:d9:42:30:2f:95:81:f7:f9:76:15:91:9c:d1:f7:
         55:cf:3d:9f:df:d7:af:17:5b:30:d2:a0:61:a5:5f:2a:a6:fc:
         68:d7:74:a1:a0:22:68:7b:2d:0f:b7:6e:69:c1:c2:64:de:34:
         44:ad:b5:07:4a:f8:db:16:ed:16:35:2d:86:3a:62:25:8f:3e:
         e8:50:c9:df:a3:58:c8:25:5a:df:a7:0a:5e:87:25:b7:eb:65:
         95:4c:fc:fd:c0:d5:c2:fa:1d:ec:79:39:39:e9:79:1d:e8:74:
         a8:85:e8:26:32:64:a6:5f:85:68:0b:cc:36:31:1d:e3:78:1a:
         4b:46:4a:82:c8:59:89:d3:08:76:92:0c:fa:e8:c7:cf:11:ba:
         e3:15:d5:05:4d:c4:47:c2:d8:bc:e3:68:5c:19:01:f4:7f:5d:
         03:d2:6e:7c:8d:ec:a3:bb:83:b5:21:df:df:92:e4:18:c6:64:
         41:be:9b:3f:62:0c:b5:b7:3d:90:91:29:62:36:a4:14:e8:98:
         cf:b4:97:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:47:24 2026 by rpki-client