Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/36f625bd-2f75-3d09-8ae3-662db7924431.roa
File:                     36f625bd-2f75-3d09-8ae3-662db7924431.roa (raw, json)
Hash identifier:          2ZOoHON46+sObSRplZjxhmMaDnW8aOYASpqc9t/WTqs=
Subject key identifier:   D4:28:67:1C:06:4A:B5:4A:04:41:31:94:C0:30:B6:2C:DC:78:85:5D
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584B8A2843EDEB121A037B5B1B00
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/36f625bd-2f75-3d09-8ae3-662db7924431.roa
Signing time:             Thu 16 Oct 2025 10:10:23 +0000
ROA not before:           Thu 16 Oct 2025 10:10:23 +0000
ROA not after:            Wed 14 Jan 2026 11:10:23 +0000
asID:                     14555
IP address blocks:        198.23.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:28:43:ed:eb:12:1a:03:7b:5b:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Oct 16 10:10:23 2025 GMT
            Not After : Jan 14 11:10:23 2026 GMT
        Subject: CN=e3ce0f9e-ad9e-41a9-8f1c-8a296edf999a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:99:c4:8d:16:59:d9:a2:5d:45:63:a1:1d:
                    b9:ce:f0:69:15:0e:b0:33:fc:07:8b:60:e4:1c:61:
                    b5:d5:1c:15:d9:d2:46:fd:d4:7d:8c:b4:a8:b8:00:
                    ae:bd:82:c7:01:65:db:87:d2:b0:7b:1f:04:9f:c6:
                    b0:df:bc:f2:cf:7b:00:1f:4a:32:21:37:d0:53:f3:
                    de:e5:65:53:5d:b4:91:1a:b1:67:f3:05:31:28:fe:
                    b9:32:c0:2f:48:6e:78:21:33:64:ad:fb:62:27:a2:
                    db:bf:70:05:8c:05:23:67:b5:35:d9:c8:3d:54:c7:
                    d7:4f:b4:e4:f8:3a:dd:f2:97:86:46:1f:cc:ce:79:
                    61:ba:87:6e:10:d9:b1:79:26:a8:b3:b9:1a:86:43:
                    b2:45:60:f0:c3:6b:54:ed:85:2c:06:31:b0:08:02:
                    b3:7c:30:9c:20:62:4a:15:39:3a:e2:60:24:ba:9f:
                    6f:b2:d4:06:74:dd:e3:19:33:d8:69:64:68:f4:1c:
                    be:7e:4d:07:a1:e2:92:52:f4:5d:da:f0:72:6e:bb:
                    0d:85:46:b9:69:34:7b:9e:1f:62:ed:14:36:51:4b:
                    47:91:b1:75:f3:0d:2d:46:e6:2c:e5:72:4d:93:2e:
                    10:1a:26:2d:9a:2f:fd:c0:dc:4e:bd:1a:a8:1a:3b:
                    ae:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:28:67:1C:06:4A:B5:4A:04:41:31:94:C0:30:B6:2C:DC:78:85:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/36f625bd-2f75-3d09-8ae3-662db7924431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:3f:3f:f2:4a:18:ab:0f:bf:0b:41:b1:d1:44:bc:98:08:a1:
         b6:b4:6d:b8:dc:c5:76:ba:dc:a8:cc:30:66:78:7b:bd:34:41:
         e9:e1:5f:e0:1c:c5:c7:ce:94:aa:1b:04:c9:fa:e3:8f:e4:e2:
         04:f3:24:ac:71:c9:b4:41:17:68:c9:93:8c:3e:58:06:32:23:
         93:69:10:be:dd:d8:eb:47:19:e8:8d:51:9b:81:e5:b0:06:9c:
         05:02:2d:51:36:99:df:42:b9:f0:84:13:24:97:df:81:d6:c4:
         b4:15:ab:72:10:4e:c2:a5:40:eb:aa:de:5e:e6:ee:16:bb:50:
         41:e6:60:d3:eb:fe:32:e6:83:76:cc:1c:d2:90:73:aa:32:3c:
         48:dd:67:42:4e:09:4c:25:09:2b:57:9e:0b:ca:5a:a1:73:df:
         f8:18:ba:6c:f6:8d:42:00:b6:7d:22:aa:8b:ba:a2:e2:b9:97:
         83:1d:c1:5f:aa:40:c7:b4:8f:5d:bd:24:5a:7e:c1:88:ac:62:
         00:af:f9:ae:ca:95:60:6c:cc:45:ea:d8:11:05:ba:1c:c4:5c:
         aa:f4:d7:47:46:e4:aa:a6:34:d5:73:5f:54:fc:7c:68:e9:4f:
         24:df:1a:30:97:39:2b:7f:ed:eb:61:42:7d:40:37:43:05:26:
         15:20:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:55:56 2025 by rpki-client