Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/a683fcd7-0f78-3d40-9b36-768300e92db9.roa
File:                     a683fcd7-0f78-3d40-9b36-768300e92db9.roa (raw, json)
Hash identifier:          YsXtY8B8JjLd/uU1bPwsvotjc86pme0EgSneIjE6XQI=
Subject key identifier:   84:B2:B0:31:B0:95:88:65:6A:5B:05:C6:AB:D9:CE:FE:0D:7E:FE:99
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F4328584D492A6D40E5951D87C78AEF80
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/a683fcd7-0f78-3d40-9b36-768300e92db9.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     212669
IP address blocks:        136.175.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:6d:40:e5:95:1d:87:c7:8a:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=a0085fb5-7b19-4a40-85f0-68edeed67d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e3:13:3f:5c:73:3e:03:75:9b:74:5b:1f:ed:
                    02:d3:16:60:fc:32:ae:8c:e1:e6:58:d8:08:82:fe:
                    f4:ad:d8:08:8d:d3:7e:1c:a0:74:fb:f5:19:bd:86:
                    fe:1d:ca:08:20:a6:dd:36:4d:ba:bb:4c:d8:87:d9:
                    fb:ba:4f:e2:87:9c:0c:c0:3f:89:20:f6:7d:3c:e2:
                    dc:f4:9e:26:ea:56:00:31:06:77:4a:fa:3e:98:5e:
                    5c:39:4c:71:26:5e:f5:ed:3e:aa:f0:31:d8:a0:77:
                    f7:df:6e:1d:9b:c8:94:cb:e3:38:7f:d8:a2:d9:ee:
                    06:fa:33:f8:55:0c:2c:9e:89:ca:ad:a5:7a:f1:12:
                    07:82:dd:0c:1e:7f:6e:43:af:1e:ad:fe:e3:db:6a:
                    8d:8b:d3:e7:6c:30:0a:1f:af:57:bc:93:26:a9:02:
                    85:ce:85:38:b4:1c:5a:ce:95:e6:90:79:60:be:81:
                    0b:3f:73:74:2b:d0:96:97:47:51:fb:35:24:d0:b0:
                    84:61:e2:f6:12:a9:93:14:7f:2f:84:37:1c:cb:53:
                    a0:b7:34:4f:2a:45:74:c5:00:01:60:d6:fb:19:fa:
                    eb:23:65:2d:49:c4:49:ff:86:b9:95:5a:18:1c:af:
                    9e:88:d6:be:c8:3d:98:7f:b3:39:34:4e:34:be:68:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B2:B0:31:B0:95:88:65:6A:5B:05:C6:AB:D9:CE:FE:0D:7E:FE:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/a683fcd7-0f78-3d40-9b36-768300e92db9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b9:01:c0:3e:9d:58:9a:53:1a:63:54:e9:d9:9b:1f:00:34:
         07:1e:98:56:5c:85:4f:f4:18:d6:66:b9:39:5b:ad:6f:de:e4:
         4a:6a:67:f6:28:0d:e9:7e:a6:41:a4:3f:e4:3f:ec:5e:13:1e:
         c5:7d:54:ae:85:d8:01:c6:f5:78:40:eb:b4:c8:4b:13:14:5a:
         9f:57:a4:06:5c:cd:ac:e5:db:36:17:8d:22:50:bf:09:c1:56:
         5f:4a:45:83:68:60:00:a6:df:41:9a:c1:1c:ec:a1:49:59:1b:
         5d:6f:cb:b9:1a:52:1b:97:52:91:f1:a4:d3:09:33:98:6e:99:
         d6:09:85:b6:7e:5a:3c:a0:59:ca:f3:27:51:c1:33:07:13:cf:
         ab:07:e8:54:40:08:42:0b:26:74:78:f4:2f:65:25:48:68:54:
         b5:f6:f7:05:a4:da:7d:89:15:db:81:ca:32:f9:c0:03:bd:b6:
         1d:fc:69:8b:46:0c:5e:97:cc:d8:89:08:00:78:4e:74:0d:ca:
         45:0d:ad:1a:1d:be:aa:10:7d:62:4e:7c:4f:0d:88:d7:8b:a7:
         14:03:dd:ba:2c:37:7c:c2:5b:9d:45:1e:83:72:4c:37:fe:1b:
         9e:d0:14:0a:d7:20:fb:45:9e:28:18:65:06:8a:6c:67:a1:e5:
         ed:72:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:55:49 2026 by rpki-client