Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3d176fe3-5cc0-31db-ac0a-835672685d6c.roa
File:                     3d176fe3-5cc0-31db-ac0a-835672685d6c.roa (raw, json)
Hash identifier:          IFRoxR/AIR+pDUB8fAUgKwWW4p3Htxp0hGmYkN1ZNPI=
Subject key identifier:   72:3B:B9:78:50:A8:25:97:DE:4A:A5:43:45:92:B8:87:92:D5:65:AD
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584E9A7FD67F154E437E495471C0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3d176fe3-5cc0-31db-ac0a-835672685d6c.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        136.245.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d6:7f:15:4e:43:7e:49:54:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=edc39153-838a-40ff-85bb-f95a0f691ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:26:32:98:24:2b:69:e1:fc:71:44:9e:59:d2:
                    a9:d8:51:c5:bf:2d:83:8f:ab:77:33:91:55:80:87:
                    05:e3:65:6c:8c:df:6d:51:39:7c:ed:b0:ab:2b:fc:
                    84:ff:1c:ad:9a:c7:d0:b3:ee:cd:3e:2e:6e:b9:41:
                    b5:19:e9:8b:65:ba:19:5c:a6:c7:65:60:fa:80:e6:
                    48:e8:1c:b4:a5:4c:43:1a:c4:fe:b2:f2:46:d9:ff:
                    8d:83:38:4b:f2:6b:60:fb:90:95:69:20:87:5c:6a:
                    a2:05:31:4a:60:12:52:c8:75:4e:77:b4:d9:f4:a1:
                    97:8f:00:5a:e2:f9:ae:7a:c4:5c:e4:64:65:71:fd:
                    66:12:fc:9e:ce:68:33:d3:9c:5c:d4:56:48:d4:01:
                    79:d3:95:1c:bc:d5:c6:ad:fb:a6:2c:82:3e:33:7d:
                    24:5b:35:9c:09:14:07:8b:7d:cb:e6:35:9b:fb:a2:
                    8b:34:bf:da:ad:31:a4:03:be:1a:b2:b3:f9:56:3d:
                    f2:d4:a7:6c:a4:0d:23:6f:52:8e:c8:ff:45:9d:56:
                    39:5b:ab:0f:f1:4d:40:04:0b:85:81:11:6f:be:6e:
                    c8:e8:51:78:07:63:a3:3e:d8:12:5b:e3:54:9a:f3:
                    f3:33:fd:33:88:3a:4d:64:9d:7f:31:31:a0:5b:26:
                    3f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3B:B9:78:50:A8:25:97:DE:4A:A5:43:45:92:B8:87:92:D5:65:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3d176fe3-5cc0-31db-ac0a-835672685d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.245.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:86:f9:cb:40:40:d3:99:d1:fe:a2:2c:9b:22:75:49:00:21:
         25:05:16:1e:ec:27:34:35:2c:ea:73:65:c3:48:9c:b4:36:cf:
         45:f3:fb:50:3f:2e:00:c4:9b:9b:e5:22:fb:10:69:2b:6a:14:
         c0:c8:76:e1:02:96:6f:5d:c2:00:1f:db:5d:0e:83:08:aa:5e:
         cf:3e:ac:85:02:91:73:c9:ef:c6:df:1a:f0:d4:67:21:94:e4:
         4b:c1:68:39:6c:24:d8:a0:f0:49:d5:d8:7b:49:09:9d:b3:09:
         f4:67:a4:aa:78:75:90:f2:d4:32:d7:68:36:d4:c0:f7:e3:b6:
         55:1a:60:af:cd:80:90:a9:b4:88:5c:34:8d:d4:3c:29:1a:32:
         3a:85:77:53:2c:76:95:d7:12:15:11:4f:37:82:e7:8f:d9:9d:
         5c:4f:25:75:5a:b1:58:12:64:43:75:4e:20:60:97:74:1f:ff:
         1c:9b:6d:85:84:00:da:d0:7d:f9:c4:8e:5b:cc:2e:20:09:31:
         93:e0:a6:b8:42:f3:68:d1:c1:7f:ce:ea:c2:38:de:c2:d7:9d:
         d3:75:64:6e:4e:ca:f1:40:9a:44:eb:43:e0:f4:8d:90:7c:1c:
         96:ab:81:d2:bd:38:65:6d:60:db:14:e8:e5:06:bb:44:e0:fa:
         c3:cc:87:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:06:50 2026 by rpki-client