Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/42484843-9595-3355-9df2-ccc509dd9460.roa
File:                     42484843-9595-3355-9df2-ccc509dd9460.roa (raw, json)
Hash identifier:          bl4G9ZWvqgJjmrPvz40W5x9lDRn0V2JgWAPfoKfpEJk=
Subject key identifier:   2C:17:EF:E5:12:AF:3F:65:83:49:9A:A7:AD:97:88:C3:F1:57:E3:D5
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584F4984FE9A964323A2085FED70
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/42484843-9595-3355-9df2-ccc509dd9460.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.23.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:fe:9a:96:43:23:a2:08:5f:ed:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=61bc90f9-06c5-46e3-8d1f-43ec93de7ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:46:6f:81:0d:2d:04:bc:46:c4:b8:0a:c2:16:
                    00:4b:8a:79:05:13:1e:8f:43:63:cf:e0:1a:da:8d:
                    8a:07:b6:be:0e:ad:1d:ea:41:a8:5d:ab:02:95:10:
                    d0:86:6b:41:11:f3:1c:ce:5a:a4:ae:2c:98:01:5e:
                    bc:88:1f:f4:78:8d:f6:f2:fd:7e:18:a9:c5:3b:d4:
                    c0:c5:3a:35:d2:58:29:68:97:c1:6a:38:33:89:70:
                    b7:66:db:6e:50:f1:4c:ca:4c:f7:5e:a0:1a:56:e4:
                    fa:d1:17:69:08:5c:92:45:80:61:5f:f6:10:26:18:
                    8d:ea:e3:b5:26:b0:04:99:5a:a1:50:22:7c:60:a1:
                    a0:85:5e:31:08:25:18:3d:a1:af:3f:ff:aa:80:56:
                    14:82:a5:cb:9b:d3:bd:3e:cf:d3:5e:45:3d:03:5b:
                    84:84:7f:72:1e:c6:fd:36:28:c2:55:38:4f:f3:4b:
                    91:d0:7f:26:96:d3:0b:90:c2:37:26:e2:e7:2a:5c:
                    cf:4c:f9:e4:5e:64:27:92:83:1d:cf:19:7a:70:06:
                    82:68:b9:48:2f:30:53:85:03:5f:e9:6c:22:38:90:
                    b2:85:dc:4c:da:2c:48:be:b9:7b:90:f5:27:c8:36:
                    81:5b:c5:76:5e:f2:e3:fb:73:2b:71:3e:88:f0:84:
                    d3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:17:EF:E5:12:AF:3F:65:83:49:9A:A7:AD:97:88:C3:F1:57:E3:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/42484843-9595-3355-9df2-ccc509dd9460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:d8:e6:a4:90:28:5f:49:9f:32:37:f3:4a:ba:a5:5a:2a:fe:
         1d:80:74:40:01:58:06:6c:a7:b2:dc:29:1f:f0:29:4c:b8:71:
         8b:07:b6:6d:01:a1:71:1b:0a:ab:e1:c7:cf:23:47:6b:7a:3b:
         90:e9:7e:5d:ee:30:ec:70:a4:35:6b:e4:da:33:6d:ff:4d:d0:
         f9:bc:dc:87:d2:ce:71:25:0d:1a:f6:db:34:b5:05:08:62:71:
         ed:a2:37:31:2b:ef:ff:12:db:b3:59:bf:7d:e0:a3:43:9c:29:
         16:75:de:ce:dc:8b:8e:5d:91:0c:0f:e6:dd:bd:3b:6b:cd:51:
         65:c8:f5:a9:2e:22:d9:55:0c:96:8a:df:2b:d7:fa:43:2d:e3:
         23:ca:b4:56:60:86:b8:c9:2a:04:c0:b7:20:2f:c7:db:c3:42:
         3e:ab:1f:d9:75:1b:db:77:5c:0b:31:e7:eb:c6:02:1e:0c:0e:
         94:36:ac:98:63:ee:be:51:98:35:78:61:5b:d1:24:21:65:f5:
         ae:31:70:36:64:a4:bb:58:eb:27:db:da:b8:fa:9c:85:53:6a:
         46:97:ce:2b:06:e9:66:52:6f:bc:e1:32:af:ab:a2:e3:88:e9:
         eb:e9:b1:af:5b:c2:bd:54:d0:34:7d:98:96:60:cf:46:d7:c9:
         97:92:19:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhP6alkMjoghf7XAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NjFiYzkwZjktMDZjNS00NmUzLThkMWYtNDNlYzkzZGU3ZWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkZvgQ0tBLxGxLgKwhYAS4p5BRMej0Njz+Aa
2o2KB7a+Dq0d6kGoXasClRDQhmtBEfMczlqkriyYAV68iB/0eI328v1+GKnFO9TA
xTo10lgpaJfBajgziXC3ZttuUPFMykz3XqAaVuT60RdpCFySRYBhX/YQJhiN6uO1
JrAEmVqhUCJ8YKGghV4xCCUYPaGvP/+qgFYUgqXLm9O9Ps/TXkU9A1uEhH9yHsb9
NijCVThP80uR0H8mltMLkMI3JuLnKlzPTPnkXmQnkoMdzxl6cAaCaLlILzBThQNf
6WwiOJCyhdxM2ixIvrl7kPUnyDaBW8V2XvLj+3MrcT6I8ITTqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwX7+USrz9lg0map62XiMPxV+PVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvNDI0ODQ4NDMtOTU5NS0z
MzU1LTlkZjItY2NjNTA5ZGQ5NDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBc7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANTY5qSQKF9JnzI380q6pVoq/h2AdEABWAZsp7LcKR/wKUy4cYsHtm0B
oXEbCqvhx88jR2t6O5Dpfl3uMOxwpDVr5Nozbf9N0Pm83IfSznElDRr22zS1BQhi
ce2iNzEr7/8S27NZv33go0OcKRZ13s7ci45dkQwP5t29O2vNUWXI9akuItlVDJaK
3yvX+kMt4yPKtFZghrjJKgTAtyAvx9vDQj6rH9l1G9t3XAsx5+vGAh4MDpQ2rJhj
7r5RmDV4YVvRJCFl9a4xcDZkpLtY6yfb2rj6nIVTakaXzisG6WZSb7zhMq+rouOI
6evpsa9bwr1U0DR9mJZgz0bXyZeSGUg=
-----END CERTIFICATE-----
Generated at Tue Sep 29 16:47:16 2026 by rpki-client