Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4b5e978e-52c6-30d5-9a91-e81d31b5f758.roa
File:                     4b5e978e-52c6-30d5-9a91-e81d31b5f758.roa (raw, json)
Hash identifier:          FCekHkOU2KBDPo4Soo64lHwyFBTnDBhZpUxvBnqV3jo=
Subject key identifier:   EA:D7:16:10:A2:0C:FA:FD:E7:79:F7:06:86:14:20:BA:0C:2C:05:C0
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584D24E03E554A1D873C23095000
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4b5e978e-52c6-30d5-9a91-e81d31b5f758.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.23.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:3e:55:4a:1d:87:3c:23:09:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=f64109ba-4dc6-4762-99bd-85ff41f7fa7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:ee:f7:71:1f:6b:2c:3b:11:b6:0c:4b:46:
                    fa:c7:ac:f1:2a:b3:56:22:b0:66:a6:97:2a:11:2e:
                    86:20:70:75:2b:6e:12:bf:5e:d4:f3:18:20:93:ef:
                    bc:a9:04:c4:93:f3:2e:e9:95:ab:d4:1d:d3:9b:7e:
                    ff:c0:2d:ee:98:bb:bf:3b:26:d1:ed:b5:75:45:8a:
                    17:8c:3a:4b:9d:79:b4:ec:9f:bc:a0:fa:30:53:1a:
                    f0:54:d5:96:87:01:f7:65:a1:4f:18:75:42:31:56:
                    f5:f4:ca:09:e8:83:e2:ef:03:68:88:c3:7d:23:86:
                    7c:a4:c3:37:1d:cc:e9:5b:35:9a:82:7b:02:94:91:
                    44:10:d1:fc:6d:19:72:3c:32:f0:36:f5:00:81:d4:
                    89:d1:30:47:31:e8:eb:68:1a:1d:73:06:75:40:12:
                    c0:7d:aa:08:4f:39:f9:c4:ce:55:28:b6:cd:9d:4e:
                    36:24:9c:ec:1f:44:c2:36:82:f1:b0:ce:2d:58:a8:
                    dc:18:16:28:65:53:85:66:27:dd:e1:91:30:a6:cb:
                    5e:72:e7:32:28:e2:18:38:e3:25:ea:32:a0:8a:95:
                    fc:12:af:20:72:3e:49:de:31:4c:7f:8e:6e:21:1f:
                    fd:b4:0f:d5:b2:d5:f9:02:0b:98:9c:f8:2f:fe:16:
                    f7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D7:16:10:A2:0C:FA:FD:E7:79:F7:06:86:14:20:BA:0C:2C:05:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4b5e978e-52c6-30d5-9a91-e81d31b5f758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:20:64:70:a7:d9:dc:c9:08:a2:d6:80:6a:b4:6d:31:5a:5a:
         e9:f4:b4:d6:76:95:5e:91:c8:e2:56:e0:4b:14:b5:3c:82:aa:
         fe:89:f2:c5:f9:8f:49:9b:bc:8c:b4:ca:e1:9a:c8:8d:24:86:
         3a:45:6d:74:7d:d7:5d:90:fc:cf:ca:d8:d4:cd:dc:dc:2e:52:
         bd:97:a7:5e:23:12:9c:72:e8:c7:b7:15:b7:c6:64:ef:b5:3a:
         d6:15:6e:17:2a:f6:46:50:20:c9:9d:d9:88:9b:89:1c:45:98:
         7f:ed:22:9a:5c:30:4b:bf:91:86:83:75:03:38:ee:0b:2c:80:
         8f:76:40:21:31:04:7e:9e:89:6b:7c:0c:0d:4e:d4:ca:d6:77:
         73:77:7a:5b:42:10:e1:50:b3:f1:79:aa:a9:23:5f:fc:d1:fc:
         31:d9:df:97:79:39:1c:95:04:f9:52:b6:80:93:46:b0:f7:99:
         1a:d3:7f:31:1f:31:fd:a1:95:f3:2b:06:a8:83:13:04:7c:ec:
         05:85:96:ed:ba:5a:d6:99:2c:80:8e:1c:74:9c:72:b6:82:c9:
         4e:b2:b8:43:8a:aa:65:dc:14:e1:30:e1:e3:6b:ed:0e:50:cf:
         1d:62:d5:af:ae:8b:2b:ae:4e:a3:99:ee:ed:b2:72:e1:ab:40:
         90:82:7a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:31 2026 by rpki-client