Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ab0f9f8f-869a-3462-af04-ed5c0f9c1e27.roa
File:                     ab0f9f8f-869a-3462-af04-ed5c0f9c1e27.roa (raw, json)
Hash identifier:          TQ8q3+iHodaE4OBtmODCY0hihlMALOdqsNHIHxk0/jw=
Subject key identifier:   91:B4:13:7B:01:33:A6:B7:95:CB:01:9D:C5:C4:8E:46:9C:C0:91:1E
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285849A4BB5C63987BFAE019AAC300
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ab0f9f8f-869a-3462-af04-ed5c0f9c1e27.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:5c:63:98:7b:fa:e0:19:aa:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=c8cfe87d-da19-4a67-bdf6-20d363510c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f9:7f:60:3b:f4:68:ca:68:e5:56:db:7c:5e:
                    bc:90:74:81:73:12:e8:1a:e2:28:8e:7c:fa:56:f1:
                    23:19:f1:19:e8:c4:ae:75:2d:76:14:28:f1:35:b3:
                    2e:72:32:a0:ac:9b:f0:99:33:b8:3b:81:bd:60:cf:
                    1e:11:64:2a:1b:f6:6d:af:7c:c2:9b:e0:33:cb:2e:
                    e0:4d:b3:85:91:12:4a:b5:86:0c:19:ee:b5:d5:c8:
                    94:bb:c9:9a:ad:63:55:65:77:6c:e7:33:e8:4a:67:
                    a9:04:c3:75:7d:a8:a0:cc:d8:5e:15:86:26:c0:21:
                    cd:5f:25:c0:80:2d:7c:56:6b:9a:29:ce:41:b8:d6:
                    36:cc:f1:01:8a:8c:64:91:05:3a:e2:f3:b8:b2:f4:
                    93:06:27:65:dc:0a:46:f5:c8:23:31:e0:e8:d2:8a:
                    33:08:1d:ba:17:81:7d:5b:08:e2:11:99:06:5e:6e:
                    5c:bf:69:2e:65:38:9f:9a:3c:0c:74:3d:e8:66:1e:
                    70:80:0a:15:e1:ed:1f:de:d9:5e:9a:8a:53:f0:0b:
                    8f:77:d5:4b:4f:89:46:18:8e:29:e4:56:34:ee:73:
                    07:9b:d9:db:a4:aa:75:0a:d0:78:8c:93:99:97:3c:
                    cb:02:76:bc:4e:22:29:d7:7f:2c:e3:bf:4c:0f:2f:
                    b9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B4:13:7B:01:33:A6:B7:95:CB:01:9D:C5:C4:8E:46:9C:C0:91:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ab0f9f8f-869a-3462-af04-ed5c0f9c1e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:67:a3:08:98:e0:97:2d:bc:f7:8e:cd:1d:0a:09:01:4f:13:
         04:c4:5d:08:e4:6d:76:2a:41:c0:8b:21:1b:bd:f0:a1:9f:b2:
         a3:bd:19:d2:86:d8:e3:75:aa:f7:f4:3c:ac:86:1b:f9:27:b0:
         a5:71:a4:8a:cf:83:6b:fb:24:b6:d4:95:04:bd:85:88:40:a4:
         fe:67:e7:7e:fa:3a:61:24:03:78:96:b9:6c:a4:4b:ea:ba:9e:
         42:65:63:60:a4:03:f5:01:4b:f8:f1:18:7a:03:9b:2b:db:b7:
         a4:c1:a2:27:2c:28:04:bf:2a:ed:25:2c:e2:8c:46:69:dd:d1:
         e4:90:16:b0:b1:6f:76:2a:39:61:43:ae:fb:d3:71:23:0b:30:
         ef:54:a9:2e:2f:1e:78:48:81:76:7f:0a:a5:0b:dc:1c:61:d2:
         84:74:69:c9:f0:00:c5:61:f4:45:5e:1d:e6:f9:f0:47:fa:1b:
         ea:5b:dd:03:c6:02:a3:0a:b6:4c:c4:e6:52:21:6c:4a:1d:26:
         47:df:ad:cb:f2:ba:95:3a:c3:21:cb:ee:9d:8e:68:b3:a5:ff:
         fb:96:92:de:c5:82:e2:79:89:61:16:fb:d2:cd:92:21:7a:dd:
         7e:79:d2:49:5a:a8:8a:c9:af:d3:fc:cb:11:83:66:ff:cd:c7:
         bf:7a:5a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:12:47 2025 by rpki-client