Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e3287e9e-b8bb-33d0-8721-3afe283b5c46.roa
File:                     e3287e9e-b8bb-33d0-8721-3afe283b5c46.roa (raw, json)
Hash identifier:          EuBCDoS47uaI1s2vLfmszgl2AHFIvpJ83pDKFj/iGgo=
Subject key identifier:   F9:AD:56:48:56:49:F6:56:AE:A6:5A:7B:3E:F1:C0:78:0A:1F:D9:3C
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584F49850B845C41DEF43AB36600
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e3287e9e-b8bb-33d0-8721-3afe283b5c46.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.23.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:0b:84:5c:41:de:f4:3a:b3:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b043fb96-172d-419d-8884-707cd901a13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e8:e2:ff:ea:2b:a5:ff:b0:4d:9c:58:e2:fb:
                    fb:e4:3c:5f:3f:e7:97:e1:6b:5f:48:c0:93:87:7d:
                    39:bc:18:1a:cf:bd:22:21:36:d4:9e:c5:d7:5e:40:
                    6b:46:8d:13:a7:df:6e:24:5b:53:b6:a0:74:d0:0e:
                    a6:1d:57:25:b2:e2:9e:af:a6:7b:f7:3e:69:43:1a:
                    55:0a:8c:a3:9c:78:e6:6c:50:86:3d:5e:a4:6a:31:
                    46:0e:28:c2:c5:b7:7a:ed:b9:3b:91:b3:61:42:a5:
                    50:35:25:37:5c:1d:97:9b:e6:be:cc:20:5e:4b:28:
                    6b:58:41:78:27:32:fd:e1:56:a5:ad:31:40:d0:f7:
                    28:f4:8e:61:39:4a:48:67:0e:16:8e:ed:87:de:ab:
                    91:31:06:a4:83:ba:88:19:40:6a:6a:b5:2d:74:85:
                    3d:a5:e0:8c:b1:8d:a6:60:dc:4c:6c:1d:0e:f9:51:
                    0d:5d:05:65:da:83:56:8f:96:63:af:07:89:de:12:
                    56:50:48:2b:35:7d:cc:31:0c:37:dd:de:38:d2:e5:
                    ae:c4:72:1f:63:76:de:d6:05:a6:02:a5:bf:2c:db:
                    70:5a:01:64:16:ec:f5:e6:b5:d9:3b:06:a4:d2:9a:
                    5f:88:7b:0c:c1:08:ae:07:ea:08:1c:89:63:dd:dd:
                    5e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AD:56:48:56:49:F6:56:AE:A6:5A:7B:3E:F1:C0:78:0A:1F:D9:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e3287e9e-b8bb-33d0-8721-3afe283b5c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a8:39:53:af:ed:53:38:b2:a0:68:16:24:5f:ca:88:05:6b:
         a6:6b:60:63:93:1c:e9:bb:65:8f:61:66:28:81:46:4f:72:1e:
         b4:5e:8d:2e:96:71:ea:15:26:d5:2f:fa:97:db:2c:46:a9:d9:
         6e:1a:97:08:4c:03:b1:43:7a:0c:f8:0e:16:9c:db:aa:13:87:
         87:e2:5f:41:32:31:63:88:22:1d:56:0a:1a:c6:81:44:25:a6:
         68:02:91:84:4a:ce:79:b8:96:f2:90:e7:b3:8a:fe:3e:70:12:
         85:1d:1d:f9:a8:3d:57:48:f5:00:bd:99:7d:a0:47:92:7a:af:
         d3:09:9d:a2:e2:ff:42:d0:fc:e1:f2:1b:9c:48:69:fb:9b:6f:
         24:cc:ca:90:b2:aa:5f:ad:6e:bd:00:85:af:cd:1e:15:de:22:
         95:56:0e:fb:74:74:04:e2:d4:bd:28:d6:a8:41:d0:72:aa:80:
         f2:7c:79:e7:57:c6:d8:e3:14:03:ee:44:21:31:0b:11:a3:d4:
         ab:d6:c8:fb:de:10:e1:a2:fc:fc:3e:1a:99:64:a7:54:98:63:
         92:a8:4d:65:ff:02:ce:10:68:9c:01:10:95:ca:e8:38:2d:a7:
         bb:70:eb:9e:d6:45:5a:36:1c:ec:67:c9:3d:f7:64:29:4d:82:
         01:bc:82:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhQuEXEHe9DqzZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjA0M2ZiOTYtMTcyZC00MTlkLTg4ODQtNzA3Y2Q5MDFhMTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eji/+orpf+wTZxY4vv75DxfP+eX4WtfSMCT
h305vBgaz70iITbUnsXXXkBrRo0Tp99uJFtTtqB00A6mHVclsuKer6Z79z5pQxpV
CoyjnHjmbFCGPV6kajFGDijCxbd67bk7kbNhQqVQNSU3XB2Xm+a+zCBeSyhrWEF4
JzL94ValrTFA0Pco9I5hOUpIZw4Wju2H3quRMQakg7qIGUBqarUtdIU9peCMsY2m
YNxMbB0O+VENXQVl2oNWj5ZjrweJ3hJWUEgrNX3MMQw33d440uWuxHIfY3be1gWm
AqW/LNtwWgFkFuz15rXZOwak0ppfiHsMwQiuB+oIHIlj3d1eSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPmtVkhWSfZWrqZaez7xwHgKH9k8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvZTMyODdlOWUtYjhiYi0z
M2QwLTg3MjEtM2FmZTI4M2I1YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBcsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6oOVOv7VM4sqBoFiRfyogFa6ZrYGOTHOm7ZY9hZiiBRk9yHrRejS6W
ceoVJtUv+pfbLEap2W4alwhMA7FDegz4Dhac26oTh4fiX0EyMWOIIh1WChrGgUQl
pmgCkYRKznm4lvKQ57OK/j5wEoUdHfmoPVdI9QC9mX2gR5J6r9MJnaLi/0LQ/OHy
G5xIafubbyTMypCyql+tbr0Aha/NHhXeIpVWDvt0dATi1L0o1qhB0HKqgPJ8eedX
xtjjFAPuRCExCxGj1KvWyPveEOGi/Pw+Gplkp1SYY5KoTWX/As4QaJwBEJXK6Dgt
p7tw657WRVo2HOxnyT33ZClNggG8gqg=
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:09:07 2026 by rpki-client