Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/cbb6ecb7-7567-3eb9-9b46-66501fc109ae.roa
File:                     cbb6ecb7-7567-3eb9-9b46-66501fc109ae.roa (raw, json)
Hash identifier:          e6/j4+/bg2liYqzrUd8FLcWYTMBhfTx0y07WlUuz/eQ=
Subject key identifier:   0F:CD:2A:36:18:76:63:23:18:B6:AD:29:BC:40:BF:23:56:4C:11:A3
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F4328584F093CD856BB6A5840F6406800
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/cbb6ecb7-7567-3eb9-9b46-66501fc109ae.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        193.149.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:d8:56:bb:6a:58:40:f6:40:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=baaad966-ecca-48d6-88ac-fa88dda7976b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:72:55:d1:1d:a6:ae:fa:42:d9:fa:fe:1a:
                    5c:19:d4:20:bd:dc:ca:f5:0e:c8:2f:bf:ef:4c:f6:
                    f2:20:ee:4e:f0:85:38:50:b4:6d:0b:06:40:1e:75:
                    24:b2:44:42:33:da:4e:ce:4e:8a:0d:02:d3:0f:88:
                    c0:29:7b:8a:d2:0c:a0:06:30:08:7b:24:c8:c7:c5:
                    b5:dc:64:28:8e:94:9f:fb:68:a3:38:fb:1f:6a:28:
                    8e:d8:fe:bb:e3:f2:15:0f:55:f6:15:0b:55:55:ee:
                    0f:ed:7a:4e:da:1f:cd:88:f7:d1:3c:24:d5:56:9b:
                    9e:b4:ec:6c:5b:9b:58:04:c3:e9:39:f2:74:4e:ec:
                    f7:c7:6a:eb:e9:f6:d3:20:10:fe:f2:a0:c2:37:1b:
                    d9:f6:e9:47:fb:84:1d:2c:63:8a:9d:37:f1:a1:b2:
                    0c:ed:46:75:8a:df:aa:c5:b1:cc:aa:a7:fa:09:70:
                    3a:36:c5:d9:ac:af:ca:8c:7d:f1:71:d5:c1:b3:f8:
                    e3:0a:38:76:25:f9:22:d4:3e:fb:f9:6d:75:05:c1:
                    67:be:ac:31:96:88:1b:01:60:68:fc:43:5f:22:e6:
                    49:0d:c9:f0:d5:b9:ad:f1:5f:96:f6:ca:be:b7:eb:
                    6e:99:9b:5d:f5:a0:75:bb:5a:6d:85:86:e4:af:bf:
                    87:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CD:2A:36:18:76:63:23:18:B6:AD:29:BC:40:BF:23:56:4C:11:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/cbb6ecb7-7567-3eb9-9b46-66501fc109ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:57:38:87:7e:56:52:02:ad:dc:b7:61:56:3d:f4:4d:1c:97:
         bd:9a:d5:4d:4c:b8:7d:98:3b:04:bb:b1:af:0f:92:05:71:48:
         0b:71:aa:41:89:59:b0:61:ed:8b:95:a5:9c:03:09:6c:9c:74:
         48:89:54:c0:e9:d7:7e:56:8b:0d:e0:8a:89:6d:da:30:45:a1:
         46:75:51:bf:96:b3:94:4e:08:29:a5:79:95:a4:93:ac:5a:f8:
         48:d9:da:2f:03:ae:01:bf:f3:74:54:65:3d:0f:22:05:6e:90:
         07:73:c5:cc:33:92:c1:b5:3d:2b:ba:c2:a3:e6:4a:7b:04:d9:
         1c:45:00:b0:37:f6:fe:e3:b7:84:20:34:ae:9d:41:0c:b9:38:
         bd:89:5e:6f:56:97:33:2c:56:54:5d:64:17:70:8d:a3:ee:6e:
         93:07:c8:e9:41:86:94:fb:76:9e:a8:99:bb:ac:5e:6e:f0:e6:
         57:6c:f3:91:91:8c:18:72:a6:6e:fc:7e:c4:e3:10:0b:da:2d:
         cc:e3:99:6c:80:a4:c3:9b:18:de:4a:cd:02:55:e1:10:fa:b0:
         cd:9d:d6:67:f1:a6:de:02:13:a1:d9:39:5f:94:dd:20:59:63:
         d4:6d:43:33:f9:03:bd:89:e0:4b:08:70:f2:76:8d:bf:13:85:
         dc:7c:23:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:53:57 2026 by rpki-client