Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/152ca712-4e00-328f-b731-4f31529ac513.roa
File:                     152ca712-4e00-328f-b731-4f31529ac513.roa (raw, json)
Hash identifier:          677Kh3UFsKVRwtyGshWQ5wxJbLxkHTSkVytlixMS938=
Subject key identifier:   1A:0C:9C:19:C7:FA:FC:1E:E6:B2:1A:40:FC:A9:2A:6A:F6:68:40:5E
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A84118D8D8A6547D54D0BC280
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/152ca712-4e00-328f-b731-4f31529ac513.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.23.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:8d:8d:8a:65:47:d5:4d:0b:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=aa9bae69-e2d4-4e63-be46-10255a59b714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:bc:16:5b:5d:3e:5d:b9:92:2c:fe:ad:e6:
                    f9:7c:26:b6:bb:05:87:51:a4:ae:e5:b1:fc:a9:c0:
                    f4:3f:64:70:7d:4e:dd:7a:58:63:c6:38:04:da:37:
                    ef:aa:6e:c4:3d:16:fa:b4:5b:fa:4f:7a:c3:50:fa:
                    d7:5a:af:75:09:c8:21:6a:b4:ff:78:28:d1:13:4c:
                    27:3d:82:73:b4:6f:4f:a1:cb:36:b5:7f:d0:6d:bd:
                    d7:48:cb:99:a1:8c:a8:fb:f7:6b:7d:b1:78:02:0e:
                    d9:28:f3:34:e3:ff:1b:cd:d0:62:9e:c7:3e:00:61:
                    c3:1e:a6:6f:ab:d1:b8:c1:0f:5a:6b:ac:0e:d5:ce:
                    70:7e:16:19:5b:81:c9:92:ef:17:43:0f:68:2b:d9:
                    d7:6d:46:13:29:57:61:51:8a:35:02:11:e1:93:20:
                    5f:d3:16:c5:02:7e:9c:69:61:cc:70:78:cb:17:db:
                    36:84:75:2d:7a:aa:e2:8d:db:d3:ec:ad:50:37:0a:
                    92:f5:58:2c:a3:31:ff:11:c7:90:ab:3e:c2:ce:ff:
                    5c:44:36:99:34:c4:41:44:0a:da:14:15:fd:0b:a9:
                    31:e2:de:b5:c8:bd:aa:f7:a7:db:23:df:0d:9b:07:
                    84:1d:11:01:a4:4e:e3:26:96:66:82:dd:05:52:82:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0C:9C:19:C7:FA:FC:1E:E6:B2:1A:40:FC:A9:2A:6A:F6:68:40:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/152ca712-4e00-328f-b731-4f31529ac513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:7b:41:48:de:19:ab:ab:be:52:0c:55:28:42:47:2b:0a:0c:
         a3:a0:ba:ce:53:e4:3b:a7:46:1c:66:57:e4:2a:72:b7:03:3b:
         8b:8f:47:f1:12:69:0e:bd:18:a8:fd:8d:bc:4f:e8:c0:d4:86:
         c5:2f:5b:9c:2d:93:51:e6:e8:b0:54:b5:64:0c:84:bb:80:3c:
         c9:d8:e7:01:04:39:33:98:00:0a:27:24:9c:45:bd:af:1f:96:
         81:26:6b:4d:cf:33:53:09:0a:1d:04:ea:b8:1b:12:b6:53:34:
         7f:a5:7f:ea:98:4a:79:39:d0:b9:02:8f:a7:ba:da:65:7d:62:
         7d:39:08:10:d4:86:6f:b9:58:2a:a7:0d:c1:27:2d:e6:6f:4d:
         83:f9:3b:15:99:63:47:6a:00:d9:03:8c:b6:53:6c:1f:31:07:
         9e:66:de:09:86:a3:b2:4e:31:91:f1:4f:81:57:d5:f9:4b:53:
         fc:b5:9f:3c:4f:a0:f9:45:88:38:78:ec:ed:f5:6b:bc:13:ae:
         c9:83:e8:6b:4b:39:97:5d:e1:50:92:42:13:5b:9f:01:fc:79:
         db:f0:14:c0:23:27:37:4c:c2:15:3f:f9:0d:89:62:aa:8c:07:
         1d:d9:b6:81:67:a0:34:8a:c8:43:fc:88:2e:49:e7:29:c2:3e:
         1c:4e:5e:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEY2NimVH1U0LwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YWE5YmFlNjktZTJkNC00ZTYzLWJlNDYtMTAyNTVhNTliNzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBm8FltdPl25kiz+reb5fCa2uwWHUaSu5bH8
qcD0P2RwfU7delhjxjgE2jfvqm7EPRb6tFv6T3rDUPrXWq91CcgharT/eCjRE0wn
PYJztG9Pocs2tX/Qbb3XSMuZoYyo+/drfbF4Ag7ZKPM04/8bzdBinsc+AGHDHqZv
q9G4wQ9aa6wO1c5wfhYZW4HJku8XQw9oK9nXbUYTKVdhUYo1AhHhkyBf0xbFAn6c
aWHMcHjLF9s2hHUteqrijdvT7K1QNwqS9VgsozH/EceQqz7Czv9cRDaZNMRBRAra
FBX9C6kx4t61yL2q96fbI98NmweEHREBpE7jJpZmgt0FUoI9kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBoMnBnH+vwe5rIaQPypKmr2aEBeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMTUyY2E3MTItNGUwMC0z
MjhmLWI3MzEtNGYzMTUyOWFjNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBcgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEx7QUjeGaurvlIMVShCRysKDKOgus5T5DunRhxmV+QqcrcDO4uPR/ES
aQ69GKj9jbxP6MDUhsUvW5wtk1Hm6LBUtWQMhLuAPMnY5wEEOTOYAAonJJxFva8f
loEma03PM1MJCh0E6rgbErZTNH+lf+qYSnk50LkCj6e62mV9Yn05CBDUhm+5WCqn
DcEnLeZvTYP5OxWZY0dqANkDjLZTbB8xB55m3gmGo7JOMZHxT4FX1flLU/y1nzxP
oPlFiDh47O31a7wTrsmD6GtLOZdd4VCSQhNbnwH8edvwFMAjJzdMwhU/+Q2JYqqM
Bx3ZtoFnoDSKyEP8iC5J5ynCPhxOXgs=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:18:24 2025 by rpki-client