Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/30f6ce24-f2bf-346b-a0f8-e7d063fdd093.roa
File:                     30f6ce24-f2bf-346b-a0f8-e7d063fdd093.roa (raw, json)
Hash identifier:          6UoyzDSA3ViGCCb8ixSQhLQoVmbYn+/+BSckOKJ/nKQ=
Subject key identifier:   94:8F:49:7B:28:E9:A2:59:F9:69:60:3B:2B:64:98:54:97:E5:64:45
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584F497CE02810A837852C03DCE4
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/30f6ce24-f2bf-346b-a0f8-e7d063fdd093.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.23.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:e0:28:10:a8:37:85:2c:03:dc:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=02cea2ea-236c-4bd3-b555-6dfb33bd1a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c8:7f:99:41:b5:b7:5f:7e:f5:47:28:ec:02:
                    a9:57:32:fc:6b:dc:6f:b8:d7:01:8d:68:24:df:1a:
                    35:45:2e:7d:65:a9:30:90:56:da:5f:5b:15:14:32:
                    24:cf:3f:a0:8c:65:33:bf:2d:13:96:2d:5f:4f:b6:
                    3a:b5:48:2b:f4:11:bd:ed:96:5f:9a:d3:da:89:44:
                    b0:74:b2:7b:7f:8d:30:50:12:7c:9b:ff:ad:ba:f5:
                    18:5b:85:e6:db:7f:8d:28:3b:a6:e1:14:f3:b0:c4:
                    61:e1:ab:da:94:6e:27:6b:a3:4e:29:25:c3:eb:55:
                    25:3b:61:53:97:70:d3:d5:37:85:f1:77:c8:16:01:
                    c3:97:32:db:13:1e:26:f0:42:40:2e:e8:ca:bc:0f:
                    97:da:74:b0:4a:04:fd:15:06:78:b2:61:bb:84:6a:
                    de:17:ea:cd:dc:33:5b:f3:6b:6f:76:82:f7:4b:7c:
                    a5:c6:a3:09:f3:22:b7:e5:ad:3b:32:31:86:fc:a1:
                    74:c3:1e:84:e2:b7:b4:94:31:52:72:a7:a1:45:05:
                    c8:62:f9:06:23:bc:b2:44:33:71:b3:db:d5:19:71:
                    ba:57:5d:0c:5d:ae:1d:8f:eb:b7:b8:b6:58:ad:cc:
                    c8:f8:6c:06:29:4c:d2:08:e1:cd:de:d2:18:f5:e8:
                    bd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8F:49:7B:28:E9:A2:59:F9:69:60:3B:2B:64:98:54:97:E5:64:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/30f6ce24-f2bf-346b-a0f8-e7d063fdd093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a0:7b:f6:9c:b7:0f:0e:e5:81:d9:79:f0:86:9c:34:4a:53:
         63:7c:9c:e9:fb:19:19:1a:d8:fc:5c:00:fc:49:7f:70:d7:66:
         3f:7d:5c:a8:9c:92:46:1a:a8:c7:0a:59:92:59:44:9a:be:87:
         2b:25:24:84:a7:04:cf:a0:a7:c1:9b:3d:d5:da:f6:0c:cc:fa:
         ca:4d:28:4c:ae:36:46:17:cf:c9:e1:4a:64:9f:9f:1a:cf:4e:
         47:a0:83:fe:ab:ba:69:ae:01:63:a0:e5:ad:2a:b1:33:43:b5:
         aa:b9:a0:bb:d4:07:03:18:b4:34:da:6f:9d:70:c9:11:65:8b:
         1c:b5:55:02:53:0b:16:d7:85:77:24:33:8e:4d:5e:2c:b5:77:
         c9:c4:b4:95:1d:66:86:b5:8a:12:9c:a6:b3:b7:1c:fe:1c:f4:
         6b:fe:4c:36:52:c8:ef:1c:12:3c:7f:99:48:b6:6e:22:a4:b6:
         cb:cd:b0:db:7d:b3:82:36:c8:19:8b:64:d1:76:8d:11:f5:f0:
         65:f2:ea:5c:8a:ec:0e:43:6e:5f:03:c5:c1:ff:f9:f2:54:e3:
         0f:29:85:cd:e5:bc:9d:0c:5a:2b:9b:45:7b:3b:27:31:91:c3:
         db:06:11:48:d9:be:6c:55:1c:24:8e:83:2d:26:ca:01:3f:e7:
         9a:37:50:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:57:16 2026 by rpki-client