Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/3d5005da-e3e6-3151-ad4f-bf4b84764058.roa
File:                     3d5005da-e3e6-3151-ad4f-bf4b84764058.roa (raw, json)
Hash identifier:          71Juyza757u+eGGpMekkXnWuAlTmgqBJ4Caolczj8pI=
Subject key identifier:   65:CC:FB:6D:53:7C:42:D9:E8:D2:E3:37:1B:0D:B7:1D:38:27:EB:23
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A8412295390104A8595D7EF00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/3d5005da-e3e6-3151-ad4f-bf4b84764058.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.23.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:29:53:90:10:4a:85:95:d7:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=93c1f7f7-b675-49ad-ad07-a59b25c29614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:60:3c:a9:dd:fb:66:a3:f4:f6:4a:dd:0c:25:
                    3f:98:c8:eb:12:7a:78:bd:29:b1:72:82:90:7b:70:
                    60:d4:5d:fa:c8:99:7d:f9:e6:67:d3:01:4d:ca:54:
                    52:d3:53:21:0b:00:8b:3c:9e:e2:ae:af:20:48:48:
                    f8:39:30:b8:c5:84:9c:93:90:fb:d1:02:5b:48:b3:
                    9c:5d:47:a6:52:ea:eb:f0:80:46:a6:63:cb:43:13:
                    d9:21:a1:3a:74:a7:8a:e2:4c:bf:2c:96:17:ec:3b:
                    50:03:c3:87:23:f1:79:d5:1c:d8:a4:8a:e6:74:95:
                    1b:3c:f3:f1:1b:45:68:ed:99:0b:26:08:9f:46:13:
                    11:b0:34:18:08:98:34:b8:fb:9c:bf:05:d5:bd:50:
                    bd:d0:1f:02:a4:d4:cb:c1:d0:aa:c6:5d:ab:b8:23:
                    ca:5b:5b:4d:9d:c1:c7:6d:16:9b:a3:ce:8b:80:ba:
                    0f:2d:91:f2:5e:63:6c:64:b4:fd:01:52:55:e1:b8:
                    05:dc:f0:6f:37:e0:80:bc:d4:d2:a9:7f:46:10:cc:
                    1b:e6:7d:11:a4:5a:cf:7e:e0:cb:2e:83:93:5d:b7:
                    4e:0d:a5:3d:6e:8a:5d:9d:77:39:43:46:43:7f:90:
                    fd:61:8b:03:9d:ae:fa:87:e2:e5:16:10:65:13:7e:
                    fd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CC:FB:6D:53:7C:42:D9:E8:D2:E3:37:1B:0D:B7:1D:38:27:EB:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/3d5005da-e3e6-3151-ad4f-bf4b84764058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:2c:83:4a:03:c9:43:9d:4f:4b:8c:d3:9d:95:f3:a7:f2:46:
         6d:1b:14:87:7e:73:a8:dd:39:3d:56:6d:6a:a3:2d:71:0a:c6:
         56:85:f9:85:eb:b4:3b:fb:d8:a0:1b:00:a0:06:3d:39:bf:88:
         c7:bc:2a:39:06:e6:19:9c:75:2e:80:71:05:c2:f7:3d:fb:94:
         26:93:7d:39:6a:8b:02:cc:21:ea:09:f5:03:03:76:64:9d:c5:
         b4:df:04:01:ad:72:e1:e5:af:96:07:66:59:43:d2:e9:58:e7:
         62:a0:79:a9:cc:da:61:ee:5b:e4:4c:b9:fe:a4:48:ea:98:62:
         f1:90:67:8f:37:9f:39:1a:80:d7:3b:22:9a:ed:b4:df:ac:64:
         79:13:3e:4d:41:bb:a4:be:c2:76:8f:ba:b1:1e:d1:e6:b1:c3:
         86:d3:92:00:b9:5b:65:06:37:6d:c2:55:d4:e8:eb:8a:97:a6:
         64:ee:49:9a:12:ab:6c:36:3e:cc:f7:d9:29:8d:9e:da:7c:ee:
         60:0d:99:13:64:5f:97:bb:1b:5a:b8:4d:c9:fb:49:fe:b0:19:
         ee:23:02:3e:c5:ed:ac:28:5a:c5:1f:a5:eb:e9:37:3b:3c:fd:
         6e:7e:49:f3:09:1a:7c:e8:34:e9:46:be:62:2b:95:44:be:9d:
         d7:ad:9b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:54:59 2025 by rpki-client