Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/40a6d6bb-41ed-32c1-91dc-72834cad1777.roa
File:                     40a6d6bb-41ed-32c1-91dc-72834cad1777.roa (raw, json)
Hash identifier:          h8sfopXL9aJyBjzglHquShiMzBCvfH6WtkZnM4gMNLw=
Subject key identifier:   E5:F6:39:ED:31:74:6D:44:C2:44:50:64:99:EA:A8:1E:F2:AF:13:B9
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584E059BD092E34FBBFF9BB66680
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/40a6d6bb-41ed-32c1-91dc-72834cad1777.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.23.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:d0:92:e3:4f:bb:ff:9b:b6:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=a3d5aa9c-f56c-44b0-9fd3-a75d6a35065e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:42:b8:ce:24:e1:59:0f:d0:59:7f:43:6e:
                    87:3c:50:87:a0:14:22:ae:f3:6b:31:58:0d:d7:cd:
                    ca:b1:33:1e:e4:f1:b1:47:d0:60:8a:54:75:9d:df:
                    7d:60:43:92:1e:6c:61:89:39:4f:64:bf:64:3c:39:
                    cd:b9:44:4f:1e:45:70:ca:9f:36:8e:69:96:42:12:
                    5f:5e:b5:20:79:87:5c:c2:fa:7b:ef:22:ac:9d:18:
                    18:0e:96:1b:f5:db:d5:b7:38:41:0a:b8:e6:b2:d5:
                    11:6b:51:54:a7:62:cf:dc:bf:79:cc:0f:fe:34:eb:
                    69:c2:92:4a:bf:3c:d0:71:55:02:d7:72:33:7a:36:
                    1e:ed:07:12:37:2a:7a:d2:f1:41:6c:22:f1:ea:49:
                    96:b8:82:56:b1:0c:eb:f3:e7:1e:bb:77:06:47:65:
                    00:5d:77:b1:9a:e9:58:df:56:87:9a:5f:f7:94:17:
                    85:d5:8a:2c:a8:9b:14:6b:85:44:95:de:69:7a:f5:
                    8d:bf:c1:57:bd:af:c4:bd:ce:c1:5f:04:01:e7:80:
                    c9:ae:92:40:07:80:84:0a:1c:bf:a3:88:c5:9b:17:
                    6d:89:95:bc:6f:8b:d0:7d:aa:76:f5:7e:9a:34:e7:
                    2a:d1:7d:82:6c:90:f3:ae:51:18:27:4e:0f:5e:cb:
                    1b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F6:39:ED:31:74:6D:44:C2:44:50:64:99:EA:A8:1E:F2:AF:13:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/40a6d6bb-41ed-32c1-91dc-72834cad1777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:19:51:7f:46:23:06:65:3d:89:1b:db:51:f3:b4:d3:b0:ff:
         0f:7e:6d:e8:d0:73:0a:13:a1:65:c3:85:c6:5f:87:9b:be:b5:
         73:05:f2:91:fa:2a:4b:84:07:91:89:8b:c1:41:85:74:bb:e9:
         31:63:7f:3b:fd:a0:7f:22:b4:24:c8:76:10:c5:1e:cb:f3:b0:
         5c:9d:19:f1:ed:54:95:c6:97:f7:78:c4:f9:17:0a:0c:3c:b7:
         ec:1c:72:8a:c3:71:33:ef:70:4a:f0:a4:b3:b4:93:12:a3:e7:
         1e:10:bd:d8:ac:04:c8:2a:8e:df:9f:cc:5d:a5:78:35:e9:01:
         23:bb:93:1b:c6:a4:a7:31:4c:1c:ed:75:37:bb:39:b0:36:1f:
         34:ca:38:47:15:4a:42:b6:8c:c8:b4:0f:f4:76:ac:c7:b2:62:
         38:1d:e7:01:e4:95:39:d8:50:1d:72:bd:1f:a0:17:da:95:37:
         92:45:94:74:1a:69:d5:df:84:69:ae:44:c6:6b:dd:89:dd:7d:
         55:55:06:15:74:49:e6:e5:3b:a3:a2:71:38:be:90:73:2b:e3:
         72:20:f1:bf:de:ad:a7:79:d4:c9:78:07:5e:a5:db:aa:10:2b:
         e7:22:64:f8:0e:82:0f:1f:88:5d:e6:16:4c:1e:00:15:4e:53:
         ed:33:dc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:58:39 2026 by rpki-client