Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/548b9700-009e-3591-8849-3e80b70ad53d.roa
File:                     548b9700-009e-3591-8849-3e80b70ad53d.roa (raw, json)
Hash identifier:          1j4HbdzxLnjGvk6MAc5+BZ4Iq/UzVyDNbpcOmMMQhcE=
Subject key identifier:   FC:BC:AB:B3:69:1D:79:B3:27:C4:57:6C:B4:46:FC:CF:95:23:C8:B8
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A7E7B7B697657DB3153370700
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/548b9700-009e-3591-8849-3e80b70ad53d.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:7b:69:76:57:db:31:53:37:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=47b9316c-26de-4bed-8d8c-796528125326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9d:ed:cc:39:45:5c:44:27:25:f2:1e:13:44:
                    7a:70:c3:cf:aa:2f:27:8b:b1:9c:e5:e1:e3:8b:f3:
                    cb:2c:a2:ca:e6:5a:eb:fd:89:f8:27:40:b1:5c:f5:
                    35:b5:5f:a7:15:d4:93:15:81:e2:95:b5:99:7c:3b:
                    0e:ea:d3:08:72:6f:51:c1:ca:7d:95:78:b9:50:4b:
                    d2:f4:43:b3:fc:93:54:0b:1e:7d:56:67:62:43:47:
                    a0:fa:5e:96:1c:b6:67:58:1a:2b:92:e9:a4:e2:ab:
                    e7:b9:0b:34:44:3b:cf:42:01:02:7e:95:ca:d8:19:
                    e2:7d:2d:a0:45:85:0d:fd:b9:cc:9c:f7:31:dc:55:
                    0e:4e:ed:7a:2b:b1:d9:2f:0f:06:2c:53:fa:1d:54:
                    80:2c:bd:bb:48:e1:6a:bd:0c:9d:60:74:98:d1:13:
                    1e:d8:bb:1b:56:3d:d3:17:92:dd:a4:e6:74:10:e3:
                    df:72:74:ba:03:71:a6:c9:1e:0e:e9:64:91:6b:34:
                    14:61:c9:40:e6:33:aa:4f:1e:a8:4a:03:c5:41:40:
                    cf:bb:6d:02:36:b8:da:30:38:d6:9b:f2:1c:07:da:
                    9a:3f:6c:b7:95:7e:e5:95:90:69:74:9a:3b:fc:e4:
                    25:5e:1c:8b:92:06:0a:ca:4c:fb:74:5f:b6:04:0d:
                    ab:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BC:AB:B3:69:1D:79:B3:27:C4:57:6C:B4:46:FC:CF:95:23:C8:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/548b9700-009e-3591-8849-3e80b70ad53d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:23:a8:19:db:da:47:36:82:de:56:e3:45:76:af:f8:1c:7a:
         a6:96:70:38:98:1f:6e:d2:71:f9:c7:71:4c:02:94:32:bb:f7:
         50:35:26:45:32:e4:17:79:ff:29:d7:9b:e6:b2:7e:ac:19:17:
         a7:58:5b:b0:42:7a:bd:f2:dc:2f:98:bb:20:0c:78:53:be:25:
         34:01:36:a9:04:fd:4e:de:0a:85:e3:21:3d:c5:e0:08:d7:36:
         79:f9:86:32:ac:69:dc:61:83:46:13:da:98:8a:97:9d:2b:f5:
         87:74:a0:76:36:90:37:e1:f3:0f:d9:fd:08:b3:6f:5b:d5:6b:
         b3:c8:de:a3:c8:e8:75:90:71:1a:14:69:3e:e7:f0:e1:ca:fe:
         4f:60:41:94:92:ed:9a:29:5c:ef:0b:69:4b:6b:34:fc:87:aa:
         1f:d1:10:5b:69:38:7d:14:55:67:f4:9a:20:89:13:f3:f7:17:
         65:28:2b:96:47:3c:b8:95:2d:72:38:ce:25:11:df:2d:46:70:
         38:af:af:4e:ec:c7:cd:7e:10:d2:b2:14:e1:42:aa:3c:df:69:
         02:a7:c9:80:2b:8c:5c:f8:b8:ad:c9:2a:dd:45:91:3f:94:56:
         3a:1f:78:50:27:cc:da:16:4f:01:0d:99:0a:c6:89:82:26:c4:
         4f:06:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:05:23 2025 by rpki-client