Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/78e260f9-3589-384b-87b4-73f1ad74f04b.roa
File:                     78e260f9-3589-384b-87b4-73f1ad74f04b.roa (raw, json)
Hash identifier:          0JLg6E15csd5moSYVfOVVv9ZBrIB5GwAR2jwhjhv4bw=
Subject key identifier:   B4:7F:A7:7C:06:B6:FC:CC:69:EF:D1:FD:CF:E2:49:72:E5:15:64:D7
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A84122660F15EB8168A409D40
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/78e260f9-3589-384b-87b4-73f1ad74f04b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.23.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:26:60:f1:5e:b8:16:8a:40:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=55782e20-7861-4271-b3c1-d13a61a3a078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:60:a3:60:34:3a:58:3e:cd:be:aa:8e:d7:97:
                    b1:5e:af:fa:6e:5f:ec:ae:b8:c8:b0:e4:7b:58:18:
                    4d:9c:02:ac:53:c4:62:a8:28:13:cc:b8:c5:ad:ba:
                    1d:c1:de:0a:1f:37:d6:1b:36:2a:e0:4c:64:35:1f:
                    33:3b:64:2b:59:74:85:94:45:aa:7c:37:61:39:ab:
                    06:01:e0:77:92:27:fc:d1:2a:a6:3a:6c:6c:bb:da:
                    b7:e4:db:4e:07:70:ce:ea:92:45:32:ce:85:a9:2f:
                    55:f2:9e:11:ab:96:fc:7a:5e:99:f5:0d:a1:be:13:
                    7e:b9:38:a9:4a:28:04:45:76:94:01:6a:a7:0b:f0:
                    d4:05:ea:ee:07:ca:c9:13:23:3d:fa:5f:5b:af:2e:
                    a7:b8:10:47:99:d3:2f:ee:93:c0:be:a6:ec:9a:f5:
                    e6:04:cd:0d:6d:3e:42:5d:0d:ef:84:f4:c0:9a:bf:
                    4d:6b:1f:fd:2f:ac:49:ba:72:db:23:2e:52:7c:3e:
                    e7:18:6f:6a:7d:31:32:b4:7b:7c:99:75:ef:53:ad:
                    e9:2d:61:d2:ef:1b:fb:79:b1:53:fc:46:1b:35:1c:
                    63:fe:61:75:51:21:3e:cc:58:59:c8:3f:7e:0c:c2:
                    21:c9:84:a4:d8:8e:97:5e:d0:ee:3b:a4:96:53:5a:
                    55:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7F:A7:7C:06:B6:FC:CC:69:EF:D1:FD:CF:E2:49:72:E5:15:64:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/78e260f9-3589-384b-87b4-73f1ad74f04b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:91:b4:c8:3d:22:ad:f4:64:e4:13:2f:a6:f4:47:53:d2:0c:
         15:00:17:b7:1c:8f:e3:b0:03:34:1c:55:57:2c:b4:ba:6a:1f:
         0a:db:08:79:4d:64:70:5d:c9:26:40:07:01:11:85:e0:49:e3:
         5f:4f:60:39:fd:7b:a9:88:62:0f:ad:24:4b:e2:3f:1b:f7:0d:
         f3:2b:6c:93:e4:d6:06:d4:4a:2b:93:64:96:0d:65:bc:33:29:
         b7:4e:0e:90:d8:13:ea:73:44:3e:6c:87:d4:b5:c9:08:3f:28:
         4b:43:c2:fb:4a:47:8b:9f:91:a6:48:ed:92:9d:24:40:06:24:
         41:af:a7:e5:df:16:41:cc:20:63:6e:59:9b:58:b8:09:c1:e7:
         15:1f:53:c6:d3:04:f3:77:36:ba:76:d4:48:6c:0a:c3:e2:54:
         00:70:19:c4:9a:14:87:0e:1d:cd:ac:90:1b:77:44:62:d8:e3:
         6d:0e:5f:5c:33:5b:9c:9e:f6:19:09:c1:03:ae:8c:cc:f6:e3:
         3b:90:25:a0:27:f5:9e:e7:52:d0:40:60:fb:8a:3c:4f:e5:0d:
         8b:59:a3:8b:e1:17:48:cc:33:86:6f:05:b1:77:db:cc:ba:58:
         0a:e5:2d:75:e4:5f:d5:88:24:1a:7e:7f:7d:bb:30:f2:53:29:
         50:03:c2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:03:51 2025 by rpki-client