Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/816838cd-02a2-3d7f-bb51-e0d4dee26267.roa
File:                     816838cd-02a2-3d7f-bb51-e0d4dee26267.roa (raw, json)
Hash identifier:          f8qO0MRqKQvwfS5Ir59dt2HL/UcBqziRKT0ZaXHDLrs=
Subject key identifier:   02:20:41:79:DA:1A:47:4F:1E:C8:A9:46:48:3F:3A:A7:4C:D0:93:74
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A84117BD0DC8A37544EDCD720
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/816838cd-02a2-3d7f-bb51-e0d4dee26267.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.23.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:7b:d0:dc:8a:37:54:4e:dc:d7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=571cf8e3-c2bf-48bb-8fec-255257b83e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:df:36:bd:c8:be:1b:5d:dd:a9:f5:79:0e:6c:
                    f3:31:b7:17:88:b6:e3:81:7f:ef:c8:55:28:71:5a:
                    8c:aa:01:76:a6:ff:67:ab:f6:80:04:b5:6f:a3:7f:
                    02:16:69:4e:c7:3e:c5:e1:db:2d:24:1c:63:6a:99:
                    a6:cb:a2:3e:e8:f8:9a:07:dd:a9:1e:55:b7:f4:53:
                    56:f4:d1:67:93:0e:d9:c9:ad:b2:da:a9:9b:9b:b4:
                    25:51:9c:9d:dd:97:ad:a5:b4:61:43:27:e3:cf:06:
                    98:0e:fc:dc:5f:f9:8e:c5:77:10:59:c3:62:d2:58:
                    0d:f3:97:02:83:8f:59:aa:13:b1:18:bf:fd:d7:7d:
                    c6:9e:30:34:97:8c:20:3d:48:e0:af:b1:3d:2f:d0:
                    f7:57:a1:9f:a1:c5:8b:c3:5e:4a:8a:42:0c:8c:25:
                    0e:75:d3:7c:57:a7:ea:9f:96:8a:30:56:0c:e1:26:
                    6c:96:7d:33:6d:88:7f:77:76:9d:2c:25:ca:d8:17:
                    12:db:34:c8:dd:f5:e5:2d:43:0d:d4:9b:8a:4e:7a:
                    20:c6:f2:cb:ac:f2:7b:55:ff:c1:4f:37:9a:06:f6:
                    e6:e4:44:3b:9f:a8:4f:c3:9b:f1:86:3f:30:51:8d:
                    d4:4f:aa:67:e8:c8:3a:30:54:98:98:7b:2a:17:bd:
                    0f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:20:41:79:DA:1A:47:4F:1E:C8:A9:46:48:3F:3A:A7:4C:D0:93:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/816838cd-02a2-3d7f-bb51-e0d4dee26267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:1e:62:e8:e2:99:a7:c5:8d:68:7c:13:29:5c:a3:0c:fc:77:
         44:fa:ea:38:11:68:90:89:94:87:37:7e:6b:da:59:b8:83:ff:
         c5:23:36:1f:b6:e9:f6:cf:30:9a:ab:bd:28:94:ca:34:f3:b3:
         d6:f6:47:1a:9a:c2:03:58:0c:09:4c:47:d0:b2:56:4e:55:29:
         d5:71:8d:14:e3:18:fc:0d:5e:bd:17:c1:9d:09:e2:a7:20:d6:
         b1:fd:be:1f:80:0a:50:49:99:f1:cb:1b:15:6b:db:bd:74:88:
         1c:0f:3c:56:f7:19:f0:ba:bc:c1:6b:5d:80:7a:11:49:75:14:
         b8:b9:37:20:41:a8:1a:4b:28:63:21:e8:86:18:0f:86:8f:83:
         e2:fc:4f:5a:43:98:02:5f:ba:65:dc:92:8b:c7:a9:bd:8a:70:
         d2:d0:e3:91:62:fc:29:27:8a:1c:91:d4:a5:5a:63:4b:15:40:
         22:ec:2e:49:0f:7f:15:c6:fd:24:53:17:fc:50:11:0c:47:7b:
         b6:c5:a2:45:0b:8a:6d:ba:d5:2d:3c:d2:cb:c9:12:eb:a3:55:
         d3:78:3d:ab:1f:9d:15:da:64:60:f7:0b:22:e5:51:19:a5:45:
         02:42:fa:de:71:ef:77:cc:98:c1:7d:1f:3a:21:4e:80:35:01:
         87:80:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:31 2025 by rpki-client