Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/8446862a-6fb1-3628-992e-c3977e861eae.roa
File:                     8446862a-6fb1-3628-992e-c3977e861eae.roa (raw, json)
Hash identifier:          CMJlGwp4ML2KMtpcSrXzenDjHjzp2YvegQ3+0DXgmHM=
Subject key identifier:   FA:DD:4D:25:FD:04:11:BF:25:A7:FE:E3:AC:8A:B0:F9:59:E8:27:ED
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584E0005FD4EDBE79F61212C9100
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/8446862a-6fb1-3628-992e-c3977e861eae.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:fd:4e:db:e7:9f:61:21:2c:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=51e17a43-4378-46a0-ab33-7b9bd8e50f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5b:aa:63:da:45:09:1a:4e:2c:ad:bf:ad:3b:
                    b9:a3:e8:13:31:c6:c7:53:4b:ad:b7:2e:ba:89:0a:
                    9d:d2:7d:25:42:00:3a:70:2c:19:b5:48:7f:8b:12:
                    bd:6c:86:79:be:64:0f:13:b7:bc:24:37:ab:54:c8:
                    41:87:97:a3:5c:75:82:1d:54:e6:98:29:50:d3:33:
                    d8:b4:99:c9:d4:1a:f4:26:cf:8b:00:37:37:53:16:
                    8f:bd:a1:71:ff:c9:b9:bf:85:73:1e:e8:29:ec:d0:
                    69:8b:de:1c:6e:c0:5a:6f:fe:3b:3a:58:51:74:98:
                    f7:bf:28:23:2f:49:77:3b:29:5b:cc:72:a4:ab:08:
                    62:be:bb:ba:7c:e9:30:e2:29:1b:c3:92:7d:e4:43:
                    16:7f:66:ad:2f:6d:94:18:ff:5e:b9:f6:73:f8:3d:
                    e6:a8:7d:5b:29:e8:c6:9a:df:c0:f7:74:75:3f:54:
                    fc:61:d7:0e:a9:e2:35:36:15:d0:2a:13:2a:9a:df:
                    06:d6:33:c6:39:fc:48:69:3b:d3:6e:c6:23:a3:a8:
                    bb:2f:ab:c2:b3:40:9c:79:59:d9:1a:22:2a:75:e7:
                    30:24:13:86:9e:38:48:48:87:dd:94:f0:8d:e9:76:
                    b4:b4:8e:5c:3a:07:f3:6b:f9:8f:00:7f:11:62:d4:
                    6e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DD:4D:25:FD:04:11:BF:25:A7:FE:E3:AC:8A:B0:F9:59:E8:27:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/8446862a-6fb1-3628-992e-c3977e861eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:4e:51:3b:9e:92:bc:cb:44:f2:a2:f3:2d:60:68:82:a4:0d:
         5c:f9:23:2f:67:2c:22:32:83:18:e8:0e:15:12:b9:12:ef:58:
         6f:6b:15:88:44:3a:2b:a9:86:1f:7e:12:37:41:8c:db:da:ab:
         15:48:2e:b2:4d:38:c6:83:aa:ff:74:fa:6c:2e:06:c7:2e:9e:
         97:35:8c:92:4f:98:aa:d3:7c:09:d7:ac:2c:9a:d9:69:45:6e:
         f5:41:46:c9:5a:1d:ad:9f:63:61:71:35:57:41:0d:d1:7c:22:
         9b:b8:41:4c:30:af:40:0b:37:2e:0e:36:db:13:1e:24:b2:34:
         9b:4b:7e:00:aa:69:47:78:38:97:49:3a:f4:cf:91:11:19:56:
         e9:1d:db:3f:a8:30:36:70:10:3e:63:fc:91:21:ca:13:e2:18:
         ea:c5:33:69:1d:32:c7:e7:57:45:60:b1:4d:80:39:11:88:ca:
         ec:39:de:0a:1b:6e:a8:e6:28:2c:42:24:2f:8c:13:73:98:11:
         d1:6b:28:3d:53:7c:66:6d:ca:ca:c8:cc:e0:1d:65:c4:71:4f:
         97:ed:fb:46:85:98:ff:0b:ac:a8:12:00:c3:a0:82:5f:b5:59:
         3d:2d:71:60:68:41:a7:14:fa:96:94:91:cd:b2:93:ca:1e:b0:
         40:34:e9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:05:03 2026 by rpki-client