Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/86ceece7-52b7-39c6-9a9d-409ca5cb51b1.roa
File:                     86ceece7-52b7-39c6-9a9d-409ca5cb51b1.roa (raw, json)
Hash identifier:          nYilc4CPUNmvpTQ/syMatyZ8a9y6vYi/r3SWdmtAf3E=
Subject key identifier:   14:D5:C9:F8:F8:77:78:5B:2A:15:A3:F1:50:BC:08:22:BD:3F:15:3A
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584E059BCC13F8B0074AF36D2C00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/86ceece7-52b7-39c6-9a9d-409ca5cb51b1.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.23.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:cc:13:f8:b0:07:4a:f3:6d:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=14eb6b06-9a18-49c4-a71e-c39b3e7d9cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8b:83:b6:7b:94:26:c0:c2:9e:a2:c8:4b:fd:
                    d0:eb:7f:eb:cf:87:0d:2a:9b:b8:64:f1:82:86:c4:
                    9b:19:11:d6:8b:01:7b:aa:db:e3:ff:38:fa:65:aa:
                    6f:4b:2e:a5:64:a9:50:46:ab:bb:6f:e7:0e:f5:32:
                    d3:15:24:c2:20:5e:43:eb:cd:ea:92:b0:e6:b5:d1:
                    f5:8a:9d:b0:44:54:1b:18:d5:f9:5f:27:dc:44:9e:
                    f2:eb:12:f4:25:49:37:9e:8a:b0:5c:be:b9:c8:e3:
                    b3:35:1c:1f:5e:3a:0d:6e:0a:5e:da:de:32:2e:2c:
                    b5:62:15:17:83:da:a9:c2:df:b6:ed:1e:32:9f:b1:
                    80:5e:af:ed:bd:f5:27:3d:08:66:1e:75:8e:22:2a:
                    22:ed:d0:6a:73:e4:69:95:45:de:07:50:ae:81:e2:
                    61:79:69:54:b9:be:e7:bd:b9:0d:9b:7b:b0:26:00:
                    38:24:77:e5:68:ea:77:6a:20:e8:6c:50:0f:1e:aa:
                    22:05:d0:b2:12:e3:27:f7:79:87:1c:c3:ee:8f:4f:
                    ed:f9:6a:a6:0e:54:58:3f:02:e4:55:ad:0d:01:96:
                    3f:47:f4:24:49:e9:8d:27:06:5b:22:b8:f4:0f:5c:
                    ab:e8:c0:c1:75:42:59:2a:71:64:06:45:8e:f6:d3:
                    7c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D5:C9:F8:F8:77:78:5B:2A:15:A3:F1:50:BC:08:22:BD:3F:15:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/86ceece7-52b7-39c6-9a9d-409ca5cb51b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:fb:d8:71:ba:8c:e6:cd:73:5b:a6:d8:c8:7c:6c:e8:0b:d9:
         c6:c0:41:b8:6d:ef:ca:48:05:0e:a8:04:7c:c9:98:e1:7e:9b:
         fb:f3:81:69:52:11:6c:bc:60:ab:46:fa:25:f2:1d:e4:eb:d9:
         8b:a9:40:ac:70:68:a8:81:1e:29:02:5c:5e:17:07:af:44:75:
         94:4e:9a:96:41:ef:0f:48:b6:d2:36:c3:92:04:0a:5f:0d:30:
         bb:34:67:1b:02:6f:49:77:bc:ed:45:69:9b:f3:25:69:46:30:
         39:cd:6a:79:dd:b6:da:7b:46:3b:c2:da:25:85:16:c9:d7:44:
         09:f6:2e:41:a4:6f:dd:de:39:09:34:52:94:77:49:1d:a0:8e:
         88:3e:86:76:8b:69:5d:7e:41:13:c1:d5:3b:ca:b7:0d:d4:d1:
         c8:6a:0d:ba:50:c8:ee:a2:53:15:5c:5c:a7:13:11:64:8b:36:
         40:e6:74:35:35:8d:d6:43:1e:25:cf:9e:1d:44:64:76:30:a6:
         d2:e0:7e:2e:27:6b:c9:1b:84:af:c2:ca:ef:b8:dd:95:c2:00:
         4c:4a:9d:2b:09:56:0a:3f:1b:4a:18:42:e6:83:9c:35:6b:f5:
         29:76:91:b2:97:99:a9:f6:1c:de:ba:7e:89:65:7e:e5:a8:8b:
         d8:c1:4a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:36:36 2026 by rpki-client