Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9d844dfe-85d9-3833-8a02-f1224bbad038.roa
File:                     9d844dfe-85d9-3833-8a02-f1224bbad038.roa (raw, json)
Hash identifier:          iGneT4mSVn6iFB1ymy5lMtaPbdA67QVUWYtn9iiOzxU=
Subject key identifier:   34:80:FE:4B:EA:0B:C2:D5:1C:5C:EC:F2:A6:BB:25:D5:81:E1:EE:CC
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584E059BD124B67411CF033A4D00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9d844dfe-85d9-3833-8a02-f1224bbad038.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.23.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:d1:24:b6:74:11:cf:03:3a:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=8750d01f-75c1-4fa5-b52c-24e8d9759fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ba:80:e9:da:af:da:c6:4b:d4:e5:e2:a0:9f:
                    8f:ee:1f:ad:43:ff:f3:c9:a0:d7:2c:0a:c0:8b:1d:
                    0c:35:5f:03:cc:37:7b:24:13:e9:c7:ff:4f:ea:8a:
                    ba:92:ba:78:cc:25:f0:15:9e:48:1a:34:82:10:9a:
                    ee:ae:41:17:4e:55:09:50:fe:d0:5c:27:5c:ad:ac:
                    b4:1e:db:29:b2:99:a7:e8:c1:a1:93:a2:e0:8c:1f:
                    c5:c4:f6:52:85:55:28:2e:ec:7e:04:fe:df:9f:e7:
                    46:73:ba:25:e5:45:50:49:8c:dc:fe:05:69:af:fb:
                    98:a6:42:cf:f5:91:53:66:42:d1:41:26:f0:e0:aa:
                    b0:43:4b:88:e9:90:0f:70:d5:bf:88:e5:93:e2:56:
                    a8:e6:a4:8c:f1:1b:64:ac:42:9c:50:0b:5b:a0:39:
                    ce:ac:c3:b8:dc:7a:d0:ee:28:71:10:9a:3a:5a:6e:
                    49:da:bb:4c:ed:03:41:7a:34:67:c9:fa:ad:ec:d9:
                    a1:c6:17:56:af:46:12:4e:71:f8:08:21:50:c9:80:
                    1e:a1:8c:74:13:3a:9b:f9:63:6b:42:6d:7c:93:0f:
                    aa:05:96:9f:99:f4:fd:e3:e6:e2:bc:0d:9f:22:9d:
                    18:33:6b:bf:fc:4e:a9:44:24:ff:e6:6f:9b:98:57:
                    70:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:80:FE:4B:EA:0B:C2:D5:1C:5C:EC:F2:A6:BB:25:D5:81:E1:EE:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9d844dfe-85d9-3833-8a02-f1224bbad038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:3d:30:b4:d6:34:59:f1:59:f3:c6:07:1d:97:e8:25:23:fa:
         0f:35:e3:2e:14:00:f6:07:b3:b4:e9:ae:f3:ed:38:aa:14:87:
         22:65:97:c2:67:06:17:ff:30:2e:93:ff:23:bb:b7:78:64:d9:
         35:a7:e1:87:6e:34:bb:6a:57:01:33:48:0d:6a:46:4b:41:a3:
         06:23:70:87:07:c8:b0:63:4a:6b:de:a5:dc:8b:98:5b:65:ef:
         7d:79:ec:b8:78:d1:78:2b:e1:74:2c:fc:a2:7c:bb:92:03:5a:
         a0:ef:56:e3:7e:41:bf:1e:ab:1c:90:f6:92:d1:27:90:74:85:
         30:53:a0:08:fd:45:ba:31:2c:27:e7:34:04:bc:32:3f:aa:31:
         21:5b:f4:98:e9:1b:51:9c:d0:82:23:ee:ec:b1:71:1a:6f:fd:
         3d:b4:ec:a5:d9:cc:a1:15:da:4a:91:83:a6:d4:d6:03:f8:a7:
         af:49:ea:61:70:8f:00:6c:56:7e:0f:ff:97:90:9d:bc:a0:27:
         e5:05:07:ef:48:85:5c:b9:63:44:bb:2b:3e:46:ec:36:4f:0d:
         9d:c6:b5:57:dd:19:a2:ad:f9:59:d1:b2:5f:bf:85:fd:67:a7:
         0f:ab:40:02:cd:fb:8c:61:21:81:c9:f7:4a:e2:48:37:eb:1b:
         7a:cc:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:59:08 2026 by rpki-client