Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9dab8e54-4b86-3727-93ac-d3297f99d928.roa
File:                     9dab8e54-4b86-3727-93ac-d3297f99d928.roa (raw, json)
Hash identifier:          vhYiAd4oGXc4ISnibnNVaDhKplSlKUjJWTi8g27Wa9Q=
Subject key identifier:   18:4D:5A:9D:3E:8B:FA:E7:56:35:D8:A1:27:FE:11:28:8D:95:21:7F
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A841226E65061186ADAB51400
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9dab8e54-4b86-3727-93ac-d3297f99d928.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.23.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:26:e6:50:61:18:6a:da:b5:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=7a6cb5a3-d18f-4cfc-a87f-280adb1fe22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:14:d3:b2:f5:67:32:82:99:b3:b3:76:c3:b5:
                    41:d2:0a:d2:0e:80:02:30:6e:be:97:62:68:e2:c5:
                    b8:dd:c0:bc:78:36:98:62:2b:3a:09:14:ff:0f:9c:
                    ea:85:3c:90:e7:1c:a2:ba:ec:35:a9:68:a4:d9:b3:
                    03:40:e3:94:23:82:27:b6:e7:2c:ef:c3:f3:4b:72:
                    f8:90:69:df:97:f4:3d:92:bb:51:84:89:1b:8e:01:
                    95:70:03:a4:2d:b5:dd:2c:43:82:4a:91:78:bc:a0:
                    5d:b1:59:13:e0:41:e5:49:35:91:f1:56:9a:29:4f:
                    3c:b1:8c:0d:e0:6c:db:e1:d3:27:ea:aa:1a:6c:4d:
                    07:04:04:5d:8a:3d:21:2b:bc:dd:cf:2b:f4:6e:67:
                    ac:32:32:cc:1f:ec:e4:30:85:70:dd:0a:4b:f4:26:
                    30:3b:7f:41:80:31:a6:91:d1:0e:43:c7:50:25:3e:
                    67:29:1c:39:65:76:9c:11:85:d8:8a:41:7b:72:db:
                    23:35:f0:af:1a:81:63:49:82:87:c1:0d:6e:ef:9e:
                    92:da:00:30:bf:9d:3b:fd:76:97:cc:19:ce:36:f2:
                    3b:e4:e6:2e:a4:38:70:78:ef:7e:20:48:d0:fb:df:
                    5c:f8:8d:97:37:c0:48:18:7d:b4:7d:da:8a:f3:69:
                    d6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4D:5A:9D:3E:8B:FA:E7:56:35:D8:A1:27:FE:11:28:8D:95:21:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9dab8e54-4b86-3727-93ac-d3297f99d928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:6c:14:ae:3d:04:f1:31:ce:4e:73:59:be:7e:81:f1:7f:69:
         24:28:64:a3:55:a4:fb:8d:66:98:18:e8:ba:6c:6c:e5:69:fc:
         d1:14:c7:9a:b3:77:5e:10:15:08:d9:7d:b8:ea:a1:76:ad:75:
         54:f3:54:f2:8c:17:27:31:57:b6:70:2f:1b:03:67:17:df:a4:
         56:be:83:50:3a:0e:d1:a7:b2:48:f6:dc:3e:00:0e:aa:be:c6:
         d5:c2:4f:6a:e2:13:e6:3a:8e:23:6a:3a:b6:1b:de:44:e2:54:
         17:43:6e:7c:27:5b:d2:ac:35:e4:a9:b5:de:ec:d9:ad:20:20:
         9f:34:d3:31:24:2e:5d:12:7e:18:61:dc:ee:b7:25:c5:25:6c:
         8d:fe:f0:4d:40:32:37:9a:25:5a:f8:15:d0:8b:39:82:f5:64:
         1a:4b:10:0d:2b:8d:ad:27:8a:e3:59:5f:be:ca:62:85:c2:f9:
         68:a0:a4:bb:ad:e3:d1:0b:1e:08:cd:75:ee:78:33:10:92:74:
         b6:ad:b5:c3:c7:df:8c:35:2f:97:85:4a:3d:e1:68:0d:d1:96:
         4e:8a:5b:13:a3:e2:ef:ed:af:44:a8:f6:56:45:ad:10:2d:84:
         64:5d:27:c8:1a:bd:91:d3:b2:2a:47:ec:53:59:47:a7:1c:1d:
         a8:2c:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:21:22 2025 by rpki-client