Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/bb736556-8033-3e17-86be-0a2b7e7fe3bb.roa
File:                     bb736556-8033-3e17-86be-0a2b7e7fe3bb.roa (raw, json)
Hash identifier:          H5LQ2hN38aifsQDLYRYQrzklLZb9VlAWO4A6Uo5Ur4U=
Subject key identifier:   8A:7A:35:2A:C1:70:4F:E0:B8:B3:1D:1F:E0:90:49:6B:3C:5A:C9:76
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A841225CE08014B42F8B5C980
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/bb736556-8033-3e17-86be-0a2b7e7fe3bb.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.23.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:25:ce:08:01:4b:42:f8:b5:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2791abae-9559-434e-bc45-aa1017d49a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:5d:c3:8a:96:78:15:14:62:1d:ab:6b:00:
                    51:f1:eb:35:11:0a:d5:af:03:f5:26:1f:82:02:97:
                    07:56:90:c0:e0:e2:d5:43:a9:01:31:3f:df:be:a0:
                    61:f0:a1:a3:55:f3:80:44:76:db:69:05:e2:92:2e:
                    46:38:2e:39:fd:59:2c:f8:a6:33:95:de:d6:ce:b4:
                    cb:fd:16:eb:61:f0:5a:a4:d3:90:6e:24:39:24:25:
                    8a:27:43:4a:40:a6:7f:96:f7:46:0a:a0:96:62:6d:
                    df:ef:4e:dc:71:82:65:2c:ea:85:a0:7b:2c:3b:66:
                    1f:b7:53:81:3d:b5:14:de:8a:22:0e:3e:10:fa:56:
                    75:b1:54:be:c1:92:c6:5c:20:2a:4f:2b:09:af:5f:
                    56:16:81:96:d2:e4:be:b4:73:64:f0:40:93:85:bb:
                    39:04:e0:21:7a:ac:ee:10:c1:df:a9:24:c3:52:ab:
                    8c:07:d0:3b:24:09:a3:5f:74:af:dc:69:ab:ab:6d:
                    c2:f4:89:90:d8:53:f1:54:24:31:5d:b3:c3:75:a1:
                    7b:d3:4d:88:9e:39:44:ad:b1:cf:81:ef:82:63:0a:
                    29:41:59:80:16:a7:fd:4a:c4:cc:3b:cd:6f:00:29:
                    00:34:c1:a9:37:84:48:0f:c2:2f:11:73:da:d1:ef:
                    ca:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7A:35:2A:C1:70:4F:E0:B8:B3:1D:1F:E0:90:49:6B:3C:5A:C9:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/bb736556-8033-3e17-86be-0a2b7e7fe3bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a8:e1:e2:e9:39:a6:90:88:1c:7a:0c:5f:1a:45:eb:ce:49:
         e4:f2:72:99:67:03:0d:f4:f5:fb:a1:b5:36:7b:46:27:1c:7a:
         72:53:6b:91:da:c5:c0:8c:48:c6:67:f3:2c:d0:95:88:4a:38:
         7f:d2:8e:b3:50:3f:df:19:22:2d:45:e0:f3:ca:f8:6a:db:0a:
         44:73:6f:07:a6:01:82:4c:47:41:11:5f:cc:ab:7c:77:58:57:
         dc:99:50:aa:1c:bb:42:7d:6b:2a:f8:05:cf:39:18:e6:f2:e4:
         54:22:a7:83:85:17:be:04:8b:92:b9:59:53:61:ac:84:8a:80:
         e1:d6:21:b4:d0:b6:78:69:63:30:b5:94:23:6b:0a:c2:e0:f9:
         50:f8:7b:5c:0c:07:69:c9:e5:2f:cb:ce:fa:d1:2a:0f:24:d1:
         da:98:70:b6:c3:2c:94:32:18:32:77:6e:96:4d:64:9f:9a:b6:
         5b:e4:c8:39:45:54:0c:43:38:af:d8:50:b0:94:bc:dc:c7:20:
         ce:1a:1d:84:85:a8:7d:e6:4d:38:0a:be:f7:55:25:9f:2e:35:
         1c:cf:6b:c7:ec:20:d2:10:d5:c0:93:12:45:0a:38:3b:81:ca:
         4f:a6:4d:75:cf:26:a4:a7:65:38:d1:18:7c:e7:20:de:c2:d4:
         48:c3:7c:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiXOCAFLQvi1yYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
Mjc5MWFiYWUtOTU1OS00MzRlLWJjNDUtYWExMDE3ZDQ5YTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfxdw4qWeBUUYh2rawBR8es1EQrVrwP1Jh+C
ApcHVpDA4OLVQ6kBMT/fvqBh8KGjVfOARHbbaQXiki5GOC45/Vks+KYzld7WzrTL
/RbrYfBapNOQbiQ5JCWKJ0NKQKZ/lvdGCqCWYm3f707ccYJlLOqFoHssO2Yft1OB
PbUU3ooiDj4Q+lZ1sVS+wZLGXCAqTysJr19WFoGW0uS+tHNk8ECThbs5BOAheqzu
EMHfqSTDUquMB9A7JAmjX3Sv3Gmrq23C9ImQ2FPxVCQxXbPDdaF7002InjlErbHP
ge+CYwopQVmAFqf9SsTMO81vACkANMGpN4RID8IvEXPa0e/KOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIp6NSrBcE/guLMdH+CQSWs8Wsl2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvYmI3MzY1NTYtODAzMy0z
ZTE3LTg2YmUtMGEyYjdlN2ZlM2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBciMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSo4eLpOaaQiBx6DF8aRevOSeTycplnAw309fuhtTZ7RiccenJTa5Ha
xcCMSMZn8yzQlYhKOH/SjrNQP98ZIi1F4PPK+GrbCkRzbwemAYJMR0ERX8yrfHdY
V9yZUKocu0J9ayr4Bc85GOby5FQip4OFF74Ei5K5WVNhrISKgOHWIbTQtnhpYzC1
lCNrCsLg+VD4e1wMB2nJ5S/LzvrRKg8k0dqYcLbDLJQyGDJ3bpZNZJ+atlvkyDlF
VAxDOK/YULCUvNzHIM4aHYSFqH3mTTgKvvdVJZ8uNRzPa8fsINIQ1cCTEkUKODuB
yk+mTXXPJqSnZTjRGHznIN7C1EjDfGc=
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:54:53 2025 by rpki-client