Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c494cd12-7fce-329d-ba7b-ea743b3c05d7.roa
File:                     c494cd12-7fce-329d-ba7b-ea743b3c05d7.roa (raw, json)
Hash identifier:          rNt9VhXQ1bkQ6goBhNwWumQYyv3+EObNY8TlrdO5xGs=
Subject key identifier:   39:0D:D2:3B:3F:57:9B:AC:C5:43:BB:0D:ED:B2:FE:EE:EE:E9:F2:A6
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A84118728607940DE53CD4500
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c494cd12-7fce-329d-ba7b-ea743b3c05d7.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.23.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:87:28:60:79:40:de:53:cd:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=6704383c-a2e4-425a-9f31-fbe893b07c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:ac:81:af:fa:0a:b6:1e:5b:62:45:75:07:
                    ab:69:70:4a:32:51:cd:2a:f3:74:e1:d4:b1:8c:7b:
                    f2:f3:18:15:6b:7d:58:f5:fc:02:f8:49:a0:5c:2e:
                    f6:3a:ac:8d:71:00:a9:39:c8:bf:e5:51:4e:4d:2b:
                    7e:39:e0:9b:3c:84:22:4e:04:75:4f:f8:99:81:50:
                    10:de:c5:65:b6:17:f7:08:ca:f2:2d:27:cf:e7:7d:
                    7d:9e:3b:28:2a:f6:db:8b:d5:36:86:2b:e0:fd:4a:
                    bd:01:d7:3c:77:a8:82:5c:d5:4f:76:53:49:cb:1e:
                    f4:fc:26:b1:36:47:ab:b0:8a:89:bc:c0:38:1b:db:
                    bc:d7:3b:bf:74:be:70:bd:59:d0:06:fc:ce:5c:18:
                    a3:44:62:69:fc:37:15:65:ae:18:d5:26:37:dd:53:
                    ed:23:b8:dd:ad:55:8d:3d:67:12:2b:2e:93:79:70:
                    1d:0d:15:bf:b9:8e:88:ed:9f:d3:65:ac:91:78:e6:
                    ac:b1:b8:06:47:53:9c:6e:ba:63:15:ad:1e:14:ef:
                    ab:e4:c2:b1:10:4a:90:04:d9:d2:e1:2d:1b:d1:72:
                    5f:87:cc:9c:eb:5b:2d:ae:c0:b7:6d:ca:85:41:46:
                    bc:6d:be:76:88:6a:01:dc:14:d4:8a:1f:f1:d4:7d:
                    09:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0D:D2:3B:3F:57:9B:AC:C5:43:BB:0D:ED:B2:FE:EE:EE:E9:F2:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c494cd12-7fce-329d-ba7b-ea743b3c05d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:7e:7d:ae:c4:6a:48:eb:de:9a:dd:12:a2:6e:03:47:d1:ed:
         b0:86:90:b6:f4:fe:44:04:07:ed:2d:c5:22:13:35:e8:7e:f0:
         59:b6:0b:cf:cd:fc:f2:07:40:4e:73:dc:6a:51:1d:fe:5d:75:
         03:26:9a:ad:41:e5:8d:33:eb:b2:49:cc:56:8f:34:34:73:d2:
         c5:cb:e6:14:8d:b8:06:2f:f1:1c:92:6d:f8:35:55:ae:1e:5f:
         fe:cd:56:bf:d7:4c:23:d1:53:5e:80:14:c6:4a:6c:84:4c:85:
         01:e7:55:ff:ee:60:ad:67:38:d8:fb:c0:df:ce:c8:0f:08:85:
         40:53:c0:0b:3a:30:bb:02:1c:08:0d:d5:f1:6b:1f:4b:0c:b4:
         30:99:58:dc:89:0b:6e:14:df:8a:5a:e4:af:da:c7:2e:3c:0c:
         53:e1:53:18:56:d2:b7:5a:2a:45:bc:d4:2d:e0:3f:62:21:2e:
         e1:fe:8f:bc:59:56:6a:30:ce:3d:0d:3e:a9:f0:2d:29:fb:d5:
         cf:60:7e:df:d4:a6:82:e4:e9:dc:96:03:05:41:b6:26:a5:6b:
         a0:82:06:69:eb:38:39:55:dd:d5:5d:36:e0:63:6c:d6:42:9f:
         3f:6a:72:1e:a2:17:ba:cb:6a:bd:d1:11:1d:8f:88:2f:a0:b0:
         a1:84:12:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:11 2025 by rpki-client