Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d3eac998-28ef-3069-b72a-ca7141d89283.roa
File:                     d3eac998-28ef-3069-b72a-ca7141d89283.roa (raw, json)
Hash identifier:          8BZDhVpZU2ycd7L9n4eoCxCetpNYB7FJSojDoE1yGoI=
Subject key identifier:   28:A3:70:B3:94:DC:CC:36:FB:A0:C6:54:96:67:F8:61:50:CC:CF:EC
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A7E7B75CDF0D7C131BD260720
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d3eac998-28ef-3069-b72a-ca7141d89283.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:75:cd:f0:d7:c1:31:bd:26:07:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=8f5e3398-d4a2-4668-82ee-7cb5cc100caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c0:a3:f9:72:18:68:97:ef:01:9c:24:16:6d:
                    bd:6c:e1:c4:e5:c6:4c:07:82:f6:e7:f4:e4:0a:4f:
                    03:0f:27:58:bb:c4:fd:22:08:37:2a:74:74:b5:22:
                    ed:b4:99:66:89:e0:d6:9a:bc:42:49:4a:82:af:5a:
                    dd:8c:6d:69:76:63:42:27:bc:8e:2d:13:f7:01:27:
                    c1:96:a2:c6:40:cc:3f:d0:73:0a:a3:03:42:23:c7:
                    94:48:7b:89:20:09:8c:2a:43:b0:ea:af:dc:ee:f1:
                    55:11:b8:89:31:8c:25:57:2e:f8:85:cc:03:4c:06:
                    8b:5b:bf:b9:2e:31:20:b3:26:73:54:53:f6:c1:f3:
                    4f:4b:0d:38:84:c9:98:cb:37:ff:cc:5b:9e:cf:ff:
                    4e:b8:68:92:95:db:8a:2c:31:40:c6:72:53:b6:b9:
                    b5:47:89:a2:7d:04:1c:40:80:5e:13:c3:79:22:dc:
                    18:4c:68:ab:03:b4:d9:a5:21:67:97:90:e9:3a:c1:
                    a8:98:de:d4:8d:f0:49:5e:86:51:bc:bd:10:99:1d:
                    0b:fd:11:c9:c6:2c:a0:32:ad:ce:5b:46:9b:38:38:
                    2b:0f:09:51:12:3f:fa:6e:2e:14:0e:ce:7a:01:b9:
                    86:04:0c:9b:74:3f:74:64:fe:79:ac:96:16:9f:cf:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A3:70:B3:94:DC:CC:36:FB:A0:C6:54:96:67:F8:61:50:CC:CF:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d3eac998-28ef-3069-b72a-ca7141d89283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e5:eb:02:6a:09:ad:84:cb:14:0f:28:c1:ab:11:c1:6e:e3:07:
         81:07:e8:7c:68:19:5c:2a:f1:c3:79:d7:42:aa:c7:26:bd:6e:
         13:3d:36:3e:b2:27:8e:dd:af:f1:e9:0a:a2:b1:d0:fb:5b:dc:
         67:0a:52:4f:a3:95:11:19:4b:ea:af:92:09:0f:9c:71:82:ce:
         79:6c:7a:96:7c:35:7f:31:d8:26:c0:a6:46:93:b9:9a:b8:e8:
         fb:06:92:8c:c2:49:54:83:1e:1b:ab:18:91:6e:34:a5:da:6a:
         99:0b:d7:b1:d7:e8:67:b7:89:25:84:97:54:52:3c:cf:eb:f7:
         41:dc:e4:84:57:5d:02:f2:94:1b:52:8e:28:25:c9:54:3e:51:
         fc:32:ce:29:b8:53:6c:80:7c:29:6d:02:c8:f8:61:b0:d8:5f:
         7c:24:b3:99:e6:54:ad:b1:87:62:00:8f:29:ff:e1:f9:58:32:
         cd:76:1b:48:e3:ae:0c:dd:1f:88:fa:b0:d7:04:38:86:e9:52:
         3a:4d:d6:db:22:83:27:4e:27:5a:77:4a:50:82:8d:b1:ad:b2:
         7d:ea:75:ab:09:44:84:df:d8:ea:1b:5b:53:ff:73:fe:c7:47:
         37:0a:44:f4:df:3b:f1:4e:e4:db:1d:fc:92:0f:ce:be:51:ce:
         b1:0b:5f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:10:07 2025 by rpki-client