Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d49add77-32a9-330b-a617-5437e0eedea5.roa
File:                     d49add77-32a9-330b-a617-5437e0eedea5.roa (raw, json)
Hash identifier:          op5drBBdDDfRh7++StHmYMERfKBht0Qsv3YZMgpypVM=
Subject key identifier:   9E:20:90:4B:3B:4E:16:51:56:10:46:30:1E:BB:D2:A3:D9:3C:45:79
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A841224F98FA6299E5C4EE500
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d49add77-32a9-330b-a617-5437e0eedea5.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.23.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:24:f9:8f:a6:29:9e:5c:4e:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5660add9-81f4-4fea-ba86-5b4c352516d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a4:4a:52:3e:36:3c:f9:76:24:2e:0f:31:01:
                    f0:f9:75:eb:2b:a5:bb:ea:87:f1:4d:f9:eb:95:cf:
                    79:de:d8:d2:d5:ae:59:a3:4f:47:19:90:89:75:07:
                    f3:4e:a2:e8:f5:13:ee:2c:aa:39:5d:c8:ac:a0:23:
                    7a:12:8c:42:83:b0:51:25:e9:5c:5a:67:f7:16:9d:
                    ce:bf:61:df:3c:c9:a4:f8:21:b1:16:44:90:e4:73:
                    c0:e8:c7:17:40:57:2f:c6:89:0d:09:d8:e7:a3:e7:
                    8c:56:1f:16:08:fd:34:d0:a1:e1:96:d8:95:71:3f:
                    b9:db:d9:11:6a:07:09:0a:4e:10:63:44:9e:a7:24:
                    49:01:58:0e:71:4b:bf:b6:4f:54:c4:a9:df:aa:22:
                    c1:df:3f:a4:74:d2:b8:3e:1c:1e:97:fd:33:c4:07:
                    f3:70:90:e2:95:f1:33:8e:c6:f3:53:40:cc:ca:9b:
                    6b:5b:b0:b4:f5:fd:3f:87:f7:71:52:cb:c2:6f:32:
                    63:ee:1e:0a:fa:83:bf:f3:d2:1c:f1:96:37:84:67:
                    a4:c8:bd:c0:49:28:e2:32:38:13:ba:f1:cb:38:bf:
                    82:bd:84:7b:ea:11:62:ab:c4:fb:23:1e:cc:62:4b:
                    43:9a:b6:51:46:fc:43:bf:4b:02:14:20:fc:13:df:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:20:90:4B:3B:4E:16:51:56:10:46:30:1E:BB:D2:A3:D9:3C:45:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d49add77-32a9-330b-a617-5437e0eedea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:51:be:3f:47:1e:dd:92:ac:a4:93:f5:2b:ce:da:b3:62:2c:
         c4:8e:ab:de:a8:72:52:74:73:d7:6c:d3:03:51:3c:b3:42:a0:
         a9:f6:f9:b2:a3:1e:f9:4c:50:23:3a:57:8c:fc:e8:4f:ae:09:
         52:80:9b:73:99:da:02:90:13:ef:71:6d:e3:0a:9e:84:ac:ff:
         fe:09:da:5a:e5:c3:26:00:5f:ee:32:17:bc:a9:22:d0:8b:39:
         16:f2:01:4c:c7:cf:6a:a2:61:f6:a2:cc:e3:8f:ce:0d:64:2a:
         2c:4d:33:7e:cb:cd:7f:a6:40:e6:18:ec:cd:43:34:69:ff:7b:
         fc:bc:cb:35:05:f5:b7:50:04:20:45:ca:c1:35:89:ae:f3:c4:
         e2:e2:13:fe:02:cd:35:89:58:74:8b:d9:a3:80:a4:87:ed:03:
         4a:ec:72:ba:b1:8e:30:ca:05:1d:b1:1b:dd:63:7e:b0:c4:f6:
         c5:8a:a8:bf:d2:d4:7d:35:e8:04:86:92:3e:f8:c8:22:ea:f0:
         b9:df:0a:39:be:b0:5a:7e:79:0f:1e:59:25:23:5c:f3:fb:89:
         b6:cd:9b:64:8c:ad:6a:79:f2:d0:7d:a6:6c:0e:ae:7a:8f:a7:
         23:01:1b:4c:03:f2:91:8b:53:60:46:d0:e9:a6:72:69:09:97:
         58:c7:79:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:00:08 2025 by rpki-client