Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e3287e9e-b8bb-33d0-8721-3afe283b5c46.roa
File:                     e3287e9e-b8bb-33d0-8721-3afe283b5c46.roa (raw, json)
Hash identifier:          sAYRVxWEstKrG5gHHTFC5nuDV9IXV9mvVFCDpPjscPM=
Subject key identifier:   FA:4E:2B:70:F3:D5:37:30:B3:85:45:33:DA:AE:86:A8:01:2B:2B:7B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A84122B31B030EABE7D31EA00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e3287e9e-b8bb-33d0-8721-3afe283b5c46.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.23.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:2b:31:b0:30:ea:be:7d:31:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3ebe43b2-247b-4681-82da-f1b015b05447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:42:6b:1a:8e:8b:27:fa:9e:23:1d:01:89:
                    c8:fc:f0:3a:0a:92:b6:d7:de:25:5a:2e:c2:fe:26:
                    f5:14:f2:52:e8:16:1b:28:81:b3:f9:48:e0:3e:0b:
                    0a:3c:b2:c4:0d:5c:b7:1e:78:04:02:e3:cf:d0:d9:
                    3c:e5:27:a3:1b:71:02:a9:f5:f6:f7:fb:3d:c3:63:
                    a4:43:52:4d:52:9d:4a:bc:24:9d:b3:4c:20:e5:01:
                    96:3e:28:57:33:e3:28:a3:21:c6:6c:b0:9b:78:04:
                    cc:73:b2:62:16:dd:94:f8:56:16:a2:0b:b2:8d:eb:
                    e5:55:c2:ec:e2:ab:e3:2b:65:32:bc:8c:79:04:b1:
                    ac:52:24:da:41:23:a3:03:4c:50:a8:4f:f0:12:27:
                    56:62:fe:25:d6:79:0f:8a:74:3a:1c:fe:07:2b:b0:
                    1c:77:10:b1:2e:b6:0a:20:54:9a:f3:09:e9:e5:8c:
                    b0:44:c3:42:69:d4:8f:0d:e5:88:43:d0:34:25:0a:
                    e2:0c:2c:c8:58:bf:41:7c:6b:e2:7c:45:9b:94:86:
                    57:5e:63:1c:81:51:7c:20:96:eb:4b:07:ff:94:ac:
                    6f:d2:87:fb:b6:19:09:95:a2:b0:8d:2e:6e:0c:88:
                    32:f8:12:0c:47:8b:79:72:bc:c0:10:e5:0e:63:5b:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4E:2B:70:F3:D5:37:30:B3:85:45:33:DA:AE:86:A8:01:2B:2B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e3287e9e-b8bb-33d0-8721-3afe283b5c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:46:18:9d:17:ff:ea:73:86:1d:94:ad:ca:9b:c4:15:85:48:
         a5:68:51:a1:18:52:27:ac:0c:15:14:15:d5:45:b9:ac:f2:65:
         77:3a:ec:e9:9c:8f:ea:62:1e:06:23:55:4a:24:32:70:4f:60:
         07:2d:47:b4:4a:c5:07:a5:bd:c6:6d:cf:3f:c1:11:ce:6a:ed:
         d3:69:ea:68:a3:eb:74:a8:1a:fa:0d:8b:6c:12:39:b8:8d:eb:
         99:5a:b7:13:23:ff:b8:6c:5e:c3:4f:35:64:0b:1e:0c:2b:a5:
         b4:db:be:b2:31:82:07:33:e9:5c:c4:92:b0:ac:d8:5c:6e:c9:
         94:1f:a0:77:6f:63:4b:91:87:81:85:3c:e8:09:21:ce:fe:e9:
         81:db:5e:91:64:6c:69:26:c8:f4:48:84:51:9c:dc:80:c4:cc:
         15:b7:ea:67:20:2a:9c:55:d5:39:c2:10:65:3a:56:b0:16:be:
         f1:f6:55:fc:07:4b:cb:c2:05:1c:ab:93:db:07:72:e1:96:03:
         39:48:73:e3:f2:85:61:11:df:0d:2b:88:7b:6a:85:49:f6:b4:
         22:83:c0:8b:8c:d9:1a:3d:f4:50:a9:eb:2f:98:b2:13:c2:ac:
         8a:5f:1f:5e:31:21:b9:1e:5f:75:e1:1a:04:af:65:df:93:bf:
         b9:77:31:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:04:41 2025 by rpki-client