Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/174e4c00-0508-37df-a9a8-99f248a7930d.roa
File:                     174e4c00-0508-37df-a9a8-99f248a7930d.roa (raw, json)
Hash identifier:          vRcRIxJI73F/BTk0DEGHiZlNrYHjE1EZPXGc+w9D+Zw=
Subject key identifier:   9B:78:CE:FB:72:D5:0C:49:9F:EB:D6:52:8B:2B:E5:23:7E:0B:07:6D
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584F497CFA8B3140629B8B903C40
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/174e4c00-0508-37df-a9a8-99f248a7930d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.23.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:fa:8b:31:40:62:9b:8b:90:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=799e9362-7d5e-4976-af62-25295b46b29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:d5:a3:3c:61:af:9d:7d:34:a1:a8:7d:67:
                    78:a4:3d:54:6b:e2:4f:39:b9:1d:1c:fa:0c:36:f4:
                    9f:60:c2:bd:da:1e:84:64:3a:5f:38:a1:4b:09:84:
                    49:97:a2:90:cb:00:67:05:e9:1f:3e:60:37:b2:4c:
                    3c:17:4f:c6:23:ed:e2:7f:36:dd:26:71:60:29:81:
                    4f:e3:a5:1a:f6:f9:33:1a:2a:ee:f1:d6:00:b3:a5:
                    ee:37:07:07:4c:91:68:a1:c3:2e:b0:4d:16:d7:aa:
                    37:2a:29:a5:6f:10:fc:64:7c:f2:f9:18:59:51:1c:
                    c0:13:88:65:38:74:ed:37:4a:e9:cf:f1:b0:84:04:
                    36:e2:55:92:58:d6:91:a0:1c:49:2b:b5:73:96:21:
                    02:01:6d:42:19:a5:2b:5a:12:3a:3f:f6:35:18:c5:
                    37:72:fb:b3:68:c1:43:7e:58:24:b7:f3:aa:bb:a4:
                    d1:76:ca:7e:11:cd:43:a1:04:31:46:e7:1d:a1:9c:
                    ff:5b:7d:c5:ec:f2:3c:a2:76:1b:59:44:77:0e:72:
                    4a:cd:48:52:37:4f:50:31:17:33:c4:e3:fa:77:55:
                    bb:e0:c2:e2:91:d2:16:aa:72:ce:d6:b2:7e:09:35:
                    53:5c:16:50:d4:ec:93:da:e5:2e:ea:54:94:1a:f7:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:78:CE:FB:72:D5:0C:49:9F:EB:D6:52:8B:2B:E5:23:7E:0B:07:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/174e4c00-0508-37df-a9a8-99f248a7930d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a4:0b:80:b9:2a:d8:23:c4:00:94:6b:a0:ef:e7:55:9c:a4:
         cb:af:04:fa:23:54:6e:5f:19:71:73:87:82:e1:26:2d:0c:bb:
         6c:79:d4:41:44:b8:76:dc:69:6a:48:94:6c:ff:4e:67:d5:fd:
         eb:dc:7f:bf:59:d4:30:20:00:1b:2b:82:e1:50:72:49:14:ba:
         c0:3e:e7:84:65:77:c6:e6:91:6a:57:57:50:e1:9b:e9:36:ab:
         a7:4f:7a:fd:b8:ed:00:7b:42:45:50:13:f9:67:db:1e:a9:8e:
         77:9e:61:dd:62:73:ac:9a:28:f7:9c:7c:6d:34:1a:19:b8:dd:
         e7:4e:96:63:ae:e5:ba:0e:9e:21:c4:32:2c:51:9e:d2:78:bb:
         fb:61:9d:92:be:99:cd:86:e9:e0:e3:c2:b2:3f:5a:56:98:00:
         38:47:62:bd:29:27:29:ec:2b:e7:dd:16:2e:aa:3f:e1:fd:f6:
         7a:6a:5a:a0:99:07:55:f7:d2:24:45:a2:83:7d:55:a7:b6:50:
         34:4b:6e:2f:06:02:64:88:22:0d:fc:84:6c:1f:f4:b0:70:c0:
         49:05:a2:08:06:aa:48:eb:21:29:28:43:b4:e7:85:3f:ac:9c:
         48:dc:75:e7:c5:1f:4b:78:a6:62:5a:10:4d:c5:44:ac:f7:53:
         f0:6f:21:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfPqLMUBim4uQPEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Nzk5ZTkzNjItN2Q1ZS00OTc2LWFmNjItMjUyOTViNDZiMjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU/Vozxhr519NKGofWd4pD1Ua+JPObkdHPoM
NvSfYMK92h6EZDpfOKFLCYRJl6KQywBnBekfPmA3skw8F0/GI+3ifzbdJnFgKYFP
46Ua9vkzGiru8dYAs6XuNwcHTJFoocMusE0W16o3KimlbxD8ZHzy+RhZURzAE4hl
OHTtN0rpz/GwhAQ24lWSWNaRoBxJK7VzliECAW1CGaUrWhI6P/Y1GMU3cvuzaMFD
flgkt/Oqu6TRdsp+Ec1DoQQxRucdoZz/W33F7PI8onYbWUR3DnJKzUhSN09QMRcz
xOP6d1W74MLikdIWqnLO1rJ+CTVTXBZQ1OyT2uUu6lSUGvd5tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJt4zvty1QxJn+vWUosr5SN+CwdtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMTc0ZTRjMDAtMDUwOC0z
N2RmLWE5YTgtOTlmMjQ4YTc5MzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBcsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABykC4C5KtgjxACUa6Dv51WcpMuvBPojVG5fGXFzh4LhJi0Mu2x51EFE
uHbcaWpIlGz/TmfV/evcf79Z1DAgABsrguFQckkUusA+54Rld8bmkWpXV1Dhm+k2
q6dPev247QB7QkVQE/ln2x6pjneeYd1ic6yaKPecfG00Ghm43edOlmOu5boOniHE
MixRntJ4u/thnZK+mc2G6eDjwrI/WlaYADhHYr0pJynsK+fdFi6qP+H99npqWqCZ
B1X30iRFooN9Vae2UDRLbi8GAmSIIg38hGwf9LBwwEkFoggGqkjrISkoQ7TnhT+s
nEjcdefFH0t4pmJaEE3FRKz3U/BvIdU=
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:45:07 2026 by rpki-client