Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/2014f7a8-75f9-3126-9a60-757a4a87d8be.roa
File:                     2014f7a8-75f9-3126-9a60-757a4a87d8be.roa (raw, json)
Hash identifier:          1IbsTvsTWRVOqtvaU51hJgwNXv+oA3LpSQXn6ZGthdI=
Subject key identifier:   A6:7B:7B:6F:4F:8B:8F:CF:28:7A:37:D8:D2:4A:FB:E6:E8:AA:54:F3
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584D24E039DABB490BE6D8CE3900
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/2014f7a8-75f9-3126-9a60-757a4a87d8be.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.23.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:39:da:bb:49:0b:e6:d8:ce:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=86a5f455-3ab5-4666-be93-5f91e1d91637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:53:33:e1:da:8e:f8:23:9a:b7:ff:a2:c4:
                    0c:70:64:73:7c:23:d3:27:7e:60:35:d3:9f:95:7c:
                    25:50:64:3e:9f:e7:82:c3:5f:8f:a4:25:62:ac:fb:
                    54:68:82:f7:cf:c8:0e:18:b3:5b:f9:6a:fb:d3:2f:
                    de:97:1d:bc:e0:8b:5a:21:ec:69:8c:58:a1:8e:85:
                    cc:6f:9c:39:b6:c5:58:be:c7:33:79:85:c0:50:b2:
                    8b:ad:25:65:2d:52:0e:bb:5b:8e:4a:4f:76:54:be:
                    62:ee:61:7d:89:07:85:07:7b:d7:41:10:a6:e4:44:
                    73:63:66:87:7d:78:9a:e3:e0:91:d8:ce:75:7b:cd:
                    81:ec:bd:ed:92:ea:b5:32:8d:6d:4e:46:f1:3e:d8:
                    2f:f0:7f:ba:af:f4:0e:93:6e:98:a3:a4:72:41:1b:
                    81:c1:f9:06:2f:f3:d4:eb:b6:d5:72:8b:5a:b1:77:
                    e8:a2:a9:d1:a7:ad:a3:4a:da:7f:09:f4:62:a9:79:
                    5f:51:91:8c:e0:3b:dc:77:64:9a:ff:7b:e2:57:83:
                    86:f4:7b:bd:80:48:aa:f9:b4:e3:9b:40:c5:12:92:
                    21:a3:b0:a6:35:8c:ee:fa:48:e8:f9:37:e4:78:b7:
                    e4:93:82:df:58:c1:51:62:ca:b1:f3:be:4a:75:1b:
                    97:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7B:7B:6F:4F:8B:8F:CF:28:7A:37:D8:D2:4A:FB:E6:E8:AA:54:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/2014f7a8-75f9-3126-9a60-757a4a87d8be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c1:cd:18:41:16:ce:fd:aa:bb:be:de:0c:34:eb:77:4c:6b:
         9c:85:b4:ea:5c:9e:d4:af:b4:90:43:60:c9:87:ef:0e:9c:a2:
         9f:3b:80:22:75:95:6a:0c:fa:ff:2b:48:12:58:87:6e:0a:dd:
         a2:82:82:43:1e:de:05:00:32:9a:74:3c:32:fc:62:32:a1:2c:
         04:78:c3:12:2f:28:84:e8:18:8a:75:4a:af:47:fb:d0:93:8f:
         c8:a0:46:0a:71:17:9f:18:22:8d:ea:c6:9b:fc:60:79:7f:5e:
         66:80:87:22:82:0e:7b:00:8c:b9:cb:93:12:8c:3b:b8:b7:5c:
         1e:68:2d:80:ce:10:41:fc:17:19:1f:6b:37:6f:47:40:79:7e:
         55:4d:ed:e7:18:f6:ee:4c:db:1b:f7:7f:5a:65:a1:dd:21:fb:
         35:fd:bb:15:93:b0:44:91:f8:fa:d3:0d:21:7f:21:81:8b:37:
         36:fa:4d:84:a2:67:2b:a4:f4:0d:2a:9e:ef:a9:8a:01:9b:42:
         1a:6e:99:c2:9b:c2:4d:fe:b3:60:65:95:47:e3:4e:75:87:24:
         c9:10:83:19:60:81:3d:08:fd:f4:4c:59:34:6a:33:2a:ce:cf:
         36:06:24:76:b1:6e:b8:f5:c9:d9:1f:b8:28:2e:de:81:ee:90:
         48:60:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:26:10 2026 by rpki-client