Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/407a407c-fb30-3738-87f6-1d5897210481.roa
File:                     407a407c-fb30-3738-87f6-1d5897210481.roa (raw, json)
Hash identifier:          4LwB5AQ7mW+SDHQ8BMBY/lrTyDACbc/k48DXy1Hjs1E=
Subject key identifier:   0E:9A:44:3D:9F:03:34:A0:4D:6E:DB:34:7F:3A:B9:C5:F3:9C:A1:FD
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584B64CE1D8D3E613A81DE9B9800
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/407a407c-fb30-3738-87f6-1d5897210481.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.23.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:1d:8d:3e:61:3a:81:de:9b:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ed80d853-e2c1-4854-abe5-04db6629676c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9e:3c:d8:be:f2:dc:1d:67:18:bc:c1:c9:12:
                    1f:53:52:46:52:b9:4f:1c:92:65:26:ee:70:9d:b5:
                    33:64:b5:4b:ad:ee:55:c1:25:fe:22:d6:dc:1e:59:
                    eb:0c:12:2e:d2:d8:99:15:3b:46:72:7a:eb:67:00:
                    ae:89:47:43:d4:54:ee:24:2e:00:3b:81:80:64:16:
                    79:4e:8b:c2:2b:a3:50:5c:42:52:19:fa:88:2b:39:
                    d2:0f:8c:7b:5a:04:3e:4d:43:90:dd:88:59:9c:4e:
                    96:61:01:12:33:21:fe:44:90:44:7d:b1:39:fd:c5:
                    fa:eb:6b:c5:59:f0:e5:81:3f:ed:60:b9:81:cc:83:
                    d5:19:6f:53:cb:1b:39:dd:e0:63:87:5f:a0:cc:38:
                    97:93:db:9c:ee:02:5b:ba:9b:a2:1f:f6:78:3f:08:
                    82:63:58:05:b8:fb:4d:44:aa:08:96:32:85:cf:e9:
                    46:8e:a6:6a:6e:e7:b8:e6:16:95:8a:2c:a6:ae:5a:
                    c1:f2:1b:f3:01:17:af:69:0f:36:d6:c3:4b:21:ef:
                    c0:5d:af:c1:a6:d7:6f:4c:3f:b8:09:56:ae:13:88:
                    e7:2d:a3:f4:69:24:77:ea:4b:e0:0c:ec:fa:ff:b6:
                    4b:0f:a7:97:70:dd:8b:d2:5f:cf:7d:95:ad:68:12:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9A:44:3D:9F:03:34:A0:4D:6E:DB:34:7F:3A:B9:C5:F3:9C:A1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/407a407c-fb30-3738-87f6-1d5897210481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:65:cb:02:32:6e:67:1e:1c:26:63:c2:e6:09:48:35:1a:b3:
         95:71:26:2f:6a:98:36:fb:c5:a0:f5:f3:4e:fc:ff:a7:6d:a1:
         cb:1d:99:a1:3a:61:68:d6:e8:09:35:7d:21:5f:29:21:01:da:
         05:02:f1:14:4f:5c:ca:0d:29:58:77:a1:fb:76:ac:a9:a2:b0:
         80:4e:d1:5e:e5:26:77:a8:6a:dd:5c:05:e2:b3:dc:e5:56:11:
         13:5b:58:f9:e1:69:22:b0:6c:70:74:46:88:98:ec:d8:b6:23:
         ba:41:27:ba:e1:20:88:4a:03:be:70:bf:12:84:e3:32:51:fc:
         bc:48:80:a7:39:1e:39:69:b8:7b:aa:15:45:c8:d6:15:99:d2:
         2a:b7:d9:4a:97:56:d7:b3:e7:7e:4d:98:ae:f0:63:43:fa:2d:
         8b:e1:db:65:1b:40:c9:7e:4c:97:fa:08:6f:f2:47:17:64:67:
         e2:76:3e:90:ce:d9:e7:b9:b8:41:47:fd:90:5b:5b:a7:f2:8f:
         ea:21:88:7a:c6:94:84:34:86:fd:9b:20:49:bd:78:76:35:fe:
         6d:09:24:e2:0d:92:05:1d:57:e4:7f:41:ad:e0:49:8d:f5:d4:
         8c:93:ad:96:dc:07:45:82:00:cc:db:48:7b:73:df:05:6e:14:
         2e:a2:1c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:22:51 2025 by rpki-client