Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/458161cc-7b62-3707-bb19-fa0dcbc51337.roa
File:                     458161cc-7b62-3707-bb19-fa0dcbc51337.roa (raw, json)
Hash identifier:          kke43qdO9G/el4tq2dZyhCzFPzn2EQ8i1rQcczcu1qo=
Subject key identifier:   2F:0E:62:0E:01:3D:99:EE:4B:54:89:C9:68:1C:81:29:22:6F:8D:83
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584F497CDAE013DDA5A2BBB7CBA0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/458161cc-7b62-3707-bb19-fa0dcbc51337.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.23.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:da:e0:13:dd:a5:a2:bb:b7:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7720cc8e-9f43-49eb-bfd2-6d058f44adf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b7:ab:c2:b5:ee:93:49:9a:ba:03:1d:49:0b:
                    33:19:63:74:06:90:dd:e9:73:b5:38:b4:eb:87:b7:
                    10:c9:3f:00:5d:ba:64:c5:50:81:cc:2a:28:c6:28:
                    c5:5c:1a:e1:9d:5a:0c:00:d8:b2:d2:0e:60:17:e9:
                    46:cb:29:08:37:2c:9c:7c:ac:85:57:6e:f3:5f:07:
                    67:ff:0f:1a:87:a6:3f:30:6b:74:ad:de:1e:96:21:
                    3b:66:4a:ac:75:40:a4:84:ea:28:73:7b:0a:a9:0d:
                    af:c6:29:89:6d:9a:77:e2:5b:67:32:f9:d0:59:34:
                    00:cc:06:b8:b2:15:5f:4c:95:e7:52:ba:4a:ed:43:
                    ac:b8:be:45:32:b5:f4:ee:c7:6f:7f:9d:fb:eb:1d:
                    a4:ef:90:0c:2d:a7:57:0e:5c:06:13:3c:01:96:e2:
                    11:cb:72:17:36:b3:53:d1:f5:65:8a:d0:cd:88:c0:
                    a2:7a:68:e2:fa:d2:8d:ff:fe:72:7e:39:a7:4b:42:
                    c9:a5:9a:77:da:46:69:fa:7d:ec:f0:e8:c1:ac:96:
                    93:54:f5:2a:a6:7b:48:ed:2d:ec:58:e7:cd:73:0c:
                    94:8b:84:e8:9c:5d:96:ab:96:2b:60:9a:73:01:bc:
                    4c:33:3c:a4:02:1e:0c:21:0b:d1:e1:e0:90:38:6a:
                    07:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0E:62:0E:01:3D:99:EE:4B:54:89:C9:68:1C:81:29:22:6F:8D:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/458161cc-7b62-3707-bb19-fa0dcbc51337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c2:b7:5e:79:85:37:5d:84:0f:09:21:d0:20:5b:53:12:f6:
         91:78:9c:e3:4c:65:97:14:f9:7d:a1:c5:b3:7a:72:a0:f6:f0:
         d6:cd:68:6b:af:7c:98:e7:8e:b1:4b:5b:ae:fe:d1:44:c5:74:
         7b:57:44:76:16:a8:71:07:d8:01:ac:0c:f5:dd:be:9d:23:a2:
         25:b6:84:bc:69:66:59:0a:78:80:4d:a8:ed:8c:28:a8:44:d6:
         77:f6:ab:d7:77:d8:55:12:6f:a5:ac:22:f0:3d:7d:e4:f1:e5:
         12:a5:0a:8a:4d:bd:3c:07:7b:bf:10:14:10:2d:e9:ed:d5:13:
         5c:74:c9:bd:22:5d:84:2f:ce:93:01:85:06:2c:f6:e5:ba:80:
         f9:51:ef:33:09:d3:51:f1:4a:83:2c:51:3e:5e:5f:b4:5c:17:
         86:42:bb:2b:44:4a:ee:d1:5d:1b:23:d1:19:3f:63:5e:5f:e4:
         89:96:0d:5d:98:7c:d4:90:f0:c0:ae:da:12:ed:2a:34:44:22:
         a7:a1:41:c1:91:c6:c4:c8:6d:3d:5c:8c:82:d9:71:1d:72:18:
         45:7c:01:e6:ca:f9:85:4e:f5:17:39:af:bf:18:4e:d1:50:d7:
         8f:b2:7c:91:a0:f7:30:97:6a:b2:2f:9a:da:7f:12:6f:0d:23:
         8d:fa:e0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:22:45 2026 by rpki-client