Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/5013c823-93f0-3644-8d81-79f1e757264a.roa
File:                     5013c823-93f0-3644-8d81-79f1e757264a.roa (raw, json)
Hash identifier:          +uahfsKTVCDyN6f3f5ZkHSrYTwuKYJjSMVZXYZxJhRA=
Subject key identifier:   BC:DE:32:9A:1D:29:7E:04:F0:90:09:1D:46:D9:3C:62:C6:CE:BD:32
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584D24E0ECA1989A069CAC1B2D00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/5013c823-93f0-3644-8d81-79f1e757264a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.23.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:ec:a1:98:9a:06:9c:ac:1b:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=a5014822-9efa-4f21-8c66-aa18f46ec5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a0:3b:14:54:03:ce:bc:bf:4c:a5:db:f1:54:
                    93:bb:d0:8b:cf:d4:73:3f:64:5d:3d:14:d5:ee:fd:
                    c2:e8:61:e8:ea:7e:ec:18:e7:e4:49:e4:c7:64:c7:
                    82:99:9c:04:d1:99:d1:8d:91:e1:05:8f:b7:a3:56:
                    cf:e7:94:d5:3e:f0:1e:4f:14:98:04:58:76:94:d2:
                    f1:32:4e:9b:1e:c4:78:c5:8e:a2:b7:a7:3e:b3:79:
                    df:93:36:90:a4:04:02:f8:9d:65:f3:fa:d7:b3:ea:
                    0f:27:f3:c6:7f:b2:1e:32:91:3d:77:7c:28:d2:4c:
                    b5:ba:11:0a:36:22:d9:f8:00:71:06:da:04:34:9a:
                    23:92:b0:d7:9e:5a:db:a3:4e:36:1a:d1:81:aa:0c:
                    9a:7e:fb:41:cf:d2:a1:1d:66:fe:b1:aa:54:1a:e2:
                    db:b4:54:63:81:46:21:3f:37:bb:d9:ce:08:27:63:
                    8b:a8:88:4f:78:fd:29:8b:7a:30:fd:94:50:05:29:
                    95:49:2d:2f:a0:ba:aa:6e:41:44:0a:8d:a8:79:ca:
                    3d:d4:75:9d:66:51:51:b1:36:cc:7e:93:b5:ee:c5:
                    b9:28:4b:97:c2:69:4c:15:81:de:f8:a9:b5:b6:a0:
                    e5:93:cf:91:a2:73:66:6e:ac:8f:1f:4a:b7:90:f1:
                    dc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DE:32:9A:1D:29:7E:04:F0:90:09:1D:46:D9:3C:62:C6:CE:BD:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/5013c823-93f0-3644-8d81-79f1e757264a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c8:a5:4d:da:4a:11:61:33:f1:55:c9:ec:34:19:99:96:d3:
         76:cc:31:49:ee:6f:e8:d6:a2:0b:63:bb:51:fb:e0:ec:d3:2b:
         54:91:25:e8:f1:4f:c0:30:45:2e:b6:0f:0d:f5:d0:83:61:48:
         2c:64:07:3f:37:b6:09:82:99:94:0a:24:12:f3:84:da:22:8e:
         9b:83:e6:5e:1f:9b:aa:72:d2:8e:ce:b7:ad:fa:7e:09:9c:6d:
         f4:3f:b4:63:fb:84:f4:73:af:e6:9b:a6:83:07:78:01:fc:1f:
         a2:a9:d4:6e:57:52:5f:ce:1b:76:aa:3e:6f:60:8c:29:13:77:
         e4:57:8e:47:46:08:df:90:c7:b0:5a:1b:8b:52:c0:99:a2:af:
         47:cf:79:ed:e9:3d:7c:ba:98:6e:1b:0a:8e:63:8b:1c:3e:f1:
         e5:67:a7:c6:97:09:8f:8d:b8:18:1e:cb:c5:61:a8:37:80:d7:
         e7:50:3a:b7:22:b7:3c:b5:d8:18:26:9a:5a:4f:63:fa:61:ff:
         e8:e9:35:ba:3c:23:bd:3e:d8:d5:0c:58:65:94:18:f1:dc:03:
         a9:95:ae:26:e2:d6:34:4b:04:22:9d:a6:07:81:e8:96:8a:ad:
         71:37:f1:a6:7c:86:a9:a4:be:42:4e:67:bd:a3:d9:d8:22:81:
         a3:b2:3c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:29 2026 by rpki-client