Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/5013c823-93f0-3644-8d81-79f1e757264a.roa
File:                     5013c823-93f0-3644-8d81-79f1e757264a.roa (raw, json)
Hash identifier:          aUJPRozz/ksJLF36L/ck2ziLUhd9e1+/buoKrcSDil0=
Subject key identifier:   45:DA:FC:08:96:84:A7:8B:1F:C5:EE:51:FC:0B:A6:D6:4B:BB:F7:63
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584F49850615555586A7BA384A80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/5013c823-93f0-3644-8d81-79f1e757264a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.23.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:06:15:55:55:86:a7:ba:38:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=950d8191-fa68-40db-be9d-f79463f42e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:26:da:e1:12:74:42:da:f6:25:d3:ad:47:d6:
                    21:91:fc:23:9d:ae:c4:9e:46:fe:17:a8:e0:ae:33:
                    50:dd:a2:a2:e1:a0:3a:c9:bf:f4:fa:f8:d7:d4:1c:
                    49:b4:f1:2b:fb:9e:0c:30:83:5a:86:1b:e5:fa:3d:
                    05:52:9b:e2:49:1f:d4:44:28:56:c6:15:0a:7b:4a:
                    6c:63:33:b4:0f:0a:75:05:77:69:b6:b2:b8:2a:4e:
                    a8:7e:06:ff:88:51:87:30:41:3a:8a:c8:36:17:f4:
                    a6:9e:78:a3:d4:0a:21:be:01:01:08:67:1c:83:39:
                    bc:f0:f1:b0:85:ce:88:37:4e:bc:c1:ed:b6:f9:1e:
                    ab:81:12:ba:10:ba:d2:6c:e2:ea:52:e5:d4:c5:4d:
                    84:73:a2:73:f3:c3:a3:b1:37:8b:c9:38:47:b2:ab:
                    7f:88:f3:24:8e:d3:17:e5:ac:b2:ac:d3:f0:29:a4:
                    f0:90:4f:92:06:ef:c4:e7:46:f5:70:85:57:87:da:
                    e1:f9:ea:16:95:de:1f:c4:5e:84:f2:bc:33:cc:f1:
                    6e:aa:b4:c3:3e:7a:05:cb:e9:e0:b0:dd:97:46:26:
                    c3:89:d2:54:ca:10:5c:7b:1d:3d:5f:ec:35:35:02:
                    b6:12:50:69:bf:33:d7:c2:53:b1:b2:4b:90:d3:28:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DA:FC:08:96:84:A7:8B:1F:C5:EE:51:FC:0B:A6:D6:4B:BB:F7:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/5013c823-93f0-3644-8d81-79f1e757264a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d0:48:8e:11:52:13:0f:b9:76:fe:60:7b:8d:4c:34:63:ee:
         a7:be:36:e9:cc:af:94:f8:c7:fe:e0:45:d5:ad:52:8c:ba:86:
         a4:1f:bb:99:22:94:a9:ba:9b:03:74:aa:e4:19:8a:c2:d8:0e:
         1b:60:73:05:00:7b:3a:e4:ae:7b:a0:e6:3f:c9:5b:1f:89:39:
         15:32:e5:d4:3a:1f:03:5c:bc:a2:ae:80:08:a3:57:f3:c3:9d:
         46:4e:89:db:d1:af:ab:a3:87:be:9f:c2:62:06:c6:a8:16:ed:
         c8:3f:cd:ba:c5:e8:39:72:ec:e6:2e:60:a3:22:86:fb:2f:7b:
         73:42:21:a7:e3:cd:00:ac:5e:8e:ed:30:ac:b7:c9:1c:0a:f7:
         7f:6e:18:f7:b3:18:55:b6:e5:a1:92:7e:1a:bb:ce:da:f0:f2:
         7a:9c:59:f0:3f:c1:d4:9b:44:fa:f4:9e:4d:45:e3:06:41:73:
         f0:53:f8:33:e6:47:83:ec:d7:41:84:e3:4d:cf:9f:90:28:ab:
         ce:dc:b0:ac:06:92:95:fe:3b:3f:ea:a0:95:e6:bc:73:86:c6:
         4d:96:07:cb:02:00:a7:5b:28:78:84:ab:2d:3e:86:8c:23:b0:
         ee:a8:1c:68:39:d8:f8:e6:cb:c9:75:a0:22:bf:d1:5f:42:f4:
         dd:db:6b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:47:58 2026 by rpki-client