Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d6833554-06c7-3ae8-b56d-6bc713577978.roa
File:                     d6833554-06c7-3ae8-b56d-6bc713577978.roa (raw, json)
Hash identifier:          cbHt531xrH5YFfMaJR7+TtgCz828mtLfI1QbKKP5ZfI=
Subject key identifier:   46:20:84:63:71:A2:24:4C:18:18:0F:4E:B8:3D:FE:80:CD:2C:AC:4B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584D24E0E02ACFA962040F48CF80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d6833554-06c7-3ae8-b56d-6bc713577978.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.23.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:e0:2a:cf:a9:62:04:0f:48:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=d0ea35df-192d-4a03-af37-d2ad0fd9741c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:db:12:f6:54:b9:16:cf:ab:3e:07:e1:1e:
                    9c:d4:43:a3:c9:7c:88:21:80:b7:17:53:72:63:45:
                    92:e3:01:2a:2a:96:9f:7d:fa:3c:46:da:34:93:1f:
                    c2:0f:f2:4d:7d:73:a0:a9:cb:3e:7d:72:19:d0:68:
                    e3:2c:a7:22:d1:cb:ac:ce:ec:f3:a5:fa:07:d2:83:
                    53:94:5a:27:86:fc:9a:c2:e9:0f:78:56:a6:44:c2:
                    0a:2c:43:35:ff:b1:42:95:91:1f:7a:08:48:cd:1d:
                    d8:1b:2f:45:71:e2:1e:02:6d:ab:98:a3:18:45:e3:
                    cb:7b:3f:dd:f0:27:6a:6a:9d:08:82:53:7c:8a:8b:
                    09:ab:a7:34:7a:46:53:39:d0:08:c5:a3:25:ed:75:
                    ba:c4:eb:7a:d5:3f:af:eb:6d:72:88:67:db:f7:01:
                    76:67:14:a6:a3:a7:a2:ca:6e:ed:f9:61:4b:9c:84:
                    9c:0e:ac:20:10:c4:9e:be:1a:b5:66:a3:ea:e8:25:
                    bc:e0:98:86:5e:1e:9e:0c:75:ed:8e:21:fb:33:51:
                    fc:53:a0:ab:7d:3a:d7:63:9e:d7:8b:08:8e:32:e0:
                    d2:59:2f:60:d2:31:05:e6:c0:17:44:47:b5:35:0c:
                    86:8c:ed:d4:b5:c2:91:74:3d:99:8e:ba:21:c5:aa:
                    ed:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:20:84:63:71:A2:24:4C:18:18:0F:4E:B8:3D:FE:80:CD:2C:AC:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d6833554-06c7-3ae8-b56d-6bc713577978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:2d:10:8a:7f:0a:cc:fa:2a:63:8f:81:56:b2:9a:9d:74:83:
         de:df:d1:3c:89:7a:ec:b5:eb:45:1d:4b:77:ae:c8:dd:0c:fe:
         9f:a3:89:56:49:14:b1:bd:05:a4:1f:2e:76:8a:11:a6:83:ee:
         d8:75:84:84:13:51:6b:28:2a:bf:a6:89:3b:d6:e9:eb:5f:d0:
         74:54:c0:c9:e1:3f:41:5e:46:a9:db:fb:7a:73:27:60:a3:97:
         ca:d4:b3:d7:08:57:2a:6d:be:16:7b:78:56:0e:50:19:98:45:
         da:f5:89:d2:6f:d1:4c:cd:8d:69:a0:7d:ef:4e:a9:64:ae:2b:
         2d:c7:fe:95:6e:b5:68:48:ce:df:d7:bf:bb:5d:2d:4a:b0:f2:
         b9:15:3b:fe:02:bb:22:e0:d4:cb:37:6e:c2:01:4f:d4:cb:f6:
         f8:f2:5a:7d:34:a4:8b:27:e3:d2:42:75:c1:ee:10:d6:3b:01:
         de:50:9b:33:92:ea:ed:f0:8d:79:7c:e8:96:d8:3d:df:aa:f4:
         82:b9:d0:48:98:25:c1:6b:0a:22:00:6b:a6:a3:94:48:70:8f:
         b0:37:08:21:41:bb:46:c8:55:19:de:de:51:fa:ec:3e:5a:f4:
         e5:c8:af:61:ad:14:52:44:8e:ee:5d:6b:39:13:4d:21:94:78:
         fe:7f:84:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:48 2026 by rpki-client