Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e52a90f5-af15-3ad5-87aa-d20655f58420.roa
File:                     e52a90f5-af15-3ad5-87aa-d20655f58420.roa (raw, json)
Hash identifier:          rtYX2J/Ibk5NrLcTTWp1XzV1kbUOiQRbO8RLQICVIGw=
Subject key identifier:   8C:70:BC:27:AD:12:7A:39:73:48:5A:22:66:B4:98:A3:E5:54:9C:9E
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584F4984F032AC9F0BC3E2914320
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e52a90f5-af15-3ad5-87aa-d20655f58420.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.23.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:f0:32:ac:9f:0b:c3:e2:91:43:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7c31dfc3-068e-4dbb-878c-e4af28b49f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1b:73:24:f1:3a:26:45:fe:35:5c:a7:49:c5:
                    da:20:27:dc:04:14:16:21:8f:05:df:7d:71:48:18:
                    8d:0f:8d:84:c5:61:04:64:a9:2a:da:dd:21:ca:1c:
                    ed:32:6c:40:2e:00:38:59:03:69:94:3f:89:e6:99:
                    a6:09:5e:4f:5e:37:ce:71:bd:8a:a4:99:56:cf:bc:
                    67:79:b8:29:4c:92:36:15:48:05:11:a5:f7:d8:13:
                    e2:96:d2:b3:5e:02:6b:23:3c:a4:ad:7d:47:02:d6:
                    e3:40:09:fc:43:1b:14:bd:95:73:9c:9f:1b:a2:a5:
                    77:f3:fc:9f:22:27:67:2c:8e:94:61:ee:9a:0e:ea:
                    77:73:a5:56:f5:1a:ec:01:40:5b:ce:16:7b:0e:ef:
                    51:88:a5:38:05:5e:24:1f:df:ed:e5:e9:6e:33:7a:
                    29:cd:15:d5:af:26:21:8f:a9:24:d6:07:81:46:f9:
                    ec:34:e4:b7:8e:12:15:99:ab:4c:ab:21:dc:a5:81:
                    83:79:bf:62:e9:08:76:8a:c6:37:9f:2b:82:44:04:
                    f7:1c:0c:80:ed:e7:6c:dc:97:c7:09:d5:c8:75:82:
                    73:dc:e9:f9:d9:4c:8f:46:24:83:3b:1c:57:3f:6a:
                    23:de:b6:c6:36:2b:e4:dc:f1:a5:1d:f7:9b:e3:c4:
                    12:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:70:BC:27:AD:12:7A:39:73:48:5A:22:66:B4:98:A3:E5:54:9C:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e52a90f5-af15-3ad5-87aa-d20655f58420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:08:b1:f9:15:a4:08:37:4c:6e:70:a1:7c:5f:13:59:4f:46:
         2b:5c:9a:c3:2e:85:f4:69:12:24:e9:6d:c7:8b:d4:31:54:1d:
         58:a6:09:b3:81:cd:9a:7d:c4:da:50:c9:e2:db:37:cd:ae:39:
         41:25:7d:1d:10:67:0a:0c:43:6e:14:ad:a8:4e:b2:dd:e9:81:
         a8:34:3d:2f:1b:7e:b2:d1:ca:49:10:0d:b4:cd:2f:34:6e:87:
         00:48:4b:a5:66:f0:da:d1:d0:01:bd:ef:5f:8e:53:e7:7c:60:
         e1:05:84:12:56:eb:45:86:f7:76:ca:49:8f:d3:4b:f1:30:4b:
         d8:dc:af:b9:4a:52:1f:dc:08:04:78:6a:41:f4:cc:45:ab:87:
         80:12:af:3c:b9:f5:ac:ff:53:d3:37:06:e3:db:c1:2e:b2:58:
         b7:10:4e:25:02:a5:71:67:f6:36:04:ea:e2:5a:38:59:85:e7:
         7a:81:d2:37:f2:2c:3a:f4:13:53:f9:2c:4e:0a:69:13:3e:d8:
         f3:7f:f3:44:ef:62:39:b6:30:2d:d2:f8:00:2d:3c:b8:42:7b:
         c8:6a:74:b3:25:ee:d7:36:59:8a:df:ca:ed:12:6d:29:6e:58:
         24:97:a9:aa:08:60:dc:7c:f8:3c:ae:e4:a9:aa:0a:3d:69:8c:
         cd:40:e8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:28:12 2026 by rpki-client