Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/11d339bd-2107-32f4-b3ab-a6f278150c1d.roa
File:                     11d339bd-2107-32f4-b3ab-a6f278150c1d.roa (raw, json)
Hash identifier:          tDO//r5WI6+b6yFKz2M0SGh3/lGkYWGzmf7S09lBgSk=
Subject key identifier:   38:00:E8:7F:62:30:78:2D:80:60:30:47:A1:05:08:32:83:28:3C:7B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584B64CE1AFEF3BC7C8C58458200
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/11d339bd-2107-32f4-b3ab-a6f278150c1d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.23.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:1a:fe:f3:bc:7c:8c:58:45:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=5e2a0636-9649-46dc-b796-066172304797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f1:b3:8a:7d:18:af:4c:b0:18:52:f0:59:c1:
                    0a:05:37:6d:22:f9:2a:00:bd:72:87:7f:32:96:ca:
                    0c:3d:23:e3:f9:44:d4:b7:84:a4:37:b2:35:f4:38:
                    81:36:b9:64:9b:38:ac:3a:4f:e9:d7:22:c1:ee:7a:
                    4b:2f:87:cc:43:8f:19:c5:d6:e7:f0:b2:3a:fd:6d:
                    62:67:45:83:39:ab:2c:37:20:4b:00:93:ae:77:a9:
                    73:6e:5e:8d:7a:d2:eb:e5:28:f6:c2:f3:5f:95:39:
                    64:52:d8:8e:31:40:8b:4c:c8:85:b4:56:65:31:14:
                    37:89:e2:26:23:c3:49:25:39:bb:95:6b:51:7a:1a:
                    13:de:a7:e6:1f:2c:10:a1:25:30:0c:4a:99:22:15:
                    37:67:26:30:aa:46:eb:19:f7:ed:b9:04:27:d8:b1:
                    88:45:24:83:f8:39:d2:fb:63:d9:be:73:6a:a6:8a:
                    cf:64:27:2e:c3:a6:44:86:7c:1b:98:02:c5:e4:35:
                    77:fd:a4:bd:bf:e3:94:97:8d:ac:0a:1a:91:f0:d8:
                    eb:99:75:6b:06:cb:21:21:27:64:47:f7:fc:b8:19:
                    44:27:05:67:5a:7d:d8:af:a8:b9:73:cd:b0:64:f5:
                    6b:4e:39:1b:ff:5a:51:da:a8:f9:f3:c9:58:f7:9f:
                    cb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:00:E8:7F:62:30:78:2D:80:60:30:47:A1:05:08:32:83:28:3C:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/11d339bd-2107-32f4-b3ab-a6f278150c1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:51:32:ec:e1:5d:cc:02:8b:d2:cc:9d:99:77:64:17:f4:c5:
         bb:fc:c9:48:c5:18:bb:d1:59:52:f6:b6:3c:d2:5d:f2:19:b1:
         8a:67:fd:6e:03:b2:bd:a4:34:25:41:fe:99:50:41:40:af:dd:
         a7:d8:0f:88:0b:9a:3f:9a:3c:81:55:c9:80:1a:0d:f3:7a:6e:
         03:8a:2d:a0:9c:a7:10:db:53:16:89:ab:e2:c4:cc:4d:a9:07:
         c9:c1:00:eb:84:63:05:53:37:d0:80:f4:58:ac:b4:97:31:ee:
         00:a9:ab:28:c4:f9:f5:8a:2e:9c:7b:1c:b0:e3:66:7d:76:7c:
         39:40:fb:1d:12:6f:57:0a:c5:14:1f:f7:8b:8c:47:d2:2d:fa:
         a4:f9:96:f9:4b:b6:b4:cf:3c:cf:f6:71:ca:dc:57:8b:08:3b:
         22:3a:a4:4e:8c:53:5e:5f:6d:3f:7c:6b:9a:bf:cd:fb:ec:7b:
         c2:15:8c:af:7e:d4:4c:5b:1b:fc:1f:88:82:54:50:b0:f2:ea:
         a6:92:04:99:db:6a:e7:73:2b:f0:cd:83:48:38:c9:de:c8:81:
         c4:cb:a6:ca:ce:f0:26:91:ea:9f:58:fb:79:29:29:dc:ac:d7:
         6d:1e:99:51:fb:71:a3:98:fc:1e:a6:b3:26:80:38:63:d2:af:
         66:0c:f8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:14:19 2025 by rpki-client