Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/30f6ce24-f2bf-346b-a0f8-e7d063fdd093.roa
File:                     30f6ce24-f2bf-346b-a0f8-e7d063fdd093.roa (raw, json)
Hash identifier:          dDUPtjZlABZHqICuPiSYfRYu4acEh50/YKK+fdhWVJg=
Subject key identifier:   FE:D5:14:B6:82:02:7E:9B:66:B5:64:10:EF:CA:87:6B:1C:0D:C0:34
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584B64CD4FDD5EF6448082FF5880
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/30f6ce24-f2bf-346b-a0f8-e7d063fdd093.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.23.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:4f:dd:5e:f6:44:80:82:ff:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=28e19caf-04d4-48d9-9fc4-13cba8455d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:d9:b6:f9:c0:64:1b:cd:9f:05:17:6d:d2:
                    35:da:6b:01:8f:fb:d8:90:8d:04:07:c0:73:c1:9e:
                    9c:02:4a:12:7d:f0:17:dc:1a:f3:4d:7f:ca:29:2a:
                    91:d7:4b:4e:0c:9b:d9:c3:76:d9:76:ef:c8:cd:10:
                    31:97:69:91:fa:ad:6d:57:c8:3e:4e:aa:ec:12:53:
                    02:af:fb:c7:12:fd:34:46:fa:e1:c8:98:77:43:db:
                    97:ef:2f:57:c7:c3:de:55:1e:4b:d9:e0:f1:37:20:
                    92:b1:3b:58:e5:c9:37:86:95:67:3f:ad:cf:99:e5:
                    01:85:af:70:aa:d9:c5:6f:0b:ec:09:3d:ac:d8:ae:
                    58:03:28:f8:61:af:b5:27:79:2d:3c:8a:3f:74:f0:
                    54:22:2d:40:70:ea:81:c9:c1:cb:7b:30:04:3c:12:
                    60:15:bf:d6:e8:2f:12:10:05:8a:ee:bf:b6:b3:6b:
                    89:60:c0:6a:5f:b4:84:fb:40:f5:0f:0a:a6:44:f7:
                    d1:8e:7d:04:67:5f:b0:97:d0:28:1e:be:de:ba:1a:
                    68:52:1c:5e:93:28:92:80:3a:4c:2b:89:12:74:ec:
                    46:b0:3f:7f:72:c7:0b:fd:a8:85:f9:48:66:be:2b:
                    c3:03:be:21:a7:76:69:72:70:03:0a:0a:ca:80:22:
                    71:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D5:14:B6:82:02:7E:9B:66:B5:64:10:EF:CA:87:6B:1C:0D:C0:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/30f6ce24-f2bf-346b-a0f8-e7d063fdd093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:0d:39:fd:5b:55:c8:8f:c1:15:55:73:d2:6f:93:8f:f9:0b:
         7b:ba:5a:03:3d:a9:f1:c9:ad:14:f3:41:f8:82:6e:18:95:78:
         27:07:8c:dd:1f:77:35:be:3a:ad:86:6d:a1:df:6a:45:ee:0e:
         73:c7:00:b3:3b:86:bb:3d:1d:5c:12:39:78:7c:d5:44:59:36:
         d7:5f:41:3e:28:7b:ae:a7:b4:64:8f:a1:71:ca:eb:60:75:0e:
         0c:9e:80:1d:b2:2c:2f:f8:ea:7a:e8:a9:c8:b5:77:44:be:49:
         10:99:29:c0:07:e3:c8:4a:28:b3:fd:4c:eb:26:c1:f5:67:48:
         d8:6f:7e:8c:3c:9d:33:64:8d:92:3f:be:2f:99:04:31:31:6a:
         f7:3a:2d:5e:96:cd:d8:1a:db:84:99:33:e2:f2:06:81:f1:54:
         1f:d9:5e:04:20:a9:3d:e8:66:67:27:00:19:8e:38:5a:ab:71:
         9e:5a:e1:6b:73:15:23:f4:57:39:24:5f:f8:5d:3a:5b:03:c4:
         12:7c:51:5a:fd:76:4d:99:c5:79:f7:46:ea:e0:06:b2:fe:84:
         cd:7d:af:f7:83:d1:49:a5:50:ed:fb:63:c4:d0:ba:8d:29:d4:
         92:81:b3:fd:4c:95:da:ab:44:7f:ed:59:8e:3c:b3:7f:c3:df:
         9c:0d:c2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:11:35 2025 by rpki-client