Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/5e2f9ecb-3a85-3ab4-9eb2-519d8810be45.roa
File:                     5e2f9ecb-3a85-3ab4-9eb2-519d8810be45.roa (raw, json)
Hash identifier:          WogtP3r9ii7XkUAxW+GBvyyBtAMONcP/NSa1B4MUV4w=
Subject key identifier:   E5:26:87:45:08:ED:8C:82:5B:03:D4:E3:5A:78:2F:40:0B:11:0B:9B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584B64CD514BD2758873D4709500
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/5e2f9ecb-3a85-3ab4-9eb2-519d8810be45.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.23.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:51:4b:d2:75:88:73:d4:70:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ac9e9fe9-fc26-42f8-b08a-1e806a793427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ee:21:be:dd:4c:9f:b5:dc:4b:c5:6f:2c:5f:
                    1c:98:36:32:66:a1:8f:eb:eb:45:19:c7:d1:21:01:
                    c2:84:83:71:82:4f:19:20:cf:6d:d8:fb:21:a0:00:
                    e6:63:e2:9a:0e:92:6e:70:ec:f9:6c:c5:bb:be:ca:
                    e7:14:09:2e:19:88:84:c5:65:26:c1:df:e9:8c:ce:
                    cb:27:7a:ff:00:c8:9a:dc:2b:79:9c:2d:67:56:b9:
                    28:b1:a7:6f:63:a8:f4:3c:5f:50:d8:52:c0:bd:89:
                    85:f4:c6:1d:da:60:1c:49:50:64:0c:2b:bc:ba:46:
                    78:6c:db:aa:6f:51:1b:a7:ce:6c:33:cc:e0:3c:71:
                    cc:6f:39:1a:b0:d9:63:41:f6:b3:23:dd:13:ba:9a:
                    a3:c9:73:3b:c5:03:d7:2a:a4:64:9a:ca:8b:31:93:
                    79:c8:34:76:20:20:5e:c8:c1:83:f6:11:bf:9f:19:
                    08:a1:c8:e6:1b:34:f9:d3:83:61:bd:aa:ac:89:5c:
                    31:f3:b5:9a:5d:bc:24:bd:ae:8d:d1:5b:b2:33:65:
                    19:73:66:23:4b:4e:84:03:6b:1a:ec:dd:86:a3:d7:
                    77:b8:2f:a9:7f:5d:ff:dd:b0:57:4f:0c:80:16:1f:
                    42:c2:b7:9a:26:0c:c0:c0:b1:90:3e:b2:70:5c:3c:
                    9b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:26:87:45:08:ED:8C:82:5B:03:D4:E3:5A:78:2F:40:0B:11:0B:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/5e2f9ecb-3a85-3ab4-9eb2-519d8810be45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:10:f7:8d:53:62:2b:7a:cf:4e:92:40:1f:c5:6e:13:f7:2a:
         65:78:64:11:6a:e9:87:0a:d0:85:5b:96:27:2a:d7:e7:f4:d9:
         21:ac:07:6c:24:72:ef:8f:16:f4:58:17:4f:38:cb:0f:17:f0:
         10:c6:6a:9b:eb:38:c3:7e:66:3f:47:6d:7c:22:bf:3c:40:98:
         73:53:20:e7:56:6c:69:88:6b:d2:5c:ed:f2:d4:fb:c6:0d:5a:
         17:39:e6:e9:d2:c0:e1:ee:d4:b2:1a:e6:dd:3c:57:83:92:3b:
         8b:47:50:64:ee:47:0a:7b:d1:91:22:43:f1:8a:82:59:71:04:
         5f:ba:06:26:03:f7:b2:c9:e9:c2:9e:60:9b:88:73:63:c8:63:
         e1:ed:89:bf:51:a2:85:07:dc:91:a6:79:16:eb:57:8d:02:c7:
         6d:c3:22:e6:53:82:0b:89:ee:f1:fc:78:b8:96:9d:64:c2:7d:
         ed:cc:52:62:6f:4e:83:a7:82:f6:49:33:80:12:6c:a4:1d:99:
         8b:b0:0d:ad:57:46:76:33:a9:b9:9c:08:5b:05:6f:93:a4:b0:
         02:22:91:8e:32:ca:07:70:e9:38:2e:fd:29:6c:42:a0:86:b2:
         c0:87:9f:1a:7c:e5:b7:5d:52:45:67:75:45:3b:d3:83:05:7a:
         12:1c:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:11:31 2025 by rpki-client