Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/86ceece7-52b7-39c6-9a9d-409ca5cb51b1.roa
File:                     86ceece7-52b7-39c6-9a9d-409ca5cb51b1.roa (raw, json)
Hash identifier:          OYiZn3/qRzJhoolUx1sDj6dn58+zSP1TT5TeC91QRE4=
Subject key identifier:   92:C3:8E:64:A8:B8:02:1C:BB:62:C3:05:87:81:84:41:30:6F:E7:0C
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584B64CD67F4484B9AF556EAE740
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/86ceece7-52b7-39c6-9a9d-409ca5cb51b1.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.23.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:67:f4:48:4b:9a:f5:56:ea:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=3f0eb3ed-c013-44a2-855f-9cc84d97f699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:c7:11:06:64:61:e5:64:22:f2:08:37:e3:
                    d9:79:c6:09:d5:46:78:67:98:61:23:28:3f:ea:bb:
                    8b:b2:42:95:53:ff:e8:ab:11:23:79:ab:8d:31:60:
                    99:c5:24:e1:c0:88:83:45:12:be:a9:51:e1:46:78:
                    23:32:02:3f:3e:33:24:0e:70:6b:3d:60:1d:1a:18:
                    73:de:4b:e0:84:1c:ff:33:4e:f0:e1:12:4d:aa:19:
                    4b:09:80:70:93:e5:1d:3a:c5:10:49:85:2e:25:53:
                    7f:b5:62:fd:9f:2e:8e:e6:70:9b:c0:9f:b5:69:18:
                    01:91:26:31:db:bc:38:72:ca:32:4e:b3:a6:e1:01:
                    03:87:bd:dc:31:c7:cf:33:30:b6:da:45:e1:8a:9b:
                    d8:6b:25:ef:b8:8f:9e:f1:9f:39:4b:47:fa:6f:a2:
                    bb:2d:b1:63:d2:f5:93:1b:77:1f:45:1b:06:75:69:
                    a1:20:05:7a:96:b9:51:b4:d9:d8:8f:46:c1:0c:08:
                    98:2a:51:93:8a:a0:1f:32:ba:18:75:af:53:46:02:
                    3c:4b:85:f7:85:7d:64:6e:73:c0:41:9d:5f:c1:f8:
                    bf:1b:90:8b:fb:a3:c9:17:f4:ea:bd:64:e3:97:e4:
                    0e:24:3b:de:bc:b4:e9:f6:8c:cc:e5:9b:d5:24:2d:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C3:8E:64:A8:B8:02:1C:BB:62:C3:05:87:81:84:41:30:6F:E7:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/86ceece7-52b7-39c6-9a9d-409ca5cb51b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e2:f0:b1:7c:5d:36:40:09:4a:fe:79:e9:48:7b:be:52:04:
         64:93:85:2d:07:08:18:1d:cf:d2:be:8d:ba:92:51:e8:f7:4a:
         6f:a2:9a:1f:58:4b:03:72:0d:14:c2:58:7b:1f:20:0f:29:34:
         69:c0:97:cc:3a:13:8a:ed:c3:25:c1:b6:c6:d2:1b:9b:9c:70:
         e6:88:29:77:05:eb:bc:27:0f:f5:85:98:ac:14:26:66:e4:b0:
         60:d5:07:b5:6c:24:4f:a3:91:5d:a1:bc:66:7f:65:30:72:f9:
         d6:da:61:44:ec:12:e3:7d:9b:48:4b:f5:a0:43:1c:30:c0:12:
         c5:49:5f:ae:b6:ef:60:a1:24:ce:06:fe:d3:20:e7:79:6f:2d:
         0a:36:04:f7:cd:eb:ba:17:55:dd:81:81:5b:47:15:3b:0e:95:
         c4:02:33:d5:79:f3:12:54:f4:d0:ff:e6:11:7c:c8:6c:b7:ff:
         72:e7:e5:b0:18:77:f7:48:c4:de:5f:e1:65:67:54:08:43:95:
         04:f7:30:ce:4f:c5:02:ff:6a:64:3d:f6:6f:2e:f2:47:e1:58:
         2a:5b:a5:ab:26:bc:0b:f9:65:f3:f1:10:ba:e2:38:45:30:c2:
         b7:1e:f0:06:d2:c6:3e:cf:7c:36:2b:1c:96:57:b6:80:39:d0:
         55:a8:16:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:11:36 2025 by rpki-client