Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/8c7724b8-1fc6-34df-8d17-983bca4bf45a.roa
File:                     8c7724b8-1fc6-34df-8d17-983bca4bf45a.roa (raw, json)
Hash identifier:          B3HPakiENxjjk/9Ca7pBWPJ9YFc3P8q3wN9+Gg0jyhs=
Subject key identifier:   83:D8:44:B9:38:92:CE:DC:93:41:C1:19:1A:64:CB:19:DB:EC:60:2A
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584B64CD71BEF66C6C8CEDF09F80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/8c7724b8-1fc6-34df-8d17-983bca4bf45a.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.23.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:71:be:f6:6c:6c:8c:ed:f0:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7093833a-e065-4287-99fb-254f7e483e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:ff:48:bb:58:a2:47:ff:e3:43:54:e1:44:
                    6f:2f:5e:01:d5:24:82:2a:b1:dd:9a:e5:82:9f:62:
                    61:9e:15:d0:f5:68:47:95:79:12:14:43:8e:e4:63:
                    2d:98:91:59:02:03:ba:94:c0:58:f8:29:ad:ff:8d:
                    17:4e:34:2f:59:a2:52:f8:b1:12:ed:b2:5f:ae:7f:
                    30:f4:ba:79:54:a4:f7:06:63:5a:9d:57:a3:88:7a:
                    3f:9d:93:52:13:18:1f:55:70:cd:fa:ca:c0:df:98:
                    b2:51:3b:07:b9:3c:3f:c2:be:88:ee:33:69:95:1a:
                    a4:2a:9d:71:9d:8b:06:b9:b1:fa:0f:f1:63:10:0d:
                    6f:44:3a:b7:5e:3a:87:fc:45:5c:d2:86:04:ee:01:
                    5d:5f:fc:1f:34:8c:3e:a7:13:75:a3:39:11:09:34:
                    e1:e2:c5:ef:c7:c1:2a:c8:34:59:1f:d0:a0:ed:d8:
                    46:01:a7:81:f7:6f:78:d1:f0:c5:1e:fc:04:f1:05:
                    ef:4d:df:ec:d2:32:e8:37:ba:f0:58:12:c5:b8:91:
                    b7:34:f0:67:d0:40:b5:e3:c4:08:76:6c:4b:20:62:
                    bb:bb:da:9a:d1:e2:2d:1f:1a:ec:37:4f:6a:8f:d7:
                    12:7c:76:76:46:71:33:f8:e3:65:23:a1:f4:9f:c4:
                    71:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D8:44:B9:38:92:CE:DC:93:41:C1:19:1A:64:CB:19:DB:EC:60:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/8c7724b8-1fc6-34df-8d17-983bca4bf45a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e5:12:38:e9:51:e8:a4:15:df:bd:8b:ae:91:93:68:40:aa:b5:
         df:42:35:36:db:b4:fd:87:9d:b6:54:3f:94:5c:09:72:46:7d:
         df:83:9e:13:23:6e:ae:32:ca:62:bd:f5:ef:05:79:2d:98:16:
         40:f6:62:53:ec:74:4c:ac:bf:ff:0a:69:80:33:ec:a5:91:b9:
         b9:08:34:0f:91:b7:75:22:2b:92:88:2f:a1:be:e2:49:66:77:
         2e:95:37:f2:b8:07:92:cd:15:67:61:81:37:ec:34:01:cd:9d:
         35:d9:ab:d9:f9:0a:ae:2e:db:81:14:f6:46:15:9c:d6:1f:c5:
         72:75:f5:0f:8d:25:b8:8b:15:54:f2:f3:2f:08:67:4f:ba:27:
         95:7e:46:c6:c9:a0:2e:45:c0:05:a9:e5:b9:45:b3:c9:e1:27:
         47:1d:c3:25:d0:d8:8c:47:6b:5e:df:57:ac:83:b7:56:66:fa:
         82:b3:5e:0f:5e:cc:70:ab:72:e1:11:fc:fe:48:59:25:f6:d3:
         10:4e:23:d4:bf:5c:c3:26:68:20:94:56:cc:b3:27:39:b9:88:
         fb:e3:f8:5a:e0:fb:ea:0b:30:44:63:fd:1c:0b:2e:4f:0f:3f:
         3f:19:07:c2:0e:ad:53:e0:b5:39:d0:b0:37:ea:e1:8b:22:31:
         9c:f4:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:11:35 2025 by rpki-client