Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c41680db-0e4a-354a-abc3-5ac849f71877.roa
File:                     c41680db-0e4a-354a-abc3-5ac849f71877.roa (raw, json)
Hash identifier:          nu8E4V5oPdPzgyih+LumJ1fWUEDZVyC65eQN5L+SRHM=
Subject key identifier:   FB:42:C1:AF:15:18:FA:DD:13:F3:99:B7:C9:5D:98:16:EC:DA:2A:F1
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584B64CE0B69A30C5CB7A530F580
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c41680db-0e4a-354a-abc3-5ac849f71877.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.23.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:0b:69:a3:0c:5c:b7:a5:30:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=fd90db0f-7b5d-4cc6-9ff0-27075bbce3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:c3:cc:dd:15:49:cd:aa:64:f5:25:f7:be:
                    cc:46:ba:31:ed:64:a6:c4:43:8d:99:16:17:f0:3e:
                    a3:8d:85:ad:5c:8b:05:6b:1f:b5:fb:c4:c4:01:71:
                    2c:ed:a5:08:28:38:6e:e1:05:7d:51:46:69:9e:fd:
                    5b:7c:09:44:37:cd:62:8b:dc:e2:c5:fb:87:35:a4:
                    4d:9a:07:8f:8f:c5:a9:ee:70:e6:66:5d:1a:fd:9a:
                    e5:92:f8:fe:91:91:f2:d7:02:49:13:39:c7:71:a3:
                    33:6f:18:84:f5:39:32:8b:9b:3f:02:6b:4e:f7:05:
                    46:54:25:86:78:da:6e:77:7a:32:26:d4:17:af:2a:
                    87:4e:06:e1:cd:85:91:b2:7c:04:f5:5f:5b:54:2f:
                    dc:eb:2a:1e:7b:74:ad:67:70:2a:01:cc:a0:17:d9:
                    ba:98:1b:8d:22:ad:06:bc:2e:64:81:1c:32:99:74:
                    48:ba:0e:82:30:03:c5:a7:1b:69:90:b7:42:e5:e7:
                    f7:3d:d5:ba:47:8b:3b:ef:e6:9a:cf:df:c8:fc:92:
                    04:74:df:1c:d7:a4:a9:83:1b:0f:c4:f0:a5:c6:05:
                    17:e3:84:02:be:ad:67:ef:d9:5f:e6:f8:7a:12:d6:
                    d1:2f:ae:d0:f9:ca:40:90:56:ff:5f:df:4b:2c:7f:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:42:C1:AF:15:18:FA:DD:13:F3:99:B7:C9:5D:98:16:EC:DA:2A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c41680db-0e4a-354a-abc3-5ac849f71877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:13:7a:2a:e1:be:bd:b6:60:9b:74:36:5c:8b:b2:e5:b0:8a:
         bd:ee:7b:7d:70:df:ed:73:a3:0e:8f:aa:3b:47:29:ec:53:83:
         19:ad:77:15:f7:86:a3:5a:ae:05:25:61:a0:90:1b:f1:c3:b1:
         25:a3:37:5e:07:58:8c:84:de:ac:f2:12:b0:c4:96:ef:c9:c8:
         91:92:24:39:1e:de:c4:28:3b:7d:5d:df:2b:54:0d:dc:31:c2:
         44:f5:0d:82:d2:56:28:54:67:53:30:f7:55:cc:74:3f:ed:c8:
         c5:15:e3:98:12:41:c0:1a:a6:6b:ec:69:29:27:62:c9:4f:17:
         ec:c3:2e:30:6f:04:42:76:78:8b:c0:b0:16:aa:7c:40:7e:e4:
         a7:90:24:f3:91:39:6e:7b:e4:6b:65:75:f5:f8:9b:d1:33:e3:
         d4:d4:c6:3c:b4:6b:25:87:cb:b7:09:c1:2c:27:e1:d1:32:dc:
         3c:30:23:da:17:c2:72:b5:5c:83:b4:56:ef:5f:e7:33:8d:bb:
         da:11:31:46:02:19:ec:63:0e:8d:18:79:1a:77:1d:dd:71:fc:
         c4:b2:fe:f4:da:62:2f:7a:65:6d:9f:97:bc:89:40:8f:74:82:
         09:b0:d6:71:3f:a6:a5:92:41:63:81:1f:23:19:a2:df:07:44:
         18:18:21:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:11:34 2025 by rpki-client