Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c97670b5-6313-32dc-8091-0ba5711af27c.roa
File:                     c97670b5-6313-32dc-8091-0ba5711af27c.roa (raw, json)
Hash identifier:          cT1r1MjOEnY6buYWGHn5FJH6OvZYG1q6ToJDW/O/TOU=
Subject key identifier:   D6:A8:F9:B9:73:D0:9B:47:AC:64:3C:B5:5D:02:CF:DA:5D:88:18:17
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584B64CE25571C8CD20D5D3C9600
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c97670b5-6313-32dc-8091-0ba5711af27c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.23.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:25:57:1c:8c:d2:0d:5d:3c:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c3dc8955-29c7-46cb-9103-241fcbae2d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:7e:94:04:6f:a7:6a:ea:fd:a7:64:1f:08:
                    b2:1b:ea:f1:cf:4f:1b:11:6a:4c:ce:fe:35:e9:0d:
                    27:5d:05:fe:bd:48:2b:0a:94:ad:d7:ed:f0:aa:21:
                    70:a3:54:ee:6d:05:df:d3:99:4b:58:cd:38:31:4a:
                    57:b9:da:0c:2e:ac:25:be:67:26:4f:a7:49:a9:91:
                    77:74:61:2b:43:a5:9e:16:1c:c0:96:78:fe:3c:88:
                    7a:94:99:c0:0a:3a:52:32:ad:5b:9c:bf:fb:62:44:
                    74:3b:99:3d:df:2c:cc:3f:64:47:75:9b:a7:3f:17:
                    bb:0b:2f:ae:98:46:4c:cf:9b:97:74:20:55:4c:d7:
                    0f:0e:63:5d:c4:64:0e:51:b0:df:04:d9:09:3e:81:
                    3c:b1:7f:03:5a:78:99:d9:2e:d1:47:59:f6:98:84:
                    fb:44:25:e2:30:87:70:d7:1f:9e:b8:42:ea:69:51:
                    af:cc:ae:52:dc:b6:86:51:af:89:6b:ff:9b:a4:98:
                    ae:7f:f9:94:26:54:eb:bb:65:0c:48:5e:9a:99:bb:
                    4e:78:1e:8b:1b:bc:43:1c:b4:cd:8d:0c:c4:60:21:
                    57:0b:51:cb:42:c4:52:5b:08:41:8e:cb:87:dc:10:
                    ca:e0:0f:fe:60:79:0a:4a:6e:14:48:68:3c:5c:58:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A8:F9:B9:73:D0:9B:47:AC:64:3C:B5:5D:02:CF:DA:5D:88:18:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c97670b5-6313-32dc-8091-0ba5711af27c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b5:5d:50:3e:92:fa:79:b3:d6:8a:94:21:ee:0f:65:b1:6d:
         d4:93:8d:c7:31:84:dd:32:57:f8:f1:9e:6a:4a:88:e2:b4:83:
         3b:4c:b9:2d:d5:27:30:b8:08:00:c0:e1:e0:5d:70:45:2b:9c:
         a0:cd:96:94:aa:f5:84:d9:a0:cb:67:c9:e4:cf:69:6c:51:20:
         8a:f0:7a:80:b6:57:07:70:71:6b:48:72:bb:cc:14:58:c1:f4:
         1b:45:be:cb:c2:31:5f:aa:20:05:db:63:59:ad:e6:a0:ac:9f:
         97:71:39:4a:df:77:b8:b2:e7:a9:83:f2:ae:51:90:fe:b3:53:
         f0:65:9e:6a:e2:c7:73:3d:0c:51:4c:ff:ef:39:e8:a4:6f:b6:
         ec:c8:66:42:a2:e8:cf:66:54:2d:f6:7e:1c:56:1b:da:e2:ce:
         f7:99:e5:56:93:d6:1c:ae:89:50:62:67:94:48:eb:32:43:8f:
         07:c9:2f:2d:e3:44:a1:88:36:a9:67:b6:b4:5c:12:0b:fc:96:
         9e:e1:f1:c4:7f:14:b4:e5:a9:ae:72:d0:d5:3f:58:0c:9a:5b:
         59:5f:54:19:57:b5:79:f1:55:ea:2c:44:3f:2d:1f:26:0a:29:
         26:4f:ab:09:5f:04:e5:89:4b:56:fe:14:46:19:09:d4:5b:fe:
         d0:8a:44:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:15:04 2025 by rpki-client