Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ea1d6bf4-6241-3563-8031-b59b1000bf89.roa
File:                     ea1d6bf4-6241-3563-8031-b59b1000bf89.roa (raw, json)
Hash identifier:          0Cyn2zQfy8xnxKRvKY3E8Tg5VkKpRd3H24xvJucpykM=
Subject key identifier:   F6:E6:FB:E9:B4:BA:05:F3:4A:9A:C1:0F:31:74:FD:6A:DE:DC:60:F5
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584B5F3748668D1DBF3A67ECF9C0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ea1d6bf4-6241-3563-8031-b59b1000bf89.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:48:66:8d:1d:bf:3a:67:ec:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=7db710fe-abc7-479a-8c54-fe21952a676e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:db:8f:d5:a1:2c:6e:7f:7f:17:e4:b8:5c:05:
                    3d:6a:64:e7:50:86:c4:e8:fc:9f:9d:3e:56:bf:39:
                    36:0e:73:58:d6:31:49:01:fb:e0:45:a3:05:76:4a:
                    3b:4f:b1:32:67:ea:ed:52:37:5b:34:30:5c:d5:b9:
                    34:f7:83:08:22:29:49:e0:e7:3d:e9:f0:41:c9:f5:
                    fb:3c:84:ba:00:88:f5:c7:b6:68:6d:6c:0e:3b:2f:
                    a2:9d:9f:b0:2e:78:a9:29:6c:ea:2f:b6:f6:bb:45:
                    68:8f:59:92:1a:07:fd:ba:c7:22:9d:ec:b6:9e:76:
                    ed:5a:fc:93:c4:74:88:a8:af:68:3e:08:b5:e1:e9:
                    8b:ed:47:b8:71:18:b8:16:c0:0d:a4:73:62:a4:0a:
                    8b:58:b9:4d:8b:12:b6:65:c6:c8:dd:aa:b3:80:df:
                    de:1d:6f:25:31:55:40:66:56:34:a9:25:cb:9b:1c:
                    ce:88:17:09:1e:8b:8e:ab:81:99:5e:0f:21:f3:a4:
                    a3:e3:b5:40:98:2f:85:02:4a:98:6c:a5:01:23:31:
                    7d:e1:93:19:71:76:4f:0e:70:d5:09:ba:e3:69:91:
                    7a:12:2c:84:df:d2:80:a5:cf:92:92:70:46:48:3c:
                    a2:c5:d1:91:41:05:d9:f6:cc:52:9d:3a:b0:79:c5:
                    04:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E6:FB:E9:B4:BA:05:F3:4A:9A:C1:0F:31:74:FD:6A:DE:DC:60:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ea1d6bf4-6241-3563-8031-b59b1000bf89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:a6:73:6a:22:b1:c3:cf:e1:29:a5:1d:de:e0:a0:aa:cf:46:
         ff:64:3b:b9:f1:be:1a:2b:36:b1:dd:de:d1:3a:86:db:42:11:
         5d:cb:46:aa:d9:36:95:a0:39:ce:45:47:af:14:b4:15:3a:5f:
         ec:8f:03:d3:74:e2:e9:01:9f:d6:61:e2:f3:15:5c:9e:c3:e7:
         0d:29:ad:0b:6d:64:c3:4c:a0:00:fa:e2:31:49:39:c0:ca:e7:
         22:6b:cb:fb:eb:c7:9e:5c:13:f4:b3:3d:b4:bb:6d:4e:a2:05:
         c9:7e:2b:fd:78:c4:ec:f1:1e:4e:6e:5e:66:35:86:2b:70:10:
         64:da:d2:c0:08:d0:8e:9e:46:8c:50:9d:38:d1:6c:22:59:86:
         78:fc:41:75:1d:3f:e0:d0:45:83:64:bb:1d:08:5f:b6:e8:0c:
         6b:38:62:00:ac:9f:61:d3:8f:df:61:65:56:e7:3b:18:7d:8a:
         36:4a:a2:a5:fa:7a:e5:b5:10:47:fd:9d:88:6a:41:b0:57:ec:
         05:df:30:e0:e8:93:69:d1:3e:a5:56:a8:4c:a3:cc:9d:ea:3b:
         c3:7b:0b:df:18:53:5a:cf:3b:37:d5:2a:c6:be:cf:f3:5f:7e:
         63:22:d6:59:32:c5:c1:4a:21:0a:d1:72:77:57:e3:1d:8e:a1:
         23:b5:c0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:20:17 2025 by rpki-client