Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ed6c82ee-3b0e-3f81-8fd7-be4191f30750.roa
File:                     ed6c82ee-3b0e-3f81-8fd7-be4191f30750.roa (raw, json)
Hash identifier:          RycURuMeFsAMh2RHyx9j85UnEELqHpT4u93zWL+KWIQ=
Subject key identifier:   20:8D:B5:7B:C2:61:2D:5B:FD:38:A7:B9:F6:D4:5D:48:15:E4:71:99
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584B64CE0FCD610E122AE5DB99E0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ed6c82ee-3b0e-3f81-8fd7-be4191f30750.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.23.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:0f:cd:61:0e:12:2a:e5:db:99:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=edd107d9-dc3e-40c8-a541-08dd067c2282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:60:d6:07:af:73:b3:60:b5:fb:ae:7b:7c:a5:
                    4b:a5:22:21:38:3f:18:d0:d0:8d:c6:33:1d:ec:a9:
                    fc:a5:0e:bd:f7:aa:9b:dd:45:b2:cb:ae:7f:39:6e:
                    37:bd:92:2d:58:5b:cb:e8:69:6d:57:76:a7:55:bc:
                    b0:00:52:b9:ff:18:6b:81:66:b8:80:40:1f:f4:60:
                    2b:6d:47:6a:2a:e9:07:55:4b:16:27:48:aa:c8:de:
                    a2:ef:e4:db:71:bd:ce:5e:ad:9a:d5:c1:4c:57:07:
                    fc:1b:6c:d8:4d:3f:a2:ae:9e:a9:17:7d:27:73:05:
                    0d:45:87:ea:ee:b6:f3:8b:a6:f0:df:94:87:c8:88:
                    10:76:38:da:7d:53:c9:ae:9d:2a:2a:7b:da:62:89:
                    88:09:b4:a7:4f:9e:a1:8b:c5:25:1f:0d:5c:4e:52:
                    26:e1:41:09:15:22:d9:29:b8:0e:14:ec:38:98:02:
                    56:78:d5:3b:18:a1:82:23:0c:7e:80:e6:21:b0:49:
                    fe:6e:bc:59:02:bb:79:4f:ba:a4:48:7a:61:a8:dc:
                    85:fb:55:53:c5:87:43:b3:e7:b2:c7:bc:62:73:fd:
                    74:60:b2:66:02:85:94:e7:b8:29:cc:30:e2:c5:e4:
                    20:6e:65:53:7c:d6:b0:7f:da:d6:e2:76:ad:ab:e0:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8D:B5:7B:C2:61:2D:5B:FD:38:A7:B9:F6:D4:5D:48:15:E4:71:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ed6c82ee-3b0e-3f81-8fd7-be4191f30750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:63:7d:d2:03:c9:9a:08:83:26:6c:e8:d3:bf:8f:73:e7:33:
         dc:95:58:d9:18:36:76:15:31:be:b7:a2:8f:ab:c9:b1:7d:7b:
         c2:16:24:c2:d0:79:78:4d:2a:6e:a3:81:cc:b3:3c:57:ab:a0:
         67:24:b5:98:55:e3:40:f9:47:db:c7:2f:2f:c8:bd:41:0f:4f:
         2e:d2:ad:3a:b8:b1:b4:d8:06:2f:05:f0:b9:a1:c1:5c:80:c4:
         1d:f7:49:a1:31:41:31:f2:2d:3a:dd:45:f5:93:36:58:9e:65:
         a1:76:99:7f:d1:a0:80:77:9a:b8:df:a5:d4:05:85:65:97:58:
         3f:d8:e7:95:5a:36:e2:c3:3e:b5:b8:aa:7e:40:99:55:b0:56:
         1c:04:15:32:64:cb:38:69:46:cd:79:15:ad:36:75:b5:16:d2:
         22:b0:52:40:cd:c1:8f:36:54:a9:25:ff:28:74:c5:e3:99:ac:
         02:58:d9:21:e7:08:27:f2:44:fb:16:bb:b3:ea:4c:5b:e4:42:
         16:9d:9f:8f:f3:bc:f4:2f:df:b3:21:46:0b:30:d1:1f:44:f8:
         a4:3f:8a:63:57:2d:67:1c:b9:0a:48:e1:34:51:ae:86:bf:ad:
         7e:09:6c:37:b3:11:26:82:51:70:78:0e:23:b2:20:4c:55:02:
         46:6e:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:10:58 2025 by rpki-client