Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0b94d7d7-8a69-3b0d-998f-e45bcbe92933.roa
File:                     0b94d7d7-8a69-3b0d-998f-e45bcbe92933.roa (raw, json)
Hash identifier:          2VKUT4hMh1YIvveq3zMKH6TQXPy4TkAS7TcBsUWeeXQ=
Subject key identifier:   F9:79:F9:20:35:3A:23:67:BF:2A:B0:A9:B2:4F:50:45:97:70:D5:DB
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584EA7A0447D370F8FC4C6DCD720
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0b94d7d7-8a69-3b0d-998f-e45bcbe92933.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.23.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:44:7d:37:0f:8f:c4:c6:dc:d7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bc4aded7-288f-448a-9938-81efed33d40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:95:d2:47:9d:c5:ea:28:62:f5:38:17:74:08:
                    9e:21:de:96:1e:b3:07:aa:1d:42:e2:a3:08:99:c9:
                    86:cc:f5:f1:be:84:14:bf:5f:c7:c5:43:4d:0a:ff:
                    16:0c:d5:be:8e:af:ab:8d:89:b2:9f:ce:cf:00:41:
                    a0:34:c7:6e:f6:d1:50:b8:7b:50:93:49:42:62:6f:
                    fb:64:ef:6f:68:ea:a7:13:65:07:98:42:0d:28:66:
                    d7:11:58:13:fc:ba:89:f7:74:f1:5a:7f:3c:02:0e:
                    d2:58:8a:60:44:c5:a6:21:dd:10:fd:78:66:65:e8:
                    8c:61:17:41:36:d9:d1:f5:a7:40:8e:7e:d7:46:8d:
                    51:af:c7:e1:74:a8:b0:2b:fa:68:3a:f8:f4:76:4d:
                    43:de:6b:47:95:8a:a1:7f:2c:54:a1:ac:34:6d:80:
                    ea:41:31:fc:4f:47:14:80:5b:e0:7e:37:ac:b9:08:
                    33:21:ba:b8:b8:58:62:e4:db:67:8f:4a:7b:85:c4:
                    98:33:43:c4:3e:50:fc:4e:14:cd:6a:2f:e9:f7:38:
                    a7:de:8c:a8:a5:5b:73:f7:9b:ec:26:cb:f5:21:da:
                    ce:83:c1:9c:27:06:5a:7b:55:e7:e3:6b:d5:a9:f7:
                    73:45:d0:00:d4:d1:7c:82:7b:a0:5f:6f:4f:18:cf:
                    4b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:79:F9:20:35:3A:23:67:BF:2A:B0:A9:B2:4F:50:45:97:70:D5:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0b94d7d7-8a69-3b0d-998f-e45bcbe92933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:53:27:4f:53:f4:05:af:0c:54:b6:be:ba:ec:b9:9c:30:91:
         d6:4b:4c:d2:2d:be:13:fe:2b:89:94:ed:ce:8c:6e:75:fa:07:
         8e:0e:1a:8b:55:50:1c:5a:fd:05:fb:53:48:4b:b6:db:f7:9d:
         3f:59:8e:5d:7b:68:b4:93:af:c8:5a:2b:59:ab:92:e1:c3:df:
         0f:d2:f7:e2:83:85:8e:e1:c5:a5:eb:3a:4e:0b:0e:89:a8:f7:
         05:0e:e2:e6:5f:32:c6:74:2a:3d:1f:33:2d:25:a9:28:09:9c:
         90:1b:a5:c5:a9:e3:75:59:ce:3a:cf:fd:bd:b2:84:fb:2f:74:
         fb:09:0c:d9:e3:cb:56:8a:68:33:d4:a7:ac:54:96:85:d6:a6:
         6d:ed:cb:df:23:4a:88:b9:7c:04:7a:22:81:38:21:9b:54:29:
         75:3c:e9:d5:33:7f:7e:08:ed:86:cb:29:80:d2:bf:2a:c0:ba:
         3b:a9:28:56:bb:95:5d:51:55:0b:85:bc:f4:07:ea:07:2c:d8:
         ec:9b:d1:c1:27:b5:15:0b:4c:38:ca:23:13:cb:6e:c6:8f:fa:
         a8:47:b8:2d:57:45:33:41:38:d5:03:d2:ce:2a:1c:65:df:8c:
         60:16:4e:ef:81:1c:8b:8e:8f:74:cd:cc:b6:28:a3:6a:69:90:
         d6:ae:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:07:15 2026 by rpki-client