Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/33cccd75-2950-38dc-b3d9-ab775364423e.roa
File:                     33cccd75-2950-38dc-b3d9-ab775364423e.roa (raw, json)
Hash identifier:          7+iHtMba8psB7yxkZsxZ2571xWFnv6gWZpLBuJ+Nxf0=
Subject key identifier:   AD:9E:1B:B8:70:84:50:73:1C:E5:AF:AD:17:9E:C0:07:86:2E:9B:01
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584EA7A07A01369F7808784428C0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/33cccd75-2950-38dc-b3d9-ab775364423e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.23.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:7a:01:36:9f:78:08:78:44:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3787468f-0555-4995-a195-7e3810b46da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:03:07:14:1b:6e:0f:cf:b5:d7:b6:e0:98:97:
                    d6:a7:ef:5f:74:1a:1f:27:15:d7:c6:75:36:af:97:
                    7f:a7:1d:6d:d6:4f:ab:f4:18:c6:f4:84:ee:c3:f7:
                    10:98:46:d6:7e:d7:e1:1a:d0:68:7b:70:51:e6:a9:
                    a7:3c:03:94:b2:d5:4e:7e:e1:e4:6c:1d:83:77:b1:
                    95:08:86:77:40:78:5b:39:da:2d:4b:7b:61:e9:34:
                    83:4b:66:b8:b1:18:53:60:c6:83:da:84:d6:c2:b1:
                    fd:05:f6:f4:45:f3:9b:98:29:ac:e2:57:42:fe:72:
                    b7:92:b6:e9:c4:ef:ba:d2:5e:e8:26:25:81:34:2b:
                    5e:5b:94:13:e9:28:c8:01:f6:af:8c:cd:f7:26:f9:
                    11:ac:34:e3:03:f2:5b:76:8c:ae:b8:36:36:58:55:
                    ce:d2:48:a6:21:51:ed:98:66:83:44:41:5c:a7:bd:
                    5c:1c:1c:ad:22:a9:11:da:e5:96:d9:77:0d:64:f4:
                    27:6c:c4:2b:5f:5d:68:f0:24:61:37:f2:06:31:32:
                    f1:4e:51:36:c3:7b:8d:56:37:61:0e:5a:4e:15:f3:
                    79:d1:7f:15:4c:bb:b2:50:84:86:f2:fb:ac:7c:7f:
                    41:a5:4c:bf:f5:c9:78:ec:be:59:4a:52:1f:9b:e4:
                    f6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9E:1B:B8:70:84:50:73:1C:E5:AF:AD:17:9E:C0:07:86:2E:9B:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/33cccd75-2950-38dc-b3d9-ab775364423e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:2e:21:c3:bd:40:b6:eb:6a:23:4a:b4:ab:cf:b6:bf:e4:96:
         30:9b:b6:51:40:55:43:0f:3c:a3:71:72:0c:ee:36:5d:11:3f:
         11:24:18:67:24:67:f9:9f:d7:a9:bc:d5:95:e4:46:71:93:08:
         51:ef:39:13:21:ad:ca:73:ba:02:9c:91:45:56:90:6f:86:76:
         16:d8:b8:05:b7:0a:cc:ec:26:5a:b2:49:71:ab:a6:68:9f:fa:
         32:86:e7:ac:c7:0f:91:a7:f7:cf:02:a9:11:b6:ab:bf:cd:f1:
         6c:e8:6c:75:36:79:5b:3e:e0:b1:d0:29:7c:c5:f7:12:d2:52:
         87:10:e8:3d:be:c9:cd:23:da:87:43:1f:81:31:52:06:5f:2c:
         e7:c3:12:3b:f3:ce:8b:89:5e:1a:c3:c3:36:47:d4:67:c5:06:
         41:17:fc:d6:d3:51:3e:d8:0b:6a:31:f6:43:7c:1f:cf:79:48:
         59:db:7c:de:ab:7d:73:8e:5d:d2:f4:a7:3f:01:cb:c8:6e:0c:
         cf:77:e0:a0:9d:70:8b:c0:e6:2c:ce:be:e3:31:4e:4d:8b:79:
         71:60:85:94:d4:32:8a:f4:30:e8:c6:67:e9:4f:f9:be:05:17:
         51:94:31:de:0b:3d:f2:dc:52:40:69:c9:a0:3d:a6:4f:89:85:
         de:39:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:08:16 2026 by rpki-client