Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/47d27e1c-8bd3-3087-a20d-b2ea413f4122.roa
File:                     47d27e1c-8bd3-3087-a20d-b2ea413f4122.roa (raw, json)
Hash identifier:          XidWwsxoRzLkYwkiGDhme/w+84BM7CDLp4cP4j7hLmo=
Subject key identifier:   B1:9C:53:02:38:B4:7B:82:83:15:E4:F1:43:BE:76:EE:CC:71:7A:BC
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584EA78FC4475D8129B4CBC95D80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/47d27e1c-8bd3-3087-a20d-b2ea413f4122.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        136.23.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:c4:47:5d:81:29:b4:cb:c9:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7264f50e-eefc-468f-85bc-e2b37e932c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:63:06:ba:6c:02:30:62:ba:fa:c1:1a:f3:b8:
                    7a:50:07:8f:af:6a:20:4f:b7:f2:09:00:ce:86:ae:
                    eb:d7:53:d6:2c:bc:71:7f:2e:41:6e:3a:64:b8:63:
                    f6:ea:fa:ec:c9:0b:77:d8:4b:cc:9c:3f:b0:3d:70:
                    65:a6:3c:ff:06:9f:a1:b9:1f:e5:13:3e:9f:67:16:
                    a0:33:c5:5a:f0:bc:14:d1:0f:17:20:19:21:82:3a:
                    68:11:c8:b3:24:6a:87:86:bb:ca:ea:d9:a9:ab:64:
                    78:d3:e2:2f:ad:b5:c0:9b:83:ba:93:68:d5:7b:a6:
                    e0:36:88:ad:51:bb:e5:49:a6:03:7d:77:c5:fd:d4:
                    62:84:68:e7:8b:8a:77:34:50:21:6f:88:10:d4:6e:
                    84:48:c2:47:58:0b:33:c9:48:63:66:68:b2:be:00:
                    83:b7:96:19:6a:df:bb:01:6d:e7:16:8b:93:0f:b8:
                    ab:c5:57:27:e1:19:59:60:9f:21:7c:3b:9d:00:f8:
                    d5:af:ec:f7:d3:33:f9:dc:17:72:bf:2b:7d:f1:27:
                    8d:19:3d:f6:3d:dc:b3:8b:e7:35:7d:15:ba:aa:ef:
                    b1:4d:8c:2a:7b:a7:d2:57:59:dd:9c:5b:02:12:8a:
                    2f:94:01:ce:78:d6:a7:7a:89:d6:5e:a3:4f:b1:01:
                    45:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9C:53:02:38:B4:7B:82:83:15:E4:F1:43:BE:76:EE:CC:71:7A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/47d27e1c-8bd3-3087-a20d-b2ea413f4122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:ee:a3:b8:88:5b:5c:85:72:ce:3d:30:51:51:00:f0:15:23:
         ac:22:15:60:ca:48:fd:91:70:7d:57:40:20:01:e4:17:c2:ff:
         a4:a9:bb:ef:87:3c:2e:f5:b2:4a:b8:a8:3c:63:d2:90:58:17:
         c7:0b:de:51:0b:af:0b:28:e0:9e:17:fb:02:be:4e:99:4c:49:
         de:b0:df:e6:96:47:ba:74:94:b8:e9:0a:e9:6c:c4:86:fc:e2:
         0a:ca:81:af:f7:3c:a9:5f:54:a9:cf:0a:20:e1:cb:43:c9:cd:
         2b:ac:51:4b:1f:2b:28:f9:5d:97:96:97:0f:f8:fc:18:73:e9:
         4c:69:88:1f:e2:fb:f9:cf:20:46:5c:e0:59:20:9f:5b:46:8b:
         42:c2:39:ce:55:52:9f:97:4b:77:9c:0f:aa:86:bc:2d:ea:cf:
         5c:7b:7d:ac:b9:c6:f4:d9:b3:73:5a:40:41:6a:43:d5:45:63:
         d9:87:d2:a2:b9:69:69:97:dc:25:75:de:ac:49:b4:48:5e:6d:
         bb:af:67:c4:0b:69:5b:50:24:11:a2:b4:2b:09:ab:5b:3f:ba:
         1e:a5:0d:3c:6d:cc:88:4d:51:25:62:98:e1:7f:d9:81:9b:99:
         96:2c:67:c8:51:ca:bd:94:29:b5:a3:b8:1a:ab:bd:f9:63:fc:
         d0:6e:cb:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj8RHXYEptMvJXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzI2NGY1MGUtZWVmYy00NjhmLTg1YmMtZTJiMzdlOTMyYzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWMGumwCMGK6+sEa87h6UAePr2ogT7fyCQDO
hq7r11PWLLxxfy5BbjpkuGP26vrsyQt32EvMnD+wPXBlpjz/Bp+huR/lEz6fZxag
M8Va8LwU0Q8XIBkhgjpoEcizJGqHhrvK6tmpq2R40+IvrbXAm4O6k2jVe6bgNoit
UbvlSaYDfXfF/dRihGjni4p3NFAhb4gQ1G6ESMJHWAszyUhjZmiyvgCDt5YZat+7
AW3nFouTD7irxVcn4RlZYJ8hfDudAPjVr+z30zP53Bdyvyt98SeNGT32Pdyzi+c1
fRW6qu+xTYwqe6fSV1ndnFsCEoovlAHOeNaneonWXqNPsQFFlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGcUwI4tHuCgxXk8UO+du7McXq8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvNDdkMjdlMWMtOGJkMy0z
MDg3LWEyMGQtYjJlYTQxM2Y0MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiBcwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALLuo7iIW1yFcs49MFFRAPAVI6wiFWDKSP2RcH1XQCAB5BfC/6Spu++H
PC71skq4qDxj0pBYF8cL3lELrwso4J4X+wK+TplMSd6w3+aWR7p0lLjpCulsxIb8
4grKga/3PKlfVKnPCiDhy0PJzSusUUsfKyj5XZeWlw/4/Bhz6UxpiB/i+/nPIEZc
4Fkgn1tGi0LCOc5VUp+XS3ecD6qGvC3qz1x7fay5xvTZs3NaQEFqQ9VFY9mH0qK5
aWmX3CV13qxJtEhebbuvZ8QLaVtQJBGitCsJq1s/uh6lDTxtzIhNUSVimOF/2YGb
mZYsZ8hRyr2UKbWjuBqrvflj/NBuyy4=
-----END CERTIFICATE-----
Generated at Sat Aug 22 19:29:35 2026 by rpki-client