Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c97670b5-6313-32dc-8091-0ba5711af27c.roa
File:                     c97670b5-6313-32dc-8091-0ba5711af27c.roa (raw, json)
Hash identifier:          Mc4VHOVqA4oFSNoEzrUPzul1ZX3hjV1dek2kGQt57j4=
Subject key identifier:   36:B1:C2:CC:DB:95:52:33:60:EC:BC:F4:43:BB:75:C0:9B:5F:74:B7
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584EA7A0631C0C5C6F219A91CD00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c97670b5-6313-32dc-8091-0ba5711af27c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.23.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:63:1c:0c:5c:6f:21:9a:91:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c4bd05bb-675a-4c12-a3c0-54f8b4b73722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dc:6b:ca:7e:56:43:4f:d5:c7:81:1a:e6:7e:
                    3c:29:75:25:95:25:b3:9c:c0:5a:ed:88:8a:5a:1c:
                    3e:aa:e5:81:dd:1c:b9:0e:bc:97:b5:7f:01:7d:7d:
                    7c:ec:5b:6c:d9:a2:12:82:76:fe:26:94:7b:b3:7b:
                    f6:ae:48:5d:80:f5:2d:11:e8:0c:83:0f:5f:d4:e4:
                    f7:2b:6f:cd:de:62:04:0f:64:ed:59:66:85:c1:6e:
                    b4:3a:03:b4:88:22:c7:c7:33:c2:7f:47:c1:03:75:
                    d7:ac:d7:6f:a7:17:7f:3d:4a:11:e9:9a:97:16:5e:
                    f3:1a:ff:a6:11:7f:a9:99:0a:03:7f:72:5d:2e:24:
                    5e:42:cf:37:cf:5b:7a:64:51:32:26:85:8b:a2:0b:
                    5b:46:32:83:21:17:2d:5a:50:01:f6:0e:a6:d9:b3:
                    2a:91:86:42:fe:56:0f:04:d7:75:e1:64:b5:c6:08:
                    ee:12:ed:17:fa:32:02:09:f8:80:6d:5d:84:08:6a:
                    11:74:27:15:eb:20:f7:8e:66:4a:5f:a9:11:19:3b:
                    11:2c:17:2b:99:6e:81:0d:7a:13:ed:e8:31:0f:f8:
                    55:74:9a:1a:b1:56:0f:e0:b8:39:38:2d:ae:66:af:
                    0b:67:4f:ec:01:92:f5:18:32:24:cc:3b:89:37:e9:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B1:C2:CC:DB:95:52:33:60:EC:BC:F4:43:BB:75:C0:9B:5F:74:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c97670b5-6313-32dc-8091-0ba5711af27c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:fa:5d:8b:71:c2:fe:31:04:a1:78:da:b7:96:40:1a:e3:17:
         5b:80:37:f4:35:a7:3e:90:32:df:9f:1a:3c:ba:ce:83:37:0a:
         2a:17:d3:32:b3:00:e9:ca:5c:74:5c:31:6b:55:a4:e0:5b:3d:
         76:49:c9:f8:62:ba:87:6e:65:ea:9a:ec:5d:17:a0:f7:25:3b:
         ab:5d:cd:59:2f:61:a0:08:19:cd:d3:27:41:da:ca:ce:3e:e1:
         ce:bb:3f:0b:d4:c5:eb:30:49:6b:dd:85:58:fb:41:b2:7e:e7:
         9d:32:03:a3:58:58:61:e5:ab:b9:1f:ea:5c:bf:c7:82:60:18:
         50:54:f5:29:55:69:01:9b:05:16:64:cf:31:a5:ab:7b:95:cb:
         69:ee:a7:d7:f7:42:e6:63:9c:5a:95:c3:11:b0:7a:47:98:c1:
         1d:06:9e:da:f1:b9:64:38:a0:dd:92:04:91:c9:c1:ca:87:d4:
         3d:1f:d5:a8:3b:c1:62:9b:0b:c1:3c:7b:c0:3a:9a:20:4f:1f:
         97:03:74:fb:99:2d:5e:0d:94:d9:66:1f:25:eb:a6:64:2a:1f:
         27:ca:d3:7f:e7:0a:c8:08:f6:32:a1:b1:60:f6:f0:4a:f6:6b:
         23:c3:60:17:2b:a0:11:75:25:bb:51:04:77:14:22:a4:2f:71:
         7c:8f:34:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:48:40 2026 by rpki-client