Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b0de3829-996c-3682-a413-a04ea7aae3cd.roa
File:                     b0de3829-996c-3682-a413-a04ea7aae3cd.roa (raw, json)
Hash identifier:          TRQ6WKcdJF//l9EHBlsUhu359SMHbP10LwOlm3Dw6Qo=
Subject key identifier:   9D:EA:28:2E:00:AF:49:4A:EF:8A:9D:E6:0B:7B:0E:87:9B:76:DF:3A
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584F5A32DC506328FAF2B9A66C00
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b0de3829-996c-3682-a413-a04ea7aae3cd.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     396253
IP address blocks:        136.228.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:dc:50:63:28:fa:f2:b9:a6:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=eaf0ac79-f516-44cc-9935-a20ac53a0659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a7:fe:ab:d1:f7:e3:23:64:92:38:85:1f:e9:
                    77:19:4c:05:c2:bf:40:fe:26:1a:fa:74:d3:37:65:
                    22:2c:f2:ae:74:85:a0:90:84:ab:d8:70:b6:8e:2c:
                    37:18:6d:29:af:f9:d3:2d:31:24:45:e8:6d:cf:db:
                    fd:e7:34:1f:24:af:0f:5d:16:b4:14:93:b6:fd:4e:
                    83:3a:06:f6:4c:9a:0b:89:54:b3:32:38:2b:07:72:
                    c9:23:b9:ba:43:23:73:00:73:2a:e7:c6:26:2f:18:
                    05:33:b0:42:f9:bf:84:5c:fe:f8:dd:e8:54:38:aa:
                    64:68:13:2c:7d:c7:55:e3:ec:4b:53:01:34:e9:19:
                    22:b2:62:79:32:42:6e:bc:f7:fd:20:ca:29:a4:f5:
                    a0:00:4e:18:3e:c5:47:87:80:98:8c:57:6e:13:63:
                    b4:a1:97:47:16:a4:5e:a0:16:27:5e:df:9e:d9:cf:
                    37:79:12:04:d2:8e:cb:ce:7a:7f:f1:1f:6c:aa:1d:
                    3c:0e:a8:39:3c:92:83:ee:ba:a7:f0:be:38:32:3b:
                    19:e6:a6:23:fe:fb:2a:c5:75:a5:91:b4:c6:7f:c2:
                    8c:09:f0:5c:d3:14:37:0d:02:02:e9:f9:cc:04:3f:
                    7a:a4:37:e4:9a:a8:9a:38:5d:20:3a:64:f1:e6:2d:
                    19:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EA:28:2E:00:AF:49:4A:EF:8A:9D:E6:0B:7B:0E:87:9B:76:DF:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b0de3829-996c-3682-a413-a04ea7aae3cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f1:49:60:e0:16:cf:8f:7a:19:b1:e1:f6:e3:30:68:68:14:
         ed:fd:da:ee:73:2b:85:12:07:47:9b:29:2d:38:f5:70:9a:7f:
         b6:95:06:91:63:84:f7:be:80:d5:d8:dd:bd:2e:74:c2:79:41:
         a5:c6:74:ae:f8:26:a1:47:46:77:41:c0:3a:e4:18:12:2e:99:
         c6:53:07:f9:98:19:39:fb:30:0f:a0:bc:f2:66:ae:45:4f:0a:
         94:83:9b:c2:13:ed:37:e9:21:c2:d7:32:46:57:92:01:17:b4:
         b0:a8:5e:3e:44:e1:fb:41:da:75:a9:2f:94:a2:ff:e1:8c:ee:
         6a:4d:7f:0a:70:27:8c:19:77:2c:14:97:9b:37:d1:6c:65:12:
         34:07:9a:bd:0a:80:b3:b9:0d:2a:42:7e:ae:19:89:88:52:89:
         46:70:ed:f1:7b:47:db:e6:da:4a:68:d1:df:6b:bd:68:02:3c:
         63:98:82:50:76:14:d1:58:79:89:a2:69:e3:38:62:1a:90:ae:
         21:90:d9:42:22:ac:d6:05:8a:8c:eb:a3:5b:c1:3b:49:d6:6b:
         f2:15:be:5f:1b:d0:d7:55:36:f6:81:c9:dd:a2:eb:df:eb:41:
         b2:3d:e2:ef:ab:f0:b0:ab:4a:30:59:ba:be:a8:9b:44:3c:15:
         52:15:0f:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtxQYyj68rmmbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
ZWFmMGFjNzktZjUxNi00NGNjLTk5MzUtYTIwYWM1M2EwNjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qf+q9H34yNkkjiFH+l3GUwFwr9A/iYa+nTT
N2UiLPKudIWgkISr2HC2jiw3GG0pr/nTLTEkRehtz9v95zQfJK8PXRa0FJO2/U6D
Ogb2TJoLiVSzMjgrB3LJI7m6QyNzAHMq58YmLxgFM7BC+b+EXP743ehUOKpkaBMs
fcdV4+xLUwE06RkismJ5MkJuvPf9IMoppPWgAE4YPsVHh4CYjFduE2O0oZdHFqRe
oBYnXt+e2c83eRIE0o7Lznp/8R9sqh08Dqg5PJKD7rqn8L44MjsZ5qYj/vsqxXWl
kbTGf8KMCfBc0xQ3DQIC6fnMBD96pDfkmqiaOF0gOmTx5i0Z/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3qKC4Ar0lK74qd5gt7Doebdt86MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYjBkZTM4MjktOTk2Yy0z
NjgyLWE0MTMtYTA0ZWE3YWFlM2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiOTIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXxSWDgFs+Pehmx4fbjMGhoFO392u5zK4USB0ebKS049XCaf7aVBpFj
hPe+gNXY3b0udMJ5QaXGdK74JqFHRndBwDrkGBIumcZTB/mYGTn7MA+gvPJmrkVP
CpSDm8IT7TfpIcLXMkZXkgEXtLCoXj5E4ftB2nWpL5Si/+GM7mpNfwpwJ4wZdywU
l5s30WxlEjQHmr0KgLO5DSpCfq4ZiYhSiUZw7fF7R9vm2kpo0d9rvWgCPGOYglB2
FNFYeYmiaeM4YhqQriGQ2UIirNYFiozro1vBO0nWa/IVvl8b0NdVNvaByd2i69/r
QbI94u+r8LCrSjBZur6om0Q8FVIVD2E=
-----END CERTIFICATE-----
Generated at Sun Oct 4 10:13:00 2026 by rpki-client