Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/14080c80-f4cd-3a16-a457-79cfa681c727.roa
File:                     14080c80-f4cd-3a16-a457-79cfa681c727.roa (raw, json)
Hash identifier:          KCOE1Cpw6WRBk/p5NYRkUnLOn+46L4fvGvV6/+aIZMw=
Subject key identifier:   CA:7C:25:74:81:6F:12:89:F2:39:6E:6D:E3:96:D6:E0:48:D4:93:6E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F497E403574322C07BF207CAA
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/14080c80-f4cd-3a16-a457-79cfa681c727.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     149440
IP address blocks:        136.0.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:40:35:74:32:2c:07:bf:20:7c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c437b296-22bf-4a2b-a252-4766960b31c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b1:21:12:7e:1b:d0:45:4f:c9:11:d0:bf:42:
                    5b:41:cd:55:e5:36:2f:41:ee:7a:20:ba:b3:fc:41:
                    73:f3:8f:ff:6f:1e:c9:14:9d:b9:08:2e:e8:34:da:
                    40:03:ed:23:5d:76:4a:cb:b0:87:27:58:03:6e:58:
                    1b:1b:85:6d:4c:a2:e7:80:60:49:a4:9a:da:e2:ad:
                    1c:74:e9:2c:e5:1d:a6:35:4d:a2:a5:58:21:3a:88:
                    88:a0:fd:51:97:1d:3c:ba:5c:4e:25:bb:ed:00:f0:
                    1a:2a:4f:4a:fd:72:5b:17:3f:3f:59:8d:dd:25:d5:
                    be:fe:4a:5d:c5:2f:b9:f2:39:6c:f8:8e:8b:6a:8f:
                    7d:1c:8e:b3:57:29:61:55:4e:63:6b:de:43:91:0d:
                    dd:05:b9:2f:b9:75:f1:dc:c7:8f:01:51:0c:cf:e3:
                    83:d1:bc:04:c9:8a:7a:eb:cf:67:0b:5e:4d:1f:55:
                    c8:60:b4:d2:33:de:54:2c:12:89:b4:b3:0b:a5:e9:
                    b9:c5:f9:33:bd:54:7b:71:0f:ad:10:dc:b9:b3:cc:
                    06:66:b0:20:ce:66:96:1b:b3:f7:64:c4:4e:8a:be:
                    f3:2e:66:ae:c7:12:3a:fc:2f:45:30:d6:07:0a:1e:
                    29:6d:5d:86:74:de:20:80:9f:7d:14:31:f8:81:61:
                    41:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7C:25:74:81:6F:12:89:F2:39:6E:6D:E3:96:D6:E0:48:D4:93:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/14080c80-f4cd-3a16-a457-79cfa681c727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:84:8d:7f:b1:5b:da:c9:74:f3:6d:b3:83:ba:66:ab:34:f1:
         67:b8:75:58:63:9d:c1:80:20:51:64:0e:cb:e4:16:c7:3a:2b:
         98:55:24:e5:37:91:51:86:87:fd:23:b4:fc:e9:19:3f:e8:dd:
         86:32:2b:49:11:88:ea:e8:d1:01:20:98:e7:75:82:6c:4b:4c:
         11:34:ca:5e:f0:79:64:7f:41:c5:ce:ed:9e:c0:95:1b:c5:75:
         97:ef:9d:74:b9:a9:1a:13:d1:11:b2:0d:6f:94:ec:db:bf:86:
         f1:35:f3:ab:e1:de:6c:7a:1b:0f:cc:6d:66:13:42:af:43:bb:
         72:7a:16:c5:e9:3d:87:d9:1e:05:af:47:25:36:0f:d1:e7:e4:
         e4:18:2f:b7:24:aa:ea:ec:05:68:08:fb:51:f2:1f:ab:2c:06:
         0f:ff:ae:7e:a2:a8:e7:19:52:65:0b:43:64:d6:8e:fd:8d:be:
         c3:a5:34:c4:a8:62:0f:fb:87:a3:a9:87:e3:0c:82:b5:d1:1d:
         9f:86:bf:69:57:09:43:70:1f:8d:f0:3f:47:03:f3:72:ca:e6:
         a7:5a:ad:88:5b:02:f0:31:43:eb:5c:b5:13:39:ef:50:f2:da:
         63:da:8c:be:49:6d:19:b0:3b:e8:a7:a3:64:43:0d:b3:30:32:
         7f:f5:20:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfkA1dDIsB78gfKowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YzQzN2IyOTYtMjJiZi00YTJiLWEyNTItNDc2Njk2MGIzMWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bEhEn4b0EVPyRHQv0JbQc1V5TYvQe56ILqz
/EFz84//bx7JFJ25CC7oNNpAA+0jXXZKy7CHJ1gDblgbG4VtTKLngGBJpJra4q0c
dOks5R2mNU2ipVghOoiIoP1Rlx08ulxOJbvtAPAaKk9K/XJbFz8/WY3dJdW+/kpd
xS+58jls+I6Lao99HI6zVylhVU5ja95DkQ3dBbkvuXXx3MePAVEMz+OD0bwEyYp6
689nC15NH1XIYLTSM95ULBKJtLMLpem5xfkzvVR7cQ+tENy5s8wGZrAgzmaWG7P3
ZMROir7zLmauxxI6/C9FMNYHCh4pbV2GdN4ggJ99FDH4gWFBEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMp8JXSBbxKJ8jlubeOW1uBI1JNuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTQwODBjODAtZjRjZC0z
YTE2LWE0NTctNzljZmE2ODFjNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGEjX+xW9rJdPNts4O6Zqs08We4dVhjncGAIFFkDsvkFsc6K5hVJOU3
kVGGh/0jtPzpGT/o3YYyK0kRiOro0QEgmOd1gmxLTBE0yl7weWR/QcXO7Z7AlRvF
dZfvnXS5qRoT0RGyDW+U7Nu/hvE186vh3mx6Gw/MbWYTQq9Du3J6FsXpPYfZHgWv
RyU2D9Hn5OQYL7ckqursBWgI+1HyH6ssBg//rn6iqOcZUmULQ2TWjv2NvsOlNMSo
Yg/7h6Oph+MMgrXRHZ+Gv2lXCUNwH43wP0cD83LK5qdarYhbAvAxQ+tctRM571Dy
2mPajL5JbRmwO+ino2RDDbMwMn/1IHM=
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:51:27 2026 by rpki-client