Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36d4e97c-4840-3ed9-9a79-bfa01282a51c.roa
File:                     36d4e97c-4840-3ed9-9a79-bfa01282a51c.roa (raw, json)
Hash identifier:          GU0MLfJaH2xVK37zlv/kO7LpdfdvJ+6qNUcSeJXi8tA=
Subject key identifier:   BB:98:8C:EF:7D:74:D0:E1:D2:DA:81:13:63:A2:31:B6:BC:7F:FF:65
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D4461D23474863FFF103C4C80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36d4e97c-4840-3ed9-9a79-bfa01282a51c.roa
Signing time:             Mon 23 Mar 2026 19:53:38 +0000
ROA not before:           Mon 23 Mar 2026 19:53:38 +0000
ROA not after:            Sun 21 Jun 2026 19:53:38 +0000
asID:                     11798
IP address blocks:        142.111.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:d2:34:74:86:3f:ff:10:3c:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 23 19:53:38 2026 GMT
            Not After : Jun 21 19:53:38 2026 GMT
        Subject: CN=7b2fbc24-7009-4709-a062-5d72be154132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:57:f0:14:4e:54:53:25:4a:27:61:55:96:
                    be:11:b6:0a:7a:02:3b:df:9a:e4:06:f4:85:ff:29:
                    17:9e:01:e9:0f:e4:7a:01:0b:d2:2a:89:b4:e9:49:
                    75:31:2b:3c:ca:9d:ed:ca:56:ce:e1:2e:9d:8a:30:
                    c9:0b:91:45:df:fd:67:b0:b4:5f:20:84:ff:2c:28:
                    c2:02:35:cd:7a:75:fd:bf:09:e9:04:5b:9f:4c:af:
                    de:3a:a0:bf:e0:18:80:dd:3f:56:65:39:52:85:e4:
                    92:dd:7d:09:2e:39:37:b5:48:50:65:af:73:8a:ff:
                    5e:b7:05:4b:09:9f:15:b3:1a:87:66:cc:64:05:4b:
                    33:51:ab:73:1b:4a:92:f6:3a:49:2c:4d:4a:bf:ab:
                    6d:d2:24:83:87:e5:b6:64:9c:ff:eb:70:e9:13:e0:
                    22:1e:28:06:69:df:df:94:88:b9:53:dd:c9:d3:64:
                    b5:2b:f0:97:24:d5:fa:1c:38:3a:f5:d0:da:a1:da:
                    39:2b:5c:aa:a2:54:30:bc:ab:28:94:2f:88:13:8c:
                    dd:46:aa:a2:1d:bf:d9:c1:b7:5c:43:68:b8:c4:35:
                    3f:a7:bf:2e:46:28:b0:80:ab:dd:d8:c8:44:b0:85:
                    a1:c3:61:a3:16:0c:4c:24:8a:39:2d:ae:de:3d:f4:
                    54:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:98:8C:EF:7D:74:D0:E1:D2:DA:81:13:63:A2:31:B6:BC:7F:FF:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36d4e97c-4840-3ed9-9a79-bfa01282a51c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2c:91:bb:e2:bf:b4:3e:03:6f:22:aa:b2:b6:96:2d:27:60:
         2a:db:0b:19:b2:b6:71:5d:79:6d:61:02:98:03:c7:e6:48:f7:
         e7:d1:50:72:d0:c5:a7:15:6c:35:4e:be:99:eb:27:8f:cc:d4:
         9a:0e:3c:45:f7:ce:1a:36:0b:4b:91:60:4a:76:30:4f:93:5c:
         c4:90:f2:12:24:c3:96:52:a4:36:bc:d6:57:b1:ba:b2:f2:e9:
         fa:e6:e4:20:3c:2f:1d:48:56:55:b4:9c:d8:d6:a6:22:d7:12:
         f2:d9:b2:16:df:34:c4:41:d1:db:d3:fb:b9:c1:be:5a:a8:07:
         43:7b:99:6f:20:ce:88:b5:ab:f1:56:62:10:33:2b:e2:d2:b0:
         a2:bc:e8:09:68:9b:14:c8:47:18:c2:3d:90:09:0d:dc:16:8b:
         22:29:a0:80:90:9a:83:81:23:a6:5e:f4:fc:a0:48:8e:15:31:
         75:5a:9c:ec:a4:fa:6a:88:6e:7c:9c:9d:3d:e3:89:9d:8c:78:
         7f:e2:b5:da:81:2e:a7:a0:cc:04:1e:11:75:66:b7:4e:83:d2:
         22:9c:84:13:2c:0b:00:38:e2:0d:f0:0d:2f:8a:7a:13:aa:32:
         74:9b:a2:61:0a:f7:12:59:2d:5b:e8:2a:67:75:b1:15:2c:3a:
         48:75:53:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EYdI0dIY//xA8TIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDMyMzE5NTMzOFoXDTI2MDYyMTE5NTMzOFowLzEtMCsGA1UEAxMk
N2IyZmJjMjQtNzAwOS00NzA5LWEwNjItNWQ3MmJlMTU0MTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx09X8BROVFMlSidhVZa+EbYKegI735rkBvSF
/ykXngHpD+R6AQvSKom06Ul1MSs8yp3tylbO4S6dijDJC5FF3/1nsLRfIIT/LCjC
AjXNenX9vwnpBFufTK/eOqC/4BiA3T9WZTlSheSS3X0JLjk3tUhQZa9ziv9etwVL
CZ8VsxqHZsxkBUszUatzG0qS9jpJLE1Kv6tt0iSDh+W2ZJz/63DpE+AiHigGad/f
lIi5U93J02S1K/CXJNX6HDg69dDaodo5K1yqolQwvKsolC+IE4zdRqqiHb/Zwbdc
Q2i4xDU/p78uRiiwgKvd2MhEsIWhw2GjFgxMJIo5La7ePfRUaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLuYjO99dNDh0tqBE2OiMba8f/9lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzZkNGU5N2MtNDg0MC0z
ZWQ5LTlhNzktYmZhMDEyODJhNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMskbviv7Q+A28iqrK2li0nYCrbCxmytnFdeW1hApgDx+ZI9+fRUHLQ
xacVbDVOvpnrJ4/M1JoOPEX3zho2C0uRYEp2ME+TXMSQ8hIkw5ZSpDa81lexurLy
6frm5CA8Lx1IVlW0nNjWpiLXEvLZshbfNMRB0dvT+7nBvlqoB0N7mW8gzoi1q/FW
YhAzK+LSsKK86AlomxTIRxjCPZAJDdwWiyIpoICQmoOBI6Ze9PygSI4VMXVanOyk
+mqIbnycnT3jiZ2MeH/itdqBLqegzAQeEXVmt06D0iKchBMsCwA44g3wDS+KehOq
MnSbomEK9xJZLVvoKmd1sRUsOkh1U2o=
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:24 2026 by rpki-client