Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ae1db98-8485-3f09-b6ac-7793364aa771.roa
File:                     4ae1db98-8485-3f09-b6ac-7793364aa771.roa (raw, json)
Hash identifier:          azcNRknNdkJV6vlDmSL69d8lOTVKzYcxk3DZZXJVe14=
Subject key identifier:   E1:8A:33:A9:42:C9:CE:BD:F8:40:E9:AB:D8:AB:7F:34:55:01:7F:A4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D4461D10C78745F6DB246C680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ae1db98-8485-3f09-b6ac-7793364aa771.roa
Signing time:             Mon 23 Mar 2026 19:53:38 +0000
ROA not before:           Mon 23 Mar 2026 19:53:38 +0000
ROA not after:            Sun 21 Jun 2026 19:53:38 +0000
asID:                     11798
IP address blocks:        136.0.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:d1:0c:78:74:5f:6d:b2:46:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 23 19:53:38 2026 GMT
            Not After : Jun 21 19:53:38 2026 GMT
        Subject: CN=92886b47-fe28-4ab7-b8c4-3708d7dae0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:3e:df:ee:18:91:84:43:d1:60:96:ca:27:
                    fd:45:b3:e1:ee:af:ca:5e:8e:c2:0a:18:6a:6f:c4:
                    09:df:d3:22:c5:55:b1:c3:cd:4b:52:34:ea:33:d2:
                    16:c0:ef:fe:91:dc:d5:55:5c:5c:70:0d:c5:0c:83:
                    cd:6c:cb:a8:28:84:b9:21:db:6e:38:55:cb:65:d4:
                    5d:0e:a9:db:f1:86:f9:47:9d:cd:b0:8a:c6:75:5b:
                    e5:b1:31:9c:15:ba:c6:af:60:ca:b4:7a:79:9a:ef:
                    30:27:87:0a:b7:6e:82:80:95:64:18:d0:19:13:66:
                    57:79:e5:48:29:77:f0:c4:c2:ce:db:2e:4a:2c:02:
                    9f:8f:95:a4:0d:b7:05:b5:92:0d:61:03:ee:c5:4e:
                    1b:65:18:50:39:bf:6a:8f:58:1d:12:aa:87:da:0e:
                    35:31:6f:15:5e:24:69:e9:17:2b:07:be:83:f5:f0:
                    03:06:b1:22:ae:5c:f4:35:f1:ec:72:09:30:18:92:
                    1f:40:dd:93:01:f9:3a:f2:9b:dc:d2:c8:c8:7c:00:
                    20:9d:27:84:e3:58:93:73:44:8d:e4:9b:1b:3b:b7:
                    ff:d9:94:cf:99:b3:f8:d8:8b:b8:d8:a7:f5:85:32:
                    ba:d3:4b:52:b4:09:da:02:e4:b9:f7:b0:33:0b:a2:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8A:33:A9:42:C9:CE:BD:F8:40:E9:AB:D8:AB:7F:34:55:01:7F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ae1db98-8485-3f09-b6ac-7793364aa771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:40:04:5c:1d:24:84:0a:7e:08:fa:9a:69:b4:b7:65:7f:ae:
         f5:32:9b:10:83:05:73:36:cc:a9:73:8a:45:d7:9c:27:a1:fa:
         df:88:f6:d8:7a:37:16:3a:e6:0f:a6:92:37:70:39:72:72:27:
         a5:cc:b6:c2:83:49:d2:7c:34:55:df:74:8c:61:99:12:d0:cd:
         6e:a8:f0:68:f1:8c:3c:0a:7e:18:71:ff:a2:0c:ef:a8:bd:4c:
         5c:ab:6c:d8:4a:8b:38:c1:2a:45:d0:e3:f7:a7:7e:57:52:24:
         39:05:9a:fa:d6:c9:1b:ee:14:03:5f:c0:94:21:a4:53:32:bd:
         e4:61:c4:ef:01:28:ef:26:bc:75:a8:5a:c2:3c:26:19:cb:b5:
         ba:7f:75:3f:a9:aa:6a:9a:80:be:12:d4:f9:df:77:19:2f:14:
         1a:d8:4d:b6:b7:a2:a5:31:84:9c:60:30:9a:36:5f:50:61:59:
         d9:3c:0f:53:8d:95:87:db:0b:2f:46:ba:cb:9b:03:ab:95:93:
         31:f2:e1:fa:5c:19:b3:e1:64:83:de:31:13:98:52:6c:92:aa:
         5c:ea:66:82:bd:b9:c2:65:c2:79:c1:de:ed:af:6b:0a:98:02:
         c5:09:87:68:07:39:89:bf:fd:f7:0b:e3:d7:ec:9f:be:22:b3:
         eb:0e:db:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EYdEMeHRfbbJGxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDMyMzE5NTMzOFoXDTI2MDYyMTE5NTMzOFowLzEtMCsGA1UEAxMk
OTI4ODZiNDctZmUyOC00YWI3LWI4YzQtMzcwOGQ3ZGFlMGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1k+3+4YkYRD0WCWyif9RbPh7q/KXo7CChhq
b8QJ39MixVWxw81LUjTqM9IWwO/+kdzVVVxccA3FDIPNbMuoKIS5IdtuOFXLZdRd
Dqnb8Yb5R53NsIrGdVvlsTGcFbrGr2DKtHp5mu8wJ4cKt26CgJVkGNAZE2ZXeeVI
KXfwxMLO2y5KLAKfj5WkDbcFtZINYQPuxU4bZRhQOb9qj1gdEqqH2g41MW8VXiRp
6RcrB76D9fADBrEirlz0NfHscgkwGJIfQN2TAfk68pvc0sjIfAAgnSeE41iTc0SN
5JsbO7f/2ZTPmbP42Iu42Kf1hTK600tStAnaAuS597AzC6LNpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGKM6lCyc69+EDpq9irfzRVAX+kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGFlMWRiOTgtODQ4NS0z
ZjA5LWI2YWMtNzc5MzM2NGFhNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1ABFwdJIQKfgj6mmm0t2V/rvUymxCDBXM2zKlzikXXnCeh+t+I9th6
NxY65g+mkjdwOXJyJ6XMtsKDSdJ8NFXfdIxhmRLQzW6o8GjxjDwKfhhx/6IM76i9
TFyrbNhKizjBKkXQ4/enfldSJDkFmvrWyRvuFANfwJQhpFMyveRhxO8BKO8mvHWo
WsI8JhnLtbp/dT+pqmqagL4S1PnfdxkvFBrYTba3oqUxhJxgMJo2X1BhWdk8D1ON
lYfbCy9GusubA6uVkzHy4fpcGbPhZIPeMROYUmySqlzqZoK9ucJlwnnB3u2vawqY
AsUJh2gHOYm//fcL49fsn74is+sO2/U=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:43 2026 by rpki-client