Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5e952a7b-acf2-3bdc-9ee1-0a23779fa73b.roa
File:                     5e952a7b-acf2-3bdc-9ee1-0a23779fa73b.roa (raw, json)
Hash identifier:          t0dBeEsyjsK6PlNCUC/YZkcH+T/s7psnmLMzUUhhbs4=
Subject key identifier:   2A:E6:92:DC:3D:E6:F5:E4:E5:E6:4D:17:65:74:02:10:68:81:AD:19
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D4461D134941B0C421A0DC380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5e952a7b-acf2-3bdc-9ee1-0a23779fa73b.roa
Signing time:             Mon 23 Mar 2026 19:53:38 +0000
ROA not before:           Mon 23 Mar 2026 19:53:38 +0000
ROA not after:            Sun 21 Jun 2026 19:53:38 +0000
asID:                     11798
IP address blocks:        136.0.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:d1:34:94:1b:0c:42:1a:0d:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 23 19:53:38 2026 GMT
            Not After : Jun 21 19:53:38 2026 GMT
        Subject: CN=45b468f8-d8ed-44ec-8e7b-78aafc7e8401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a9:93:d5:d5:6c:72:99:57:1a:97:22:8a:8e:
                    c7:61:46:68:da:04:13:e9:47:23:a6:46:d3:48:0a:
                    9b:94:3e:45:aa:52:09:86:5a:e1:47:8d:3d:26:ba:
                    54:b9:5d:3f:a5:73:35:05:f8:5e:41:73:37:59:c8:
                    22:34:59:4e:89:e9:30:37:38:d7:16:82:62:f4:e1:
                    c7:bb:a8:f2:7f:91:80:de:6c:76:3d:e0:da:5f:b5:
                    63:70:4c:38:61:5b:7d:43:45:b5:f5:72:bc:c4:11:
                    70:e2:84:c7:47:aa:0b:01:bf:4c:89:1c:00:08:7f:
                    3e:29:0e:41:38:de:d9:4b:d5:41:0c:60:37:80:ba:
                    32:35:2f:8e:0c:7a:87:f7:10:05:fe:55:3e:e8:58:
                    c7:83:7d:9a:1b:36:c9:d2:cc:18:9a:fd:9a:40:22:
                    5e:f1:65:6a:e6:f8:4e:1e:35:08:cf:91:26:42:8c:
                    35:b9:c6:be:a8:ae:43:d1:bd:7f:98:e0:be:7e:10:
                    9e:c8:ee:9b:35:6d:14:af:07:5b:a0:69:57:4d:8e:
                    c2:46:d4:55:04:91:9e:b2:34:c8:71:06:8a:3d:5b:
                    08:19:13:d4:9b:71:8b:9c:c6:40:b3:97:2b:a5:f6:
                    68:4e:7e:1a:84:9a:0d:19:99:54:e8:b4:9d:47:23:
                    d6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E6:92:DC:3D:E6:F5:E4:E5:E6:4D:17:65:74:02:10:68:81:AD:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5e952a7b-acf2-3bdc-9ee1-0a23779fa73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e7:82:c4:61:6b:c4:bc:19:cd:75:51:cd:69:a8:c9:0e:1b:
         1a:f6:74:d4:c5:5b:f5:d8:9e:51:be:41:1d:5e:8f:34:55:79:
         1e:41:d4:49:ef:fa:60:57:7d:b5:bc:dc:4c:13:cd:76:f6:92:
         95:fd:dd:de:33:5e:05:96:ce:89:25:2d:f2:0c:4d:d9:65:13:
         d0:8d:29:9c:2d:02:20:c2:63:70:ad:d9:16:4d:fd:ed:79:78:
         89:51:9b:f2:2b:43:74:04:21:c5:a4:59:bf:f4:d1:ed:a0:21:
         46:b0:28:69:ae:76:74:6a:1f:fa:39:cc:ff:4f:9f:0e:78:f7:
         88:57:e9:66:9f:b0:51:b4:c6:ca:a0:fe:3d:94:1a:4d:0a:57:
         3a:61:8f:f3:db:68:aa:6f:58:d8:2b:6a:ac:67:73:83:64:60:
         af:c9:cf:94:fa:bb:2a:75:87:45:59:f0:50:f3:d0:e7:b7:5f:
         45:95:2b:a1:80:da:64:e5:b3:8e:f5:29:9d:33:98:aa:6f:e9:
         65:c3:63:45:d4:75:99:31:79:4b:95:27:ed:85:5b:a5:a5:42:
         4a:f3:34:26:26:93:fb:5b:c6:96:9f:7c:9c:64:6b:42:31:3f:
         5e:cc:de:c4:8f:95:0e:a8:26:88:64:7e:c6:67:8f:b7:b9:07:
         64:52:5f:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EYdE0lBsMQhoNw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDMyMzE5NTMzOFoXDTI2MDYyMTE5NTMzOFowLzEtMCsGA1UEAxMk
NDViNDY4ZjgtZDhlZC00NGVjLThlN2ItNzhhYWZjN2U4NDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6mT1dVscplXGpciio7HYUZo2gQT6UcjpkbT
SAqblD5FqlIJhlrhR409JrpUuV0/pXM1BfheQXM3WcgiNFlOiekwNzjXFoJi9OHH
u6jyf5GA3mx2PeDaX7VjcEw4YVt9Q0W19XK8xBFw4oTHR6oLAb9MiRwACH8+KQ5B
ON7ZS9VBDGA3gLoyNS+ODHqH9xAF/lU+6FjHg32aGzbJ0swYmv2aQCJe8WVq5vhO
HjUIz5EmQow1uca+qK5D0b1/mOC+fhCeyO6bNW0UrwdboGlXTY7CRtRVBJGesjTI
cQaKPVsIGRPUm3GLnMZAs5crpfZoTn4ahJoNGZlU6LSdRyPWdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrmktw95vXk5eZNF2V0AhBoga0ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWU5NTJhN2ItYWNmMi0z
YmRjLTllZTEtMGEyMzc3OWZhNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvngsRha8S8Gc11Uc1pqMkOGxr2dNTFW/XYnlG+QR1ejzRVeR5B1Env
+mBXfbW83EwTzXb2kpX93d4zXgWWzoklLfIMTdllE9CNKZwtAiDCY3Ct2RZN/e15
eIlRm/IrQ3QEIcWkWb/00e2gIUawKGmudnRqH/o5zP9Pnw5494hX6WafsFG0xsqg
/j2UGk0KVzphj/PbaKpvWNgraqxnc4NkYK/Jz5T6uyp1h0VZ8FDz0Oe3X0WVK6GA
2mTls471KZ0zmKpv6WXDY0XUdZkxeUuVJ+2FW6WlQkrzNCYmk/tbxpaffJxka0Ix
P17M3sSPlQ6oJohkfsZnj7e5B2RSX90=
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:17 2026 by rpki-client