Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/abb216d4-a199-3c91-be95-f9c105d91f6d.roa
File:                     abb216d4-a199-3c91-be95-f9c105d91f6d.roa (raw, json)
Hash identifier:          qXfLX+Apu+4m4Eh11V6WKAsywAicZTcOGUMxY+3d7zY=
Subject key identifier:   89:66:C3:0F:D6:9A:25:E7:B0:C4:C1:B2:4F:95:EB:36:47:18:C2:0E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F00DCBF3097D782FD30A9D400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/abb216d4-a199-3c91-be95-f9c105d91f6d.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     140133
IP address blocks:        136.0.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:bf:30:97:d7:82:fd:30:a9:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=15285d6f-8faa-405c-b1a6-252587a959f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:b4:bf:18:aa:87:33:0e:7f:f2:6a:b5:a2:
                    d4:65:36:91:c3:68:f3:ef:42:73:ba:4b:55:84:31:
                    b6:26:ba:5a:1f:45:ac:44:e1:e5:e9:95:73:81:fe:
                    45:10:96:51:c3:3a:1c:8d:94:55:0a:bb:dc:8e:c8:
                    63:72:26:f4:90:9f:3e:1d:bd:ea:1f:1e:5b:e6:06:
                    d9:e9:85:af:ff:0f:ee:43:49:ca:35:ce:2a:4a:e2:
                    3c:a1:11:1e:ab:ad:c7:49:51:96:d4:b9:e3:10:1b:
                    11:5f:50:a0:f6:86:9b:b5:3b:a9:b9:5e:cc:ee:d1:
                    aa:4d:01:0c:cf:13:c8:9c:ca:2a:88:44:fe:17:b7:
                    4a:f8:64:57:59:02:1f:1f:90:0b:7c:a6:53:48:6d:
                    ba:03:91:55:dd:f0:4b:88:63:06:c4:40:b9:12:39:
                    55:01:30:68:7b:57:de:78:23:f6:37:66:d2:e9:a6:
                    f6:5a:38:87:9d:2a:95:47:61:05:7c:f5:45:01:e8:
                    96:8d:c5:e5:69:16:4a:04:f5:e0:1e:6f:da:6a:84:
                    f9:90:f3:7d:5f:70:bd:be:fa:40:5c:98:05:90:d7:
                    fc:9f:f8:7c:41:46:48:99:df:30:53:51:9d:50:a2:
                    1d:57:d6:df:dc:63:28:46:05:f4:9d:f1:3a:d0:81:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:66:C3:0F:D6:9A:25:E7:B0:C4:C1:B2:4F:95:EB:36:47:18:C2:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/abb216d4-a199-3c91-be95-f9c105d91f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f1:aa:a8:4e:7a:2e:c5:17:bd:79:bd:55:98:72:cb:de:20:
         a6:3a:a7:98:e2:de:8a:e3:11:89:7c:9f:15:ed:26:ba:d4:2f:
         74:6b:7d:78:d7:7a:ac:3a:76:38:de:de:a3:c0:2a:69:30:2f:
         eb:91:72:5f:9b:19:ad:78:a8:ea:9a:eb:65:c9:ee:03:22:19:
         98:59:d1:e4:a7:c5:bb:6e:2c:8b:cf:ab:7a:a4:05:77:dc:99:
         ff:9e:29:d5:39:57:c4:50:d2:97:2c:1c:84:f9:b0:bb:57:b1:
         f1:a6:81:52:a4:cf:74:c5:20:6f:62:a7:45:25:e0:ba:3f:1c:
         d7:d1:05:4a:3a:3b:6b:3b:87:d0:2b:f9:b6:ee:90:c4:63:8c:
         dc:e1:6a:fe:67:21:e3:57:b1:19:e0:e0:fe:ee:c6:35:78:0b:
         8a:c5:67:d2:99:aa:ca:59:e4:07:f8:5d:c3:f0:62:c2:2b:04:
         22:7a:b8:8b:13:12:19:f2:5d:42:e3:d5:da:2d:1f:c9:7a:7b:
         89:3f:e6:f3:51:7d:cd:33:f8:43:c3:e2:16:ff:fb:5d:37:70:
         15:9f:59:4f:75:08:53:c1:d1:a3:ba:3e:b5:dd:60:68:82:0c:
         59:d1:7c:a4:db:8d:fe:c1:66:2e:75:15:b3:2c:aa:b2:d0:f4:
         ab:9d:d9:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3L8wl9eC/TCp1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
MTUyODVkNmYtOGZhYS00MDVjLWIxYTYtMjUyNTg3YTk1OWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteC0vxiqhzMOf/JqtaLUZTaRw2jz70JzuktV
hDG2JrpaH0WsROHl6ZVzgf5FEJZRwzocjZRVCrvcjshjcib0kJ8+Hb3qHx5b5gbZ
6YWv/w/uQ0nKNc4qSuI8oREeq63HSVGW1LnjEBsRX1Cg9oabtTupuV7M7tGqTQEM
zxPInMoqiET+F7dK+GRXWQIfH5ALfKZTSG26A5FV3fBLiGMGxEC5EjlVATBoe1fe
eCP2N2bS6ab2WjiHnSqVR2EFfPVFAeiWjcXlaRZKBPXgHm/aaoT5kPN9X3C9vvpA
XJgFkNf8n/h8QUZImd8wU1GdUKIdV9bf3GMoRgX0nfE60IF1VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIlmww/WmiXnsMTBsk+V6zZHGMIOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWJiMjE2ZDQtYTE5OS0z
YzkxLWJlOTUtZjljMTA1ZDkxZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzxqqhOei7FF715vVWYcsveIKY6p5ji3orjEYl8nxXtJrrUL3RrfXjX
eqw6djje3qPAKmkwL+uRcl+bGa14qOqa62XJ7gMiGZhZ0eSnxbtuLIvPq3qkBXfc
mf+eKdU5V8RQ0pcsHIT5sLtXsfGmgVKkz3TFIG9ip0Ul4Lo/HNfRBUo6O2s7h9Ar
+bbukMRjjNzhav5nIeNXsRng4P7uxjV4C4rFZ9KZqspZ5Af4XcPwYsIrBCJ6uIsT
EhnyXULj1dotH8l6e4k/5vNRfc0z+EPD4hb/+103cBWfWU91CFPB0aO6PrXdYGiC
DFnRfKTbjf7BZi51FbMsqrLQ9Kud2Zk=
-----END CERTIFICATE-----
Generated at Mon Oct 5 00:53:08 2026 by rpki-client