Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bef98bb6-23cf-3416-9abf-2291fee82692.roa
File:                     bef98bb6-23cf-3416-9abf-2291fee82692.roa (raw, json)
Hash identifier:          NjBO+p4Zya7adkgn2JZa81t5D3q0xddP9x6lZzwDMr8=
Subject key identifier:   F8:1B:E8:51:DB:4A:8D:58:7E:F5:AA:B5:05:77:5F:7C:41:D4:40:DA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E94EA67C09D4EB355BD4F5520
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bef98bb6-23cf-3416-9abf-2291fee82692.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     9009
IP address blocks:        136.0.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:67:c0:9d:4e:b3:55:bd:4f:55:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=073ea185-5d4d-4dfd-abc1-544bddd2424d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:8b:d5:95:f7:a7:ca:50:59:a6:21:9c:52:
                    c7:8a:5c:ca:32:fb:da:ce:de:0e:b7:02:d2:26:91:
                    99:c1:e9:c7:72:09:20:c0:d3:50:4b:91:4f:31:8a:
                    59:c3:a0:85:6d:00:52:72:d9:6f:9b:c2:c4:71:30:
                    d3:ee:bd:4a:01:7f:2f:bb:5b:3d:01:35:d4:06:1b:
                    bd:a3:01:cf:5e:e0:ce:6f:8c:98:8e:d6:4c:ac:48:
                    e5:aa:76:f5:cc:0d:5a:85:ef:1b:60:1d:ad:77:aa:
                    ae:19:6e:eb:aa:93:1a:a2:ee:55:63:86:f2:af:38:
                    c7:eb:ef:3f:3a:55:51:7e:b0:ce:c1:7c:0b:59:51:
                    f8:09:ad:02:a4:52:af:b1:e2:6b:51:d6:66:cf:10:
                    75:1f:06:3b:cb:2b:ce:be:88:e8:23:d2:87:06:d4:
                    23:37:3d:4a:39:2a:e8:43:5d:48:e8:2d:68:d7:06:
                    8d:dd:19:eb:34:2e:8c:83:d1:f0:f2:95:8b:5a:83:
                    b1:e3:89:f1:c8:ad:ea:25:79:00:49:75:65:21:02:
                    3b:87:c4:95:c7:0b:fc:1a:b7:bc:48:b6:9b:f1:84:
                    f6:f9:05:88:d7:c0:b5:7d:b5:b6:f9:c5:87:23:bb:
                    e1:97:19:1b:97:38:47:ce:01:a9:dd:72:ed:d8:da:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1B:E8:51:DB:4A:8D:58:7E:F5:AA:B5:05:77:5F:7C:41:D4:40:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bef98bb6-23cf-3416-9abf-2291fee82692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:3b:6b:b8:25:9e:8e:24:84:3b:4f:a2:50:4f:27:f0:01:eb:
         1c:e6:ef:99:00:bb:27:a3:de:91:8c:b8:a6:37:49:aa:90:81:
         57:28:3b:5e:0f:a7:c3:67:0c:0e:53:9d:7f:96:38:bc:35:6f:
         9c:5e:fa:a7:9a:82:f7:b4:cb:2b:73:4f:3e:cf:da:75:5f:e2:
         cd:3f:24:5e:67:f5:21:32:17:b1:22:c9:f4:c0:7b:c2:30:b9:
         2e:52:bc:14:ad:a8:57:dd:0c:fe:2b:16:5e:53:27:71:fe:ad:
         8a:4a:63:61:37:25:e5:1e:af:63:50:da:dc:dd:68:cb:65:4b:
         54:87:f0:b3:db:c6:87:2e:41:c1:7b:65:03:db:d7:a9:6e:ff:
         7e:9b:34:20:57:96:9a:47:ce:85:43:5b:4a:dc:98:ba:5c:9a:
         f9:43:84:e1:6f:d1:f0:b7:11:e1:13:91:d2:19:cc:3a:b9:8c:
         07:ae:33:ce:d9:47:13:be:5a:07:40:3b:f0:44:50:c1:1f:41:
         fc:62:03:4a:b6:63:5b:12:76:b7:55:20:f1:2e:a9:5b:bc:db:
         c2:8d:a8:18:be:94:3d:5f:8c:5b:cf:d9:ed:f9:9e:b8:8d:1a:
         ca:59:b1:18:a9:5c:bc:9a:76:82:df:3e:95:e9:98:ae:58:cb:
         8a:20:42:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6mfAnU6zVb1PVSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
MDczZWExODUtNWQ0ZC00ZGZkLWFiYzEtNTQ0YmRkZDI0MjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhuL1ZX3p8pQWaYhnFLHilzKMvvazt4OtwLS
JpGZwenHcgkgwNNQS5FPMYpZw6CFbQBSctlvm8LEcTDT7r1KAX8vu1s9ATXUBhu9
owHPXuDOb4yYjtZMrEjlqnb1zA1ahe8bYB2td6quGW7rqpMaou5VY4byrzjH6+8/
OlVRfrDOwXwLWVH4Ca0CpFKvseJrUdZmzxB1HwY7yyvOvojoI9KHBtQjNz1KOSro
Q11I6C1o1waN3RnrNC6Mg9Hw8pWLWoOx44nxyK3qJXkASXVlIQI7h8SVxwv8Gre8
SLab8YT2+QWI18C1fbW2+cWHI7vhlxkblzhHzgGp3XLt2Nr10wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPgb6FHbSo1YfvWqtQV3X3xB1EDaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmVmOThiYjYtMjNjZi0z
NDE2LTlhYmYtMjI5MWZlZTgyNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIM7a7glno4khDtPolBPJ/AB6xzm75kAuyej3pGMuKY3SaqQgVcoO14P
p8NnDA5TnX+WOLw1b5xe+qeagve0yytzTz7P2nVf4s0/JF5n9SEyF7EiyfTAe8Iw
uS5SvBStqFfdDP4rFl5TJ3H+rYpKY2E3JeUer2NQ2tzdaMtlS1SH8LPbxocuQcF7
ZQPb16lu/36bNCBXlppHzoVDW0rcmLpcmvlDhOFv0fC3EeETkdIZzDq5jAeuM87Z
RxO+WgdAO/BEUMEfQfxiA0q2Y1sSdrdVIPEuqVu828KNqBi+lD1fjFvP2e35nriN
GspZsRipXLyadoLfPpXpmK5Yy4ogQhU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:13:34 2026 by rpki-client