Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b45bdbb-f6cd-3bc4-a0b1-1845792cc9aa.roa
File:                     2b45bdbb-f6cd-3bc4-a0b1-1845792cc9aa.roa (raw, json)
Hash identifier:          mB/pw+uCSVttkmfuPd0G1emle44DeH0zLyUv/D+XpqI=
Subject key identifier:   51:41:39:62:92:2E:43:87:1B:50:3B:A6:AE:5D:6B:8A:D3:AD:D2:EC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D4C3462B4D3A2CD967AE5C800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b45bdbb-f6cd-3bc4-a0b1-1845792cc9aa.roa
Signing time:             Thu 26 Mar 2026 15:08:34 +0000
ROA not before:           Thu 26 Mar 2026 15:08:34 +0000
ROA not after:            Wed 24 Jun 2026 15:08:34 +0000
asID:                     30060
IP address blocks:        216.87.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4c:34:62:b4:d3:a2:cd:96:7a:e5:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 26 15:08:34 2026 GMT
            Not After : Jun 24 15:08:34 2026 GMT
        Subject: CN=48322071-4f84-4360-94a8-f0868f9d36b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:a1:8a:11:6c:9a:28:5b:3c:1e:bd:49:4b:
                    42:04:18:95:ad:4c:7f:19:29:2a:b7:41:30:0a:f2:
                    9a:87:5b:af:ae:ab:ad:c0:cb:5f:97:b5:15:ba:3b:
                    0e:4c:e6:fb:23:bf:1d:fb:aa:e0:f7:0b:57:85:ec:
                    d7:74:13:0a:7d:87:5b:1d:da:43:61:cf:91:93:8a:
                    f4:50:c8:ce:ff:55:58:47:bd:3c:5b:e3:7a:33:fa:
                    c2:a0:ea:12:ba:79:52:ca:b5:17:59:8f:fd:bf:f7:
                    2e:3a:85:c2:00:0c:2c:ff:97:7b:86:5b:47:db:22:
                    ed:b6:ac:57:d1:1e:da:8a:21:be:d8:79:b7:5e:5e:
                    d0:5d:60:72:fa:b9:95:9e:0d:e5:c5:61:59:ee:8f:
                    48:7b:0d:26:7e:93:c4:f2:7c:66:02:59:01:d0:0b:
                    ae:e6:34:ff:ce:0a:62:da:1b:c3:e3:6f:c3:82:9f:
                    bf:92:ef:39:72:8c:0f:fe:6d:ba:f1:b1:ba:78:10:
                    11:6a:77:ae:dd:d3:d9:9a:4b:9e:4a:b3:0c:6c:be:
                    be:22:b7:67:ad:e7:01:08:36:30:7c:66:3e:d2:6a:
                    53:ba:ed:29:b2:39:78:80:cd:ed:7a:a3:6d:7c:60:
                    6d:ef:d1:ca:51:65:64:bc:93:dc:f7:fe:6d:fb:76:
                    45:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:41:39:62:92:2E:43:87:1B:50:3B:A6:AE:5D:6B:8A:D3:AD:D2:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b45bdbb-f6cd-3bc4-a0b1-1845792cc9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:8a:5e:a0:f5:c8:11:7c:34:59:f2:81:0d:e5:0e:92:3b:9e:
         2e:95:a0:50:b9:96:0b:98:50:26:00:24:66:83:16:89:29:6a:
         f4:f1:dc:b6:76:4f:bb:c0:0e:f0:4c:cd:d5:21:6e:8b:f7:9b:
         9f:ac:2c:b6:87:21:1d:ef:be:81:5e:cf:1f:13:96:2a:29:ac:
         c0:28:3a:c4:ad:e6:30:f1:ac:07:86:f1:9e:a6:44:80:48:15:
         ae:06:eb:66:02:f3:73:55:63:5d:b8:fc:be:0e:43:2f:ec:ce:
         10:39:52:cb:e2:95:df:e0:45:be:51:e1:8d:2e:61:b1:a0:47:
         d5:cd:e6:49:5f:ce:5a:59:64:ff:85:93:9a:c4:69:ce:06:bf:
         09:04:a3:be:5f:5e:22:92:12:34:b5:80:5b:af:5a:9f:12:d1:
         ce:e5:3a:f1:94:8c:77:6a:9f:21:1c:08:e3:cf:ef:88:aa:38:
         42:88:4d:26:10:56:7f:35:cc:63:3c:cf:4d:2b:c5:8a:92:67:
         c7:e3:12:df:93:32:73:47:e3:1c:f5:a7:7b:5e:fc:6b:eb:af:
         44:86:06:73:00:6a:30:11:87:6e:f3:67:07:ac:42:87:7a:2c:
         33:28:96:38:0b:8d:aa:33:ca:c4:55:47:ec:6b:cb:5a:9c:82:
         0e:ce:04:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1MNGK006LNlnrlyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDMyNjE1MDgzNFoXDTI2MDYyNDE1MDgzNFowLzEtMCsGA1UEAxMk
NDgzMjIwNzEtNGY4NC00MzYwLTk0YTgtZjA4NjhmOWQzNmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp+hihFsmihbPB69SUtCBBiVrUx/GSkqt0Ew
CvKah1uvrqutwMtfl7UVujsOTOb7I78d+6rg9wtXhezXdBMKfYdbHdpDYc+Rk4r0
UMjO/1VYR708W+N6M/rCoOoSunlSyrUXWY/9v/cuOoXCAAws/5d7hltH2yLttqxX
0R7aiiG+2Hm3Xl7QXWBy+rmVng3lxWFZ7o9Iew0mfpPE8nxmAlkB0Auu5jT/zgpi
2hvD42/Dgp+/ku85cowP/m268bG6eBARaneu3dPZmkueSrMMbL6+IrdnrecBCDYw
fGY+0mpTuu0psjl4gM3teqNtfGBt79HKUWVkvJPc9/5t+3ZFPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFFBOWKSLkOHG1A7pq5da4rTrdLsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmI0NWJkYmItZjZjZC0z
YmM0LWEwYjEtMTg0NTc5MmNjOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGKXqD1yBF8NFnygQ3lDpI7ni6VoFC5lguYUCYAJGaDFokpavTx3LZ2
T7vADvBMzdUhbov3m5+sLLaHIR3vvoFezx8TlioprMAoOsSt5jDxrAeG8Z6mRIBI
Fa4G62YC83NVY124/L4OQy/szhA5Usvild/gRb5R4Y0uYbGgR9XN5klfzlpZZP+F
k5rEac4GvwkEo75fXiKSEjS1gFuvWp8S0c7lOvGUjHdqnyEcCOPP74iqOEKITSYQ
Vn81zGM8z00rxYqSZ8fjEt+TMnNH4xz1p3te/Gvrr0SGBnMAajARh27zZwesQod6
LDMoljgLjaozysRVR+xry1qcgg7OBNs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:52:00 2026 by rpki-client