Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/f36edd80-ec39-3e7b-89e1-524a9903c097.roa
File:                     f36edd80-ec39-3e7b-89e1-524a9903c097.roa (raw, json)
Hash identifier:          Moc7lSYo2VciM0sIXLNbCk3Z2cib+VU06SwrBasRvSg=
Subject key identifier:   8C:2A:D9:D1:65:5A:D3:E5:59:C7:04:E2:A1:4C:7E:A9:E3:F5:F0:D7
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584F7BB30E98185D5127BF278100
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/f36edd80-ec39-3e7b-89e1-524a9903c097.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     4713
IP address blocks:        169.145.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b3:0e:98:18:5d:51:27:bf:27:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=ef075edd-4e35-43fe-a217-d061184580d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:46:15:27:bb:1a:d5:88:38:0d:30:c1:01:a4:
                    fd:e2:5a:d7:6f:b6:74:55:25:ac:d7:8f:e3:74:d4:
                    b5:73:86:f4:7d:a1:0f:19:d6:cf:17:26:33:54:5a:
                    44:49:e0:ea:2a:d4:f9:ab:48:4a:51:f1:b8:b6:04:
                    53:90:ff:78:ea:1f:89:00:f0:32:3f:78:4d:09:28:
                    2f:7b:c4:6e:a0:24:f6:95:e6:af:0b:73:87:c4:2f:
                    0f:df:ae:84:da:2f:14:02:4b:d7:4a:a2:ee:71:ee:
                    8b:bd:d1:3b:0b:8a:c0:1c:de:92:46:08:83:2a:a5:
                    ae:f1:96:bc:c3:51:20:49:49:b8:80:22:a1:e2:cc:
                    d7:46:95:bf:0f:1f:22:d2:fa:56:d0:29:5c:7d:7e:
                    3e:da:c6:6d:f5:ba:b9:ef:ba:57:77:f0:c4:f3:23:
                    ba:22:a1:43:31:32:b8:c7:40:9c:a7:a8:ea:3d:7d:
                    00:d3:02:a5:09:38:84:e3:07:4b:31:9f:4b:f6:86:
                    c5:7f:d2:b3:de:d9:7a:35:67:bf:2a:35:4a:30:dc:
                    5c:ce:46:0a:8d:a8:af:01:2e:af:5a:46:d6:de:ba:
                    c5:ef:df:df:6a:eb:c4:7f:0b:bc:8e:ef:a0:81:ca:
                    9f:f6:02:d0:68:80:d8:5f:df:07:9a:28:12:71:df:
                    ee:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2A:D9:D1:65:5A:D3:E5:59:C7:04:E2:A1:4C:7E:A9:E3:F5:F0:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/f36edd80-ec39-3e7b-89e1-524a9903c097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:37:90:72:24:59:7b:04:d1:4f:d1:5b:a5:a4:f3:23:d6:49:
         24:9a:42:17:7d:4e:5a:9b:51:e2:fe:4a:66:a6:f0:33:ef:dd:
         67:fa:72:f3:ec:8b:4e:4a:35:4f:66:e8:d4:8d:6c:fa:81:f2:
         2f:7f:99:1e:56:6b:92:f9:e0:28:43:04:ea:18:33:c5:31:77:
         3a:b0:2b:2b:7c:cc:58:6b:95:ab:3d:a9:58:8c:05:e9:00:99:
         b2:1a:a3:b8:8d:c6:45:73:31:cf:92:83:2b:75:ca:52:f7:87:
         be:54:e9:41:de:67:d9:a5:bb:a9:06:b1:48:30:10:60:07:d3:
         1c:52:8f:25:88:97:8c:71:e7:c6:bf:19:8e:3b:22:f1:51:f8:
         0c:d7:3a:59:6b:b8:62:ad:f4:a3:2c:da:17:24:9a:8c:45:84:
         b8:bb:b2:13:48:f2:b8:87:5d:b7:4a:c3:e0:39:2c:3c:0d:64:
         83:49:7b:31:67:6b:f8:1c:1d:8e:eb:2f:72:0d:ee:f6:a8:50:
         ed:fd:f6:0f:1d:c1:d7:3d:84:36:66:22:b3:7c:89:05:9c:89:
         5c:c1:07:b4:6f:16:fc:88:25:87:0b:4f:76:44:fd:47:27:96:
         ed:4e:7f:13:27:cc:2c:51:97:8d:c7:6a:04:d8:14:5d:34:4f:
         67:e0:5f:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sw6YGF1RJ78ngQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzgzNzk5NWItY2M4MC00ZTIzLWFmMDctY2Q0MjJkMGQz
N2E5MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk
ZWYwNzVlZGQtNGUzNS00M2ZlLWEyMTctZDA2MTE4NDU4MGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UYVJ7sa1Yg4DTDBAaT94lrXb7Z0VSWs14/j
dNS1c4b0faEPGdbPFyYzVFpESeDqKtT5q0hKUfG4tgRTkP946h+JAPAyP3hNCSgv
e8RuoCT2leavC3OHxC8P366E2i8UAkvXSqLuce6LvdE7C4rAHN6SRgiDKqWu8Za8
w1EgSUm4gCKh4szXRpW/Dx8i0vpW0ClcfX4+2sZt9bq577pXd/DE8yO6IqFDMTK4
x0Ccp6jqPX0A0wKlCTiE4wdLMZ9L9obFf9Kz3tl6NWe/KjVKMNxczkYKjaivAS6v
WkbW3rrF79/fauvEfwu8ju+ggcqf9gLQaIDYX98HmigScd/udQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIwq2dFlWtPlWccE4qFMfqnj9fDXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3
OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQyMmQwZDM3YTkvZjM2ZWRkODAtZWMzOS0z
ZTdiLTg5ZTEtNTI0YTk5MDNjMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzgzNzk5NWItY2M4MC00ZTIzLWFm
MDctY2Q0MjJkMGQzN2E5LzM4Mzc5OTViLWNjODAtNGUyMy1hZjA3LWNkNDIyZDBk
MzdhOS5jcmwwHwYDVR0jBBgwFoAUTaXny8du945GEkC7oBxE2P5AZ0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQy
MmQwZDM3YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqZHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACk3kHIkWXsE0U/RW6Wk8yPWSSSaQhd9TlqbUeL+Smam8DPv3Wf6cvPs
i05KNU9m6NSNbPqB8i9/mR5Wa5L54ChDBOoYM8UxdzqwKyt8zFhrlas9qViMBekA
mbIao7iNxkVzMc+Sgyt1ylL3h75U6UHeZ9mlu6kGsUgwEGAH0xxSjyWIl4xx58a/
GY47IvFR+AzXOllruGKt9KMs2hckmoxFhLi7shNI8riHXbdKw+A5LDwNZINJezFn
a/gcHY7rL3IN7vaoUO399g8dwdc9hDZmIrN8iQWciVzBB7RvFvyIJYcLT3ZE/Ucn
lu1OfxMnzCxRl43HagTYFF00T2fgXyk=
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:19:38 2026 by rpki-client