Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/36265df2-79b1-30b0-aba4-66f8c13fe609.roa
File:                     36265df2-79b1-30b0-aba4-66f8c13fe609.roa (raw, json)
Hash identifier:          rNYhklKbBAo/BB163l9LFh0HlYyUklpy9hfgtVGVLwM=
Subject key identifier:   53:BD:F4:81:AF:85:E1:5E:4D:94:E9:19:93:61:FA:F6:17:04:D1:21
Certificate issuer:       /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Certificate serial:       010D0C9F4328584F49771536235B6F0CE14C0300
Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/36265df2-79b1-30b0-aba4-66f8c13fe609.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395567
IP address blocks:        198.73.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:15:36:23:5b:6f:0c:e1:4c:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7bae4727-6c76-4a31-aae0-4adfe535317d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:19:71:33:e3:bf:f8:fe:19:8e:25:15:49:3a:
                    2f:b7:2b:81:86:8a:22:b9:25:92:7a:55:fb:dc:18:
                    fd:76:e2:83:0e:ea:c9:48:11:14:2a:2c:e1:c2:3a:
                    8f:6e:97:ac:fb:b6:4a:8e:87:35:71:3a:01:48:14:
                    79:0f:55:7d:99:86:bb:45:bd:03:2c:26:95:0b:b3:
                    91:c6:f1:cb:d4:8d:ea:0d:0a:3b:b9:8f:c8:ff:c7:
                    a7:19:3b:4b:5a:9d:39:1c:61:73:51:8e:7a:00:db:
                    11:95:2a:5c:f5:fc:91:11:cd:37:94:d6:07:42:b3:
                    ff:cc:2e:b5:e1:7a:37:9a:ea:d6:c9:b4:02:b1:46:
                    ec:f0:42:b9:17:25:9b:33:e5:31:ca:e3:e1:8c:2f:
                    3e:50:18:15:42:31:38:e8:0d:12:9f:4a:e1:94:f6:
                    d0:3c:e6:fe:7b:04:70:b5:61:51:df:e2:d9:cb:e9:
                    d9:0a:ba:66:b4:61:c1:18:01:a1:f2:a8:5e:5b:ed:
                    e9:7c:cd:09:d0:66:de:77:f3:a7:a5:0b:21:26:8f:
                    16:89:c3:e6:68:c0:49:20:58:c2:55:d4:29:7c:ef:
                    f6:bb:5f:83:62:92:b5:4b:33:e7:96:84:a1:4e:f0:
                    4f:ed:0f:42:7e:8d:89:7a:9c:f7:39:fd:9a:b9:12:
                    2e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BD:F4:81:AF:85:E1:5E:4D:94:E9:19:93:61:FA:F6:17:04:D1:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/36265df2-79b1-30b0-aba4-66f8c13fe609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:59:b6:42:8e:84:0c:3d:38:e2:68:b8:62:32:ad:12:49:3a:
         3b:30:97:8e:7b:ee:20:01:cc:a7:7a:03:ce:36:91:79:55:f0:
         73:3c:36:28:1d:97:67:e9:98:a7:8e:8f:8c:61:bf:de:65:01:
         de:0f:98:6a:26:24:90:05:bb:dd:50:d8:7b:a2:b9:d2:7b:90:
         0a:0f:25:f1:cc:db:c0:5d:5c:3c:72:32:81:9b:a6:81:11:e2:
         2c:34:00:ff:26:94:06:b1:10:be:63:a5:83:59:75:8e:60:e4:
         53:69:a2:26:98:1d:80:50:d7:48:d5:cb:4e:fe:16:fa:40:99:
         0d:57:52:36:d8:20:e7:22:74:33:fa:9b:a6:5d:c2:d3:e0:8f:
         22:ba:c1:4d:3e:34:3a:61:98:ee:e0:5d:80:d5:e6:b2:70:b8:
         fd:87:b7:3f:0d:d7:d3:57:52:fd:72:27:d9:38:82:40:41:5c:
         52:4d:fc:8b:ab:ae:68:a2:2d:cb:e6:cb:58:f1:5b:e4:db:18:
         ee:c4:27:fe:a7:ff:c8:e8:b4:71:8e:8b:a9:2f:aa:c5:62:e3:
         ac:7b:f9:4c:de:23:f8:b9:18:ff:68:ef:51:70:ef:bc:c1:f0:
         7f:94:c0:7c:6f:15:47:45:ca:d2:45:83:dd:54:cf:5e:88:cc:
         3d:16:9e:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdxU2I1tvDOFMAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3
Y2IzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
N2JhZTQ3MjctNmM3Ni00YTMxLWFhZTAtNGFkZmU1MzUzMTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBlxM+O/+P4ZjiUVSTovtyuBhooiuSWSelX7
3Bj9duKDDurJSBEUKizhwjqPbpes+7ZKjoc1cToBSBR5D1V9mYa7Rb0DLCaVC7OR
xvHL1I3qDQo7uY/I/8enGTtLWp05HGFzUY56ANsRlSpc9fyREc03lNYHQrP/zC61
4Xo3murWybQCsUbs8EK5FyWbM+UxyuPhjC8+UBgVQjE46A0Sn0rhlPbQPOb+ewRw
tWFR3+LZy+nZCrpmtGHBGAGh8qheW+3pfM0J0Gbed/OnpQshJo8WicPmaMBJIFjC
VdQpfO/2u1+DYpK1SzPnloShTvBP7Q9Cfo2Jepz3Of2auRIuxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFO99IGvheFeTZTpGZNh+vYXBNEhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3
YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMzYyNjVkZjItNzliMS0z
MGIwLWFiYTQtNjZmOGMxM2ZlNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2
MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm
N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm
ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxkkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxZtkKOhAw9OOJouGIyrRJJOjswl4577iABzKd6A842kXlV8HM8Nigd
l2fpmKeOj4xhv95lAd4PmGomJJAFu91Q2HuiudJ7kAoPJfHM28BdXDxyMoGbpoER
4iw0AP8mlAaxEL5jpYNZdY5g5FNpoiaYHYBQ10jVy07+FvpAmQ1XUjbYIOcidDP6
m6ZdwtPgjyK6wU0+NDphmO7gXYDV5rJwuP2Htz8N19NXUv1yJ9k4gkBBXFJN/Iur
rmiiLcvmy1jxW+TbGO7EJ/6n/8jotHGOi6kvqsVi46x7+UzeI/i5GP9o71Fw77zB
8H+UwHxvFUdFytJFg91Uz16IzD0Wnrc=
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:11:49 2026 by rpki-client