Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d377f5a8-30b1-3dd8-a568-0eaa7fcf4c31.roa
File:                     d377f5a8-30b1-3dd8-a568-0eaa7fcf4c31.roa (raw, json)
Hash identifier:          CXcpyTOBOFfVl1utdmUMurRn4lJQ6VT3Ng9Ei6/TPHQ=
Subject key identifier:   F3:D1:EC:48:3B:62:22:4F:CE:AA:4C:AB:71:60:25:7C:DC:36:37:B6
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F497CB9D6CB3FF646F83E0380
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d377f5a8-30b1-3dd8-a568-0eaa7fcf4c31.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:b9:d6:cb:3f:f6:46:f8:3e:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=49b05798-adaa-4ea7-94e9-3fc08afffcff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f6:e3:34:56:ae:d4:50:61:e0:21:67:62:fa:
                    8d:5c:14:b4:a4:93:88:05:00:42:77:7d:ef:cc:31:
                    53:fb:ba:61:8b:d2:f2:91:1b:59:85:f2:59:4d:7e:
                    75:cb:d0:bb:88:3e:78:d4:ed:f1:ca:7d:9c:a3:75:
                    ca:56:d8:31:a9:5b:45:60:bc:0c:ad:b5:d8:0f:7c:
                    31:37:e8:bf:fb:95:9d:3b:65:01:75:1a:3a:c8:b0:
                    ff:08:d3:84:eb:6f:36:6a:9d:82:de:4f:a6:e3:46:
                    41:c7:49:ed:bf:43:21:78:5f:f4:da:a2:a1:c3:3b:
                    e8:3c:a2:e0:0e:84:04:68:22:5e:26:4d:69:81:67:
                    a9:c0:63:0d:e6:fb:b7:38:a6:ff:83:1a:67:ad:27:
                    53:88:38:2d:2b:33:fd:d1:38:f8:49:39:f3:69:85:
                    d6:fc:fd:4d:dc:bf:8d:4a:68:cf:55:01:37:c2:2b:
                    2e:a0:83:c2:bb:67:9a:03:e3:9c:9e:ba:23:8f:8e:
                    a2:46:71:b2:34:ec:b3:45:d8:3f:d3:65:3c:27:42:
                    47:da:79:8b:4c:88:65:62:56:e5:09:b7:e5:a9:58:
                    23:9e:27:c8:49:40:2d:49:4f:af:8e:95:76:26:7f:
                    91:ae:29:2c:6f:f9:a4:1e:42:ad:67:90:69:d3:6a:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D1:EC:48:3B:62:22:4F:CE:AA:4C:AB:71:60:25:7C:DC:36:37:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d377f5a8-30b1-3dd8-a568-0eaa7fcf4c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:98:0e:f8:fe:81:5a:a1:ff:9a:9e:c3:15:e1:33:f1:8c:06:
         aa:5e:54:6a:0f:d8:cd:b1:ac:02:e7:56:e4:78:45:8b:75:24:
         b3:48:ec:46:8e:7f:4b:85:ae:01:6a:69:f5:47:a5:75:99:8f:
         58:7d:61:4b:07:5d:17:8c:39:16:e6:6c:34:4f:32:3d:97:c9:
         b8:ef:17:9d:9e:5d:88:95:8a:b2:45:25:b6:58:7c:d8:5b:35:
         95:b0:ab:33:1e:62:20:74:61:39:1d:89:75:b2:7e:c1:cb:11:
         72:11:53:2e:75:eb:b0:20:b9:f2:c6:9d:95:8d:55:37:68:a8:
         5a:09:bd:97:ee:a9:1a:de:74:a4:e7:c6:0e:7e:93:38:64:a8:
         17:04:08:db:db:72:de:6e:32:36:aa:40:34:65:09:e9:aa:00:
         0b:27:b6:24:b1:d6:50:7b:7e:2d:bf:4c:fd:ab:32:2f:9d:a6:
         b3:81:db:4c:3f:35:10:1d:cc:b3:90:24:74:07:c5:da:ba:72:
         63:5c:b6:e2:f9:88:31:41:2e:ad:fa:b2:60:eb:35:08:11:e8:
         bd:50:98:fa:8d:b6:b6:91:de:50:2e:2a:76:60:20:6b:20:67:
         2f:0e:45:77:f0:68:4b:1b:d8:a5:de:2a:06:bd:5e:45:f5:ef:
         8e:73:b5:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfLnWyz/2Rvg+A4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDliMDU3OTgtYWRhYS00ZWE3LTk0ZTktM2ZjMDhhZmZmY2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfbjNFau1FBh4CFnYvqNXBS0pJOIBQBCd33v
zDFT+7phi9LykRtZhfJZTX51y9C7iD541O3xyn2co3XKVtgxqVtFYLwMrbXYD3wx
N+i/+5WdO2UBdRo6yLD/CNOE6282ap2C3k+m40ZBx0ntv0MheF/02qKhwzvoPKLg
DoQEaCJeJk1pgWepwGMN5vu3OKb/gxpnrSdTiDgtKzP90Tj4STnzaYXW/P1N3L+N
SmjPVQE3wisuoIPCu2eaA+Ocnrojj46iRnGyNOyzRdg/02U8J0JH2nmLTIhlYlbl
CbflqVgjnifISUAtSU+vjpV2Jn+Rriksb/mkHkKtZ5Bp02r8YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPPR7Eg7YiJPzqpMq3FgJXzcNje2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZDM3N2Y1YTgtMzBiMS0z
ZGQ4LWE1NjgtMGVhYTdmY2Y0YzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECYDvj+gVqh/5qewxXhM/GMBqpeVGoP2M2xrALnVuR4RYt1JLNI7EaO
f0uFrgFqafVHpXWZj1h9YUsHXReMORbmbDRPMj2XybjvF52eXYiVirJFJbZYfNhb
NZWwqzMeYiB0YTkdiXWyfsHLEXIRUy5167AgufLGnZWNVTdoqFoJvZfuqRredKTn
xg5+kzhkqBcECNvbct5uMjaqQDRlCemqAAsntiSx1lB7fi2/TP2rMi+dprOB20w/
NRAdzLOQJHQHxdq6cmNctuL5iDFBLq36smDrNQgR6L1QmPqNtraR3lAuKnZgIGsg
Zy8ORXfwaEsb2KXeKga9XkX1745ztUM=
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:07:02 2026 by rpki-client