Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d1fc6187-9db4-3061-bb7f-a36725a050e7.roa
File:                     d1fc6187-9db4-3061-bb7f-a36725a050e7.roa (raw, json)
Hash identifier:          cxodAoK2hPPjJuKuwYRUvL8tCPv9EJWRm50GXltyEzY=
Subject key identifier:   09:FB:6F:85:DF:CF:AE:DD:F4:8E:C2:C9:9E:1E:92:2C:8B:96:38:EE
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584F2527A4E891ECFD133002AC00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d1fc6187-9db4-3061-bb7f-a36725a050e7.roa
Signing time:             Sat 12 Sep 2026 01:00:12 +0000
ROA not before:           Sat 12 Sep 2026 01:00:12 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        136.245.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:27:a4:e8:91:ec:fd:13:30:02:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep 12 01:00:12 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=acf5e765-79b6-49e5-a37e-08d32f1425d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:40:2b:49:49:1e:05:4d:35:c6:7a:b7:e0:
                    23:e0:42:f8:f8:3f:0f:77:46:34:9d:50:a4:ec:49:
                    8b:2c:df:e2:83:52:71:dc:04:c7:94:c6:d1:2a:84:
                    a9:f5:f3:ab:58:ac:ab:c7:65:3b:74:1c:99:38:b9:
                    2b:04:84:28:23:63:2b:be:4b:2b:f7:84:93:82:8b:
                    70:97:1f:89:d8:cd:84:01:e2:08:c0:ee:25:31:2e:
                    9c:7e:2e:1b:f0:49:a9:1e:9c:be:d8:65:3b:ca:bd:
                    52:04:2c:c0:49:81:d0:96:95:0c:ba:90:69:ed:a2:
                    c2:fa:8f:4f:0f:21:2a:e3:10:55:d2:ed:38:d9:42:
                    f9:9d:df:e4:cf:81:97:80:3f:fc:ef:d7:c2:71:61:
                    df:32:50:f3:8f:f8:70:c3:9f:be:73:b6:3a:21:98:
                    50:e7:d2:d5:97:fe:b1:69:f2:d9:80:4d:12:ee:7c:
                    00:5a:bd:af:26:cc:44:2e:f0:a5:41:f1:85:ee:5b:
                    68:75:49:82:af:6f:6c:e7:d1:b1:3f:d6:10:96:13:
                    56:8e:69:42:3c:5d:3d:4f:00:14:04:c8:7a:6d:c3:
                    ee:87:f3:f0:f4:25:86:29:05:85:18:de:5a:11:06:
                    41:84:eb:d4:7b:94:30:5d:37:39:ea:0c:d8:46:42:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FB:6F:85:DF:CF:AE:DD:F4:8E:C2:C9:9E:1E:92:2C:8B:96:38:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d1fc6187-9db4-3061-bb7f-a36725a050e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.245.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a7:3b:ee:3f:fb:62:96:de:fd:e8:a0:66:d9:8f:0e:af:b9:
         22:7f:56:96:5a:e5:14:58:2a:ce:26:23:19:49:c3:e2:6c:16:
         26:38:f8:b6:e8:fa:52:87:09:0b:c3:ed:0d:f8:29:da:6e:87:
         de:58:c3:2e:2f:65:84:06:53:22:4b:0d:4a:ce:ba:b4:9a:c9:
         ec:ac:b0:40:f8:25:b5:65:11:7e:3b:be:6d:4e:4e:e2:3f:d0:
         bc:ca:c1:1f:bc:ba:39:0b:65:0f:a3:30:7f:e3:b2:c3:4d:ef:
         2b:bd:4f:58:7c:df:09:ac:4a:72:96:da:00:64:2b:3f:6b:19:
         99:a7:f3:4c:fc:45:2e:38:7d:eb:ef:c5:07:ae:43:a2:83:43:
         41:fe:8e:3a:ea:34:c2:f1:4c:6d:c3:cd:c8:15:c8:26:26:ea:
         fc:a7:c0:af:2f:c6:e1:f6:e1:fe:04:69:8f:bd:c7:da:cf:7c:
         93:06:3a:db:da:8d:e6:53:8c:d8:39:62:7e:28:b4:5d:08:74:
         cb:ee:bd:2b:b0:ff:d2:28:6b:0b:83:39:a2:d4:1f:10:a3:1b:
         55:67:72:91:29:2a:78:0d:55:b7:c8:41:78:b9:ff:10:54:5a:
         f0:91:3c:58:b3:64:76:a0:34:3e:f3:1b:9b:ad:ad:cd:08:0f:
         03:0d:82:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8lJ6Tokez9EzACrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI2MDkxMjAxMDAxMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk
YWNmNWU3NjUtNzliNi00OWU1LWEzN2UtMDhkMzJmMTQyNWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuadAK0lJHgVNNcZ6t+Aj4EL4+D8Pd0Y0nVCk
7EmLLN/ig1Jx3ATHlMbRKoSp9fOrWKyrx2U7dByZOLkrBIQoI2Mrvksr94STgotw
lx+J2M2EAeIIwO4lMS6cfi4b8EmpHpy+2GU7yr1SBCzASYHQlpUMupBp7aLC+o9P
DyEq4xBV0u042UL5nd/kz4GXgD/879fCcWHfMlDzj/hww5++c7Y6IZhQ59LVl/6x
afLZgE0S7nwAWr2vJsxELvClQfGF7ltodUmCr29s59GxP9YQlhNWjmlCPF09TwAU
BMh6bcPuh/Pw9CWGKQWFGN5aEQZBhOvUe5QwXTc56gzYRkKMlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAn7b4Xfz67d9I7CyZ4ekiyLljjuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvZDFmYzYxODctOWRiNC0z
MDYxLWJiN2YtYTM2NzI1YTA1MGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiPV8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGnO+4/+2KW3v3ooGbZjw6vuSJ/VpZa5RRYKs4mIxlJw+JsFiY4+Lbo
+lKHCQvD7Q34Kdpuh95Ywy4vZYQGUyJLDUrOurSayeyssED4JbVlEX47vm1OTuI/
0LzKwR+8ujkLZQ+jMH/jssNN7yu9T1h83wmsSnKW2gBkKz9rGZmn80z8RS44fevv
xQeuQ6KDQ0H+jjrqNMLxTG3DzcgVyCYm6vynwK8vxuH24f4EaY+9x9rPfJMGOtva
jeZTjNg5Yn4otF0IdMvuvSuw/9IoawuDOaLUHxCjG1VncpEpKngNVbfIQXi5/xBU
WvCRPFizZHagND7zG5utrc0IDwMNggg=
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:03:06 2026 by rpki-client