Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/2f78135f-5122-3552-ac95-2d0278e7f1df.roa
File:                     2f78135f-5122-3552-ac95-2d0278e7f1df.roa (raw, json)
Hash identifier:          CbeHnZUeFA/FLTx307p0+CmJ1defz6IOXwTFSGPMPys=
Subject key identifier:   E2:AA:7A:CD:5A:2B:F8:D9:3E:97:47:12:0E:DD:5B:03:78:B7:8B:68
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584D1F4A78E5B987DB20D7CDE100
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/2f78135f-5122-3552-ac95-2d0278e7f1df.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36492
IP address blocks:        136.22.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:78:e5:b9:87:db:20:d7:cd:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=cb785c9d-8ebf-4442-b59d-8cf0a019654f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fb:43:d6:20:a7:c4:86:82:1c:b5:dc:a7:af:
                    86:9e:7e:b5:18:64:75:24:8d:b4:3e:6c:a7:fb:a5:
                    28:37:28:63:60:fb:84:11:33:52:87:ed:6f:13:fd:
                    f7:c8:4a:8d:4e:df:bc:92:f7:81:18:1f:63:d4:41:
                    98:06:1b:7e:3a:7c:b7:78:25:99:c1:38:6d:52:95:
                    6e:19:16:e7:74:96:74:74:5f:02:ca:f7:52:f1:ea:
                    86:e5:39:4b:b7:7d:0d:d7:b3:a1:c0:22:cf:77:22:
                    ac:f0:3e:25:9d:8b:cd:72:53:09:39:04:68:a7:a7:
                    cd:ad:6b:5a:66:1d:bd:7c:89:63:10:99:3e:31:37:
                    03:60:94:ba:d0:4e:c1:fe:7d:46:33:e7:db:ad:e8:
                    2a:74:93:bb:a8:02:ae:7c:5d:e6:95:e6:53:2b:3e:
                    da:ae:1f:1e:83:d4:cf:72:f2:b5:48:9f:a8:e4:77:
                    4d:e9:04:4c:75:37:e6:47:ab:8b:59:fe:44:7a:83:
                    d3:3e:12:8d:30:eb:fb:4f:30:90:21:32:75:81:a9:
                    c9:4c:82:a1:5c:b4:bf:20:97:54:02:7b:c2:bc:7d:
                    95:46:a5:21:39:a1:9b:70:79:24:a3:fe:63:88:0e:
                    14:f3:49:fb:86:1e:29:f1:45:4f:15:16:94:ed:3e:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AA:7A:CD:5A:2B:F8:D9:3E:97:47:12:0E:DD:5B:03:78:B7:8B:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/2f78135f-5122-3552-ac95-2d0278e7f1df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e0:f8:24:57:1e:36:98:10:f3:1f:37:a5:6c:d7:d9:60:fa:
         23:bd:82:f9:5c:91:8e:35:59:25:60:52:49:f2:c2:6b:0a:cc:
         15:0b:8e:95:0f:50:d7:31:01:aa:8c:20:ba:d7:4a:95:0d:95:
         14:22:17:84:7c:53:5a:ef:b8:1a:bd:a7:81:3b:e9:38:54:ae:
         45:7b:18:73:0a:8f:30:15:f5:48:a4:4a:d1:a7:8d:dd:f4:b1:
         0e:6c:89:79:fa:68:13:61:fb:b5:f5:8b:41:ff:83:f4:09:da:
         55:47:35:f7:ad:3b:36:a8:b2:e2:d2:20:aa:30:73:29:30:3c:
         fa:b4:8a:de:76:ea:76:94:9b:c1:54:04:cd:f3:8d:56:59:8d:
         27:e0:f9:9a:d5:ee:e2:5f:e8:45:dd:c4:d2:64:88:46:9e:1b:
         84:41:b3:7e:47:bf:b0:f9:50:41:12:40:2c:6a:56:f4:35:d7:
         d6:ac:dc:1a:e7:9c:80:0b:b4:c2:b0:ac:ae:33:5c:d6:68:ab:
         fe:03:65:d9:95:4c:23:f2:0a:75:9e:cf:59:7d:09:ca:d4:13:
         c8:63:c9:42:b1:a3:5a:93:b8:9f:f2:3f:52:38:8e:85:2c:af:
         48:45:f1:da:df:9e:ee:2c:06:b3:f1:ca:e2:a5:f0:90:34:e6:
         aa:2e:bd:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnjluYfbINfN4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
Y2I3ODVjOWQtOGViZi00NDQyLWI1OWQtOGNmMGEwMTk2NTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvtD1iCnxIaCHLXcp6+Gnn61GGR1JI20Pmyn
+6UoNyhjYPuEETNSh+1vE/33yEqNTt+8kveBGB9j1EGYBht+Ony3eCWZwThtUpVu
GRbndJZ0dF8CyvdS8eqG5TlLt30N17OhwCLPdyKs8D4lnYvNclMJOQRop6fNrWta
Zh29fIljEJk+MTcDYJS60E7B/n1GM+fbregqdJO7qAKufF3mleZTKz7arh8eg9TP
cvK1SJ+o5HdN6QRMdTfmR6uLWf5EeoPTPhKNMOv7TzCQITJ1ganJTIKhXLS/IJdU
AnvCvH2VRqUhOaGbcHkko/5jiA4U80n7hh4p8UVPFRaU7T4oCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOKqes1aK/jZPpdHEg7dWwN4t4toMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMmY3ODEzNWYtNTEyMi0z
NTUyLWFjOTUtMmQwMjc4ZTdmMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBYTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLg+CRXHjaYEPMfN6Vs19lg+iO9gvlckY41WSVgUknywmsKzBULjpUP
UNcxAaqMILrXSpUNlRQiF4R8U1rvuBq9p4E76ThUrkV7GHMKjzAV9UikStGnjd30
sQ5siXn6aBNh+7X1i0H/g/QJ2lVHNfetOzaosuLSIKowcykwPPq0it526naUm8FU
BM3zjVZZjSfg+ZrV7uJf6EXdxNJkiEaeG4RBs35Hv7D5UEESQCxqVvQ119as3Brn
nIALtMKwrK4zXNZoq/4DZdmVTCPyCnWez1l9CcrUE8hjyUKxo1qTuJ/yP1I4joUs
r0hF8drfnu4sBrPxyuKl8JA05qouvZg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:59:25 2026 by rpki-client