Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a51b75c5-1781-3044-acee-beb447fdab53.roa
File:                     a51b75c5-1781-3044-acee-beb447fdab53.roa (raw, json)
Hash identifier:          2AVNm9Sb5fiDixHV9IiuS7z8w2fn0NuYwQOWi50qhZs=
Subject key identifier:   D4:F1:01:FF:5D:FD:30:FC:EF:BA:19:A1:79:3B:96:52:70:27:63:2C
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584F4972AF4B899C2A4A3E481E40
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a51b75c5-1781-3044-acee-beb447fdab53.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16591
IP address blocks:        136.33.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:af:4b:89:9c:2a:4a:3e:48:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6db6b786-440b-44a9-8a39-2ab4c267f7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:35:ab:5d:56:f9:6c:1f:f6:b6:75:94:4d:21:
                    a7:3a:cd:d9:2e:7e:71:63:aa:a8:e6:af:7f:50:49:
                    c5:1e:59:5f:33:48:f6:a0:37:9a:b1:ee:76:b3:8a:
                    44:b8:d0:a4:72:00:a9:e1:8b:77:a2:09:50:8d:94:
                    ab:05:8d:1a:6c:54:8e:c8:c5:b4:80:06:94:ac:ec:
                    c9:ba:9d:fb:2e:bc:55:5c:e1:0f:43:4e:da:f8:ef:
                    16:f7:30:86:13:6b:46:20:40:ad:64:10:00:c7:cf:
                    a8:49:33:54:03:1d:60:d7:54:0e:8f:65:f8:71:2e:
                    bd:f4:05:6e:d2:eb:fb:c7:ae:7a:53:4a:ce:30:fc:
                    54:e3:e9:19:51:65:34:ff:4e:12:30:52:a2:bc:77:
                    20:2f:b7:30:21:79:53:3c:43:cd:c7:13:5e:70:c8:
                    34:ce:7e:f7:06:ad:1c:a1:75:0e:05:9f:95:dc:fb:
                    66:ba:eb:8b:7c:fd:20:40:80:93:c2:fb:db:b0:be:
                    78:ac:c2:99:e4:41:ea:7e:1d:26:1d:96:06:85:86:
                    7b:a6:30:d2:62:22:85:28:88:2b:a0:45:a5:e5:a1:
                    e2:21:a9:97:83:92:73:2e:0f:03:fb:f3:e8:32:af:
                    dc:c3:11:e6:93:2a:f9:fc:e5:d0:37:3e:e6:f1:56:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F1:01:FF:5D:FD:30:FC:EF:BA:19:A1:79:3B:96:52:70:27:63:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a51b75c5-1781-3044-acee-beb447fdab53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.33.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f9:bf:fb:b5:97:09:c7:32:13:90:f1:05:29:26:53:5a:1a:
         3b:c5:0b:39:18:8f:93:a2:6e:c6:8e:fa:ed:10:d6:91:49:51:
         d9:4d:71:7e:63:16:65:37:4f:7e:09:1e:fd:0a:76:d6:55:54:
         1d:26:fb:bd:6d:ea:9c:0c:e9:64:be:ba:4f:33:59:09:da:d7:
         03:c8:42:5b:6e:48:37:25:e8:12:a3:6c:34:24:45:16:7f:e6:
         97:dd:df:e3:2e:8b:b6:a4:86:b9:60:96:76:d5:c7:b9:c7:cf:
         4f:a0:eb:21:f1:eb:2a:84:45:07:91:bd:54:35:fd:1f:d8:82:
         34:59:c5:82:ab:94:96:bb:1c:3c:b4:61:ec:96:fe:76:f4:19:
         1a:02:62:b0:7c:6d:65:06:21:1e:3c:0a:94:47:93:8b:cd:6a:
         66:27:0e:c4:da:a2:e3:46:c0:98:89:ee:2b:ae:ef:27:d4:fb:
         b6:8a:0c:7b:69:5d:c8:e1:1d:76:a2:be:cd:2c:a2:0d:ad:a8:
         0b:dc:6f:36:20:d8:48:5d:7c:d2:a6:23:50:5a:ac:11:3f:a1:
         8c:51:2a:e2:5a:56:89:70:c5:63:cc:29:1a:72:04:57:67:db:
         e2:70:56:24:45:a6:3a:c0:17:34:57:85:34:9c:a0:a1:76:ee:
         7e:80:c8:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcq9LiZwqSj5IHkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmRiNmI3ODYtNDQwYi00NGE5LThhMzktMmFiNGMyNjdmN2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzWrXVb5bB/2tnWUTSGnOs3ZLn5xY6qo5q9/
UEnFHllfM0j2oDease52s4pEuNCkcgCp4Yt3oglQjZSrBY0abFSOyMW0gAaUrOzJ
up37LrxVXOEPQ07a+O8W9zCGE2tGIECtZBAAx8+oSTNUAx1g11QOj2X4cS699AVu
0uv7x656U0rOMPxU4+kZUWU0/04SMFKivHcgL7cwIXlTPEPNxxNecMg0zn73Bq0c
oXUOBZ+V3PtmuuuLfP0gQICTwvvbsL54rMKZ5EHqfh0mHZYGhYZ7pjDSYiKFKIgr
oEWl5aHiIamXg5JzLg8D+/PoMq/cwxHmkyr5/OXQNz7m8VbNHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNTxAf9d/TD877oZoXk7llJwJ2MsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTUxYjc1YzUtMTc4MS0z
MDQ0LWFjZWUtYmViNDQ3ZmRhYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCEwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABb5v/u1lwnHMhOQ8QUpJlNaGjvFCzkYj5OibsaO+u0Q1pFJUdlNcX5j
FmU3T34JHv0KdtZVVB0m+71t6pwM6WS+uk8zWQna1wPIQltuSDcl6BKjbDQkRRZ/
5pfd3+Mui7akhrlglnbVx7nHz0+g6yHx6yqERQeRvVQ1/R/YgjRZxYKrlJa7HDy0
YeyW/nb0GRoCYrB8bWUGIR48CpRHk4vNamYnDsTaouNGwJiJ7iuu7yfU+7aKDHtp
XcjhHXaivs0sog2tqAvcbzYg2EhdfNKmI1BarBE/oYxRKuJaVolwxWPMKRpyBFdn
2+JwViRFpjrAFzRXhTScoKF27n6AyO8=
-----END CERTIFICATE-----
Generated at Sun Sep 27 11:37:50 2026 by rpki-client