Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b405071d-9044-33be-b40a-2854ccff08a7.roa
File:                     b405071d-9044-33be-b40a-2854ccff08a7.roa (raw, json)
Hash identifier:          1nJeLYBy/xMvgUeQM6AQ2vmZRL7PEcCzG+Nf1bUSh08=
Subject key identifier:   7F:84:AB:31:1D:1A:45:66:EB:00:1D:05:51:C2:3E:7E:42:35:97:08
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FAA8E15636903734379C0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b405071d-9044-33be-b40a-2854ccff08a7.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     62044
IP address blocks:        136.226.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:aa:8e:15:63:69:03:73:43:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=cd417e10-bef0-49fa-a2d6-0efc0c13f2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:6c:44:be:45:c4:11:75:5c:cd:70:72:9e:
                    be:96:5b:01:2c:cd:53:f1:6e:21:40:e0:4c:8c:ae:
                    ee:7b:bb:b5:87:7c:c9:29:e9:33:95:5f:52:da:7a:
                    39:ae:00:dd:d5:93:55:19:75:03:7e:77:c3:cd:ec:
                    62:6c:ab:fb:39:8c:a0:bd:ed:e1:3e:09:87:bd:b1:
                    84:99:5a:60:f7:e8:4c:1d:87:65:c7:6b:0f:c9:4d:
                    66:34:5f:eb:86:55:cc:7c:e1:1a:33:e7:fb:dd:7b:
                    a7:25:25:9f:f3:02:66:d1:46:20:8b:a3:84:92:47:
                    eb:19:9c:2e:47:fe:11:9e:7b:c6:b8:d4:01:02:f2:
                    91:a4:14:25:1b:e2:17:5f:2f:82:db:21:e3:b3:da:
                    94:33:43:14:6b:60:a2:6b:21:3f:4e:db:ea:3a:66:
                    e5:05:5e:71:7f:9c:8e:2c:f1:ed:69:a3:44:0e:60:
                    57:1b:7d:68:6f:a6:f7:32:64:3f:b5:ae:d8:b6:da:
                    e2:5b:4e:4e:fa:f5:13:1b:0b:aa:58:67:d5:5a:b1:
                    0e:32:ab:83:39:b0:44:cd:4d:2b:d6:6d:20:47:28:
                    af:94:05:48:10:3b:89:75:07:af:43:98:fa:a0:2f:
                    bd:58:8e:0f:14:d0:80:86:37:1d:98:21:9d:6a:35:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:84:AB:31:1D:1A:45:66:EB:00:1D:05:51:C2:3E:7E:42:35:97:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b405071d-9044-33be-b40a-2854ccff08a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d0:82:e7:5e:9d:c8:3c:c9:9a:1f:47:81:21:62:b5:42:8c:
         61:8e:5c:f5:15:44:b6:2e:99:b5:42:76:0e:23:71:b2:01:3e:
         cd:46:5a:ec:d3:0c:09:0f:86:7e:b3:7e:f7:82:dd:2f:57:5d:
         a3:57:1a:71:14:66:eb:0b:9d:e9:aa:cb:2f:2e:8e:5b:64:d4:
         56:9b:21:56:9c:00:84:ea:16:42:50:3f:de:9b:ca:17:39:db:
         cf:fd:a7:4c:c7:8e:f9:a9:6a:34:e0:db:a4:6f:cf:83:c8:94:
         c0:5b:da:a3:9c:5e:6e:bb:bb:e4:42:8a:01:3b:9a:b2:8d:ef:
         26:e9:0e:0b:23:c7:91:e0:19:ff:65:02:1d:b2:16:7b:7a:65:
         33:04:72:0b:95:2b:d1:36:23:5b:ff:1b:01:a8:88:63:1d:a2:
         8f:6d:74:6c:52:e5:de:02:29:26:f3:bf:6c:4f:78:85:ce:bf:
         16:78:c2:9f:00:0b:0f:80:54:ea:0b:58:f9:d8:26:e2:f0:bc:
         0e:66:13:37:73:60:a9:7e:2b:af:95:df:ee:22:f9:c8:2a:30:
         fb:0f:f5:88:6d:a5:23:ad:df:05:de:92:4b:7a:21:7d:10:a7:
         b4:a6:78:62:90:d4:ca:bb:2c:91:8f:83:4f:55:8a:bd:73:92:
         f6:1c:42:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6qOFWNpA3NDecAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk
Y2Q0MTdlMTAtYmVmMC00OWZhLWEyZDYtMGVmYzBjMTNmMmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHdsRL5FxBF1XM1wcp6+llsBLM1T8W4hQOBM
jK7ue7u1h3zJKekzlV9S2no5rgDd1ZNVGXUDfnfDzexibKv7OYygve3hPgmHvbGE
mVpg9+hMHYdlx2sPyU1mNF/rhlXMfOEaM+f73XunJSWf8wJm0UYgi6OEkkfrGZwu
R/4RnnvGuNQBAvKRpBQlG+IXXy+C2yHjs9qUM0MUa2CiayE/TtvqOmblBV5xf5yO
LPHtaaNEDmBXG31ob6b3MmQ/ta7YttriW05O+vUTGwuqWGfVWrEOMquDObBEzU0r
1m0gRyivlAVIEDuJdQevQ5j6oC+9WI4PFNCAhjcdmCGdajVcQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH+EqzEdGkVm6wAdBVHCPn5CNZcIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjQwNTA3MWQtOTA0NC0z
M2JlLWI0MGEtMjg1NGNjZmYwOGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOKiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3Qgudencg8yZofR4EhYrVCjGGOXPUVRLYumbVCdg4jcbIBPs1GWuzT
DAkPhn6zfveC3S9XXaNXGnEUZusLnemqyy8ujltk1FabIVacAITqFkJQP96byhc5
28/9p0zHjvmpajTg26Rvz4PIlMBb2qOcXm67u+RCigE7mrKN7ybpDgsjx5HgGf9l
Ah2yFnt6ZTMEcguVK9E2I1v/GwGoiGMdoo9tdGxS5d4CKSbzv2xPeIXOvxZ4wp8A
Cw+AVOoLWPnYJuLwvA5mEzdzYKl+K6+V3+4i+cgqMPsP9YhtpSOt3wXekkt6IX0Q
p7SmeGKQ1Mq7LJGPg09Vir1zkvYcQq8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:22:37 2026 by rpki-client