Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3133b201-516b-3fee-8110-ac0c678aa31d.roa
File:                     3133b201-516b-3fee-8110-ac0c678aa31d.roa (raw, json)
Hash identifier:          DIldfUFfccINQvmQgAchRiQYJ4R/gDtwmztTZZboRtg=
Subject key identifier:   C9:0A:3F:00:C8:BD:15:2A:66:5E:A0:D6:59:BC:A2:6D:68:6B:E0:B0
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584F2ABD1AF17B2B2B87DB077D80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3133b201-516b-3fee-8110-ac0c678aa31d.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     936
IP address blocks:        8.36.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:1a:f1:7b:2b:2b:87:db:07:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=e2196648-3ac0-412c-8a1c-1e4b41cd7498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:39:b4:56:72:95:2a:47:ed:42:5b:33:00:b3:
                    82:5f:fb:95:10:2b:3a:76:77:b7:47:a6:86:35:9c:
                    34:11:94:5d:ba:a7:8c:fa:13:37:d4:43:88:be:cb:
                    70:9b:51:2c:0e:cd:69:3b:f9:88:86:d5:ca:b6:7b:
                    b9:b9:92:86:12:c3:4e:25:38:ae:28:ba:35:fa:b0:
                    0c:80:c6:87:35:08:82:53:d1:00:15:38:bc:bf:18:
                    d0:54:fc:10:7d:a7:de:b6:15:e6:b4:ab:b5:56:64:
                    f9:c7:ee:51:22:83:40:cf:a9:b8:81:9d:52:b7:db:
                    62:b5:5a:60:84:40:d0:c5:1b:40:8c:71:a1:fc:67:
                    77:bd:31:6d:25:f1:c5:db:92:9b:a9:f4:97:35:ba:
                    ea:d6:be:35:f5:b0:d2:07:8b:cd:d6:f9:a6:ae:9d:
                    ca:cf:f0:91:17:41:3f:cd:8d:e8:89:b2:f6:f5:03:
                    22:6d:f0:0e:a9:e5:d9:f7:90:d4:ec:92:e5:aa:d9:
                    12:81:31:65:e6:b4:f4:b4:16:8d:83:95:22:a9:06:
                    f1:28:72:5e:77:8c:8f:57:6b:3d:4b:33:0b:9e:50:
                    ad:1b:64:56:bd:a3:ca:42:48:83:34:0d:f3:26:84:
                    77:f9:09:4d:67:e4:f9:77:d8:88:d1:6a:54:94:d0:
                    22:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0A:3F:00:C8:BD:15:2A:66:5E:A0:D6:59:BC:A2:6D:68:6B:E0:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3133b201-516b-3fee-8110-ac0c678aa31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.36.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e0:4c:6a:f1:4f:14:d7:97:2f:48:18:86:40:d6:67:5c:a3:
         fb:be:10:c6:ee:f6:9e:3a:5f:49:00:c6:45:31:00:42:8f:82:
         95:1b:92:3d:04:71:1b:7a:11:24:ff:b7:2f:3b:d9:66:06:c7:
         2e:40:43:80:34:99:f3:81:91:d0:4d:59:3c:f5:7e:2c:0f:af:
         fb:4c:ce:8e:d6:dc:d0:11:da:9f:be:12:e2:8d:fb:9d:bc:ef:
         9e:9a:9e:ba:8b:6f:67:49:93:cf:0e:9c:1c:23:03:29:c7:83:
         cc:7b:82:1b:de:9d:a3:c5:c5:50:0a:ef:dc:f2:a0:2e:ef:51:
         ca:88:0d:5d:49:de:e9:ee:a4:b4:4c:41:9a:be:8e:9b:e6:0b:
         dc:f8:1d:80:11:18:6a:1c:67:90:f3:2b:88:ca:43:de:b9:96:
         f5:22:cf:b7:7f:81:53:5b:15:1c:35:4f:b7:7b:28:f8:78:d1:
         69:ba:7a:5d:b5:b6:20:b5:00:b4:64:b0:13:e9:08:a9:b8:1d:
         5c:ab:68:a9:c0:b6:06:b3:ab:c9:00:3e:dc:32:f0:1e:a0:37:
         96:50:ec:37:f9:95:db:6e:9b:d6:e5:54:f9:5c:b6:b2:ac:08:
         07:ef:6b:2a:88:3b:7d:a9:29:bd:39:d1:10:4c:a0:97:9f:93:
         af:f2:81:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRrxeysrh9sHfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk
ZTIxOTY2NDgtM2FjMC00MTJjLThhMWMtMWU0YjQxY2Q3NDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTm0VnKVKkftQlszALOCX/uVECs6dne3R6aG
NZw0EZRduqeM+hM31EOIvstwm1EsDs1pO/mIhtXKtnu5uZKGEsNOJTiuKLo1+rAM
gMaHNQiCU9EAFTi8vxjQVPwQfafethXmtKu1VmT5x+5RIoNAz6m4gZ1St9titVpg
hEDQxRtAjHGh/Gd3vTFtJfHF25KbqfSXNbrq1r419bDSB4vN1vmmrp3Kz/CRF0E/
zY3oibL29QMibfAOqeXZ95DU7JLlqtkSgTFl5rT0tBaNg5UiqQbxKHJed4yPV2s9
SzMLnlCtG2RWvaPKQkiDNA3zJoR3+QlNZ+T5d9iI0WpUlNAi/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMkKPwDIvRUqZl6g1lm8om1oa+CwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzEzM2IyMDEtNTE2Yi0z
ZmVlLTgxMTAtYWMwYzY3OGFhMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCROMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3gTGrxTxTXly9IGIZA1mdco/u+EMbu9p46X0kAxkUxAEKPgpUbkj0E
cRt6EST/ty872WYGxy5AQ4A0mfOBkdBNWTz1fiwPr/tMzo7W3NAR2p++EuKN+528
756anrqLb2dJk88OnBwjAynHg8x7ghvenaPFxVAK79zyoC7vUcqIDV1J3unupLRM
QZq+jpvmC9z4HYARGGocZ5DzK4jKQ965lvUiz7d/gVNbFRw1T7d7KPh40Wm6el21
tiC1ALRksBPpCKm4HVyraKnAtgazq8kAPtwy8B6gN5ZQ7Df5ldtum9blVPlctrKs
CAfvayqIO32pKb050RBMoJefk6/ygbM=
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:50:39 2026 by rpki-client