Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36d4e97c-4840-3ed9-9a79-bfa01282a51c.roa
File:                     36d4e97c-4840-3ed9-9a79-bfa01282a51c.roa (raw, json)
Hash identifier:          jeS91b72MopUGfBgR/fwOCxFT9BjgYkc1LfNSr84rZ8=
Subject key identifier:   B1:8D:75:D1:E6:B4:6C:E0:D6:A1:59:98:1A:7D:61:34:1E:25:FA:75
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E23D99B2CF38B918281C3D480
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36d4e97c-4840-3ed9-9a79-bfa01282a51c.roa
Signing time:             Thu 11 Jun 2026 21:00:11 +0000
ROA not before:           Thu 11 Jun 2026 21:00:11 +0000
ROA not after:            Wed 09 Sep 2026 21:00:11 +0000
asID:                     11798
IP address blocks:        142.111.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:d9:9b:2c:f3:8b:91:82:81:c3:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 11 21:00:11 2026 GMT
            Not After : Sep  9 21:00:11 2026 GMT
        Subject: CN=d7039962-221e-48ff-8726-3c99bb22ed83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:be:fa:18:5e:91:ed:ce:3a:d8:39:6f:b8:80:
                    f8:35:ed:9e:dd:8b:06:35:43:4e:82:08:21:b0:61:
                    a7:44:35:62:24:e7:92:1b:78:13:af:f6:5c:66:6b:
                    19:d2:20:63:f4:24:3e:38:5b:33:40:9e:72:3e:09:
                    0a:3d:fd:20:58:d0:c6:02:0d:09:0f:ca:e3:ff:c9:
                    c7:6d:e4:7b:ec:db:82:be:22:e0:6b:e7:86:bc:33:
                    80:cb:e5:43:f2:26:e3:dd:d8:f8:d4:d9:1a:ba:81:
                    b2:35:e8:1f:af:0d:a8:79:52:6a:7d:01:c1:83:37:
                    63:6f:72:55:60:4f:0a:38:5e:e6:29:9f:0c:01:62:
                    86:1d:2f:2a:bf:0f:c6:03:c5:5b:96:f4:ae:ca:1b:
                    cb:ea:29:75:2a:00:2e:f9:b6:ed:0f:c1:05:cf:f7:
                    66:e4:7a:f0:b4:a4:41:d4:06:1c:e8:51:75:f1:ec:
                    84:55:a3:fb:da:03:61:b9:27:fc:93:f4:57:7d:cf:
                    0d:fb:bb:fb:88:bd:7e:2c:cd:6d:b1:d1:d4:81:62:
                    30:aa:ae:51:ec:c9:7b:5d:d5:80:d9:81:03:76:68:
                    91:c2:cc:0f:40:31:b5:23:f0:d9:ea:d7:78:15:ff:
                    f1:44:0a:38:df:4d:b6:91:95:aa:1c:31:23:eb:1c:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8D:75:D1:E6:B4:6C:E0:D6:A1:59:98:1A:7D:61:34:1E:25:FA:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36d4e97c-4840-3ed9-9a79-bfa01282a51c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:81:aa:67:06:20:0e:56:67:0b:5a:96:26:48:93:d8:d3:50:
         90:17:55:20:fd:2f:49:7c:2c:e8:0f:1c:74:d0:78:a2:9a:a5:
         38:b3:71:42:00:50:49:b0:11:e7:a5:e1:ee:45:4e:e7:7f:ff:
         91:9c:08:ef:24:df:08:0e:83:d7:64:fc:e4:ae:bc:0d:80:ae:
         91:09:60:c3:a6:cd:e2:40:41:b8:8b:7f:31:6f:00:5a:b9:13:
         5a:61:21:89:96:45:67:9d:d3:0b:7d:ed:f2:8b:38:83:ad:f7:
         fc:68:5f:d2:00:e6:40:16:4d:d7:7b:d9:94:37:35:ce:98:0f:
         69:4c:3f:08:9c:aa:7d:df:8f:bd:32:20:75:06:bc:95:15:e8:
         d4:d6:ad:fa:f7:7c:bc:8f:d3:9a:c6:77:a4:a6:88:31:f8:e8:
         0b:51:b4:55:b4:92:e1:76:70:87:82:17:eb:54:a0:7a:f2:8c:
         01:02:1b:1f:96:d1:02:af:c4:38:ea:46:e9:61:de:9d:ed:e6:
         1e:ba:f6:09:89:0f:93:50:50:ef:b3:8c:dc:ba:34:a1:78:23:
         0d:81:a3:cd:4b:3d:c2:0b:52:3a:07:ad:56:01:3a:66:61:c4:
         18:11:33:1e:f0:8a:b2:c0:1d:c4:fe:7f:fa:cc:2a:0f:b1:ae:
         10:03:88:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4j2Zss84uRgoHD1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDYxMTIxMDAxMVoXDTI2MDkwOTIxMDAxMVowLzEtMCsGA1UEAxMk
ZDcwMzk5NjItMjIxZS00OGZmLTg3MjYtM2M5OWJiMjJlZDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj776GF6R7c462DlvuID4Ne2e3YsGNUNOgggh
sGGnRDViJOeSG3gTr/ZcZmsZ0iBj9CQ+OFszQJ5yPgkKPf0gWNDGAg0JD8rj/8nH
beR77NuCviLga+eGvDOAy+VD8ibj3dj41NkauoGyNegfrw2oeVJqfQHBgzdjb3JV
YE8KOF7mKZ8MAWKGHS8qvw/GA8VblvSuyhvL6il1KgAu+bbtD8EFz/dm5HrwtKRB
1AYc6FF18eyEVaP72gNhuSf8k/RXfc8N+7v7iL1+LM1tsdHUgWIwqq5R7Ml7XdWA
2YEDdmiRwswPQDG1I/DZ6td4Ff/xRAo43022kZWqHDEj6xwxNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGNddHmtGzg1qFZmBp9YTQeJfp1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzZkNGU5N2MtNDg0MC0z
ZWQ5LTlhNzktYmZhMDEyODJhNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI2BqmcGIA5WZwtaliZIk9jTUJAXVSD9L0l8LOgPHHTQeKKapTizcUIA
UEmwEeel4e5FTud//5GcCO8k3wgOg9dk/OSuvA2ArpEJYMOmzeJAQbiLfzFvAFq5
E1phIYmWRWed0wt97fKLOIOt9/xoX9IA5kAWTdd72ZQ3Nc6YD2lMPwicqn3fj70y
IHUGvJUV6NTWrfr3fLyP05rGd6SmiDH46AtRtFW0kuF2cIeCF+tUoHryjAECGx+W
0QKvxDjqRulh3p3t5h669gmJD5NQUO+zjNy6NKF4Iw2Bo81LPcILUjoHrVYBOmZh
xBgRMx7wirLAHcT+f/rMKg+xrhADiH4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:43 2026 by rpki-client