Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d97cf89b-4e71-39ff-ac39-7e272b28d860.roa
File:                     d97cf89b-4e71-39ff-ac39-7e272b28d860.roa (raw, json)
Hash identifier:          qH4VyX7i49xaBg7+dZBeskPOO2fOV/qseMS5H3ZtsIg=
Subject key identifier:   F7:7B:24:A0:A9:76:CF:A9:AD:60:CB:69:FF:BA:6F:66:89:5E:0A:0D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F374D36D3891E477CD20A5440
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d97cf89b-4e71-39ff-ac39-7e272b28d860.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     9009
IP address blocks:        136.0.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:36:d3:89:1e:47:7c:d2:0a:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=6827c32f-fa56-4725-ad57-3827f71e0387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:80:49:25:eb:25:01:d3:69:89:97:cf:68:
                    70:3f:dc:0d:40:09:f7:0d:d2:7b:d5:41:ba:cf:19:
                    7a:66:f8:12:0e:0a:09:75:d6:ee:71:b8:3a:27:e8:
                    1a:e0:2a:f2:72:7f:53:9f:e8:cd:70:0b:b7:aa:55:
                    ef:a6:f1:a1:ed:ee:eb:83:4d:78:40:c0:1a:bb:d3:
                    62:2d:ea:53:21:e4:70:95:ee:f2:cf:80:9a:4d:45:
                    1a:ec:4a:49:77:90:22:2a:40:0a:9d:c9:5d:a1:c7:
                    25:f6:f4:ce:62:f6:f6:dc:96:aa:a3:74:c4:1f:a1:
                    67:8c:76:e6:c6:62:ca:de:53:44:c1:bf:8c:7b:e7:
                    9d:7d:d3:05:04:b3:5a:45:2e:84:8c:36:36:b2:98:
                    e5:94:78:02:70:8c:21:6f:cb:9a:6c:84:ce:c4:02:
                    6c:43:1a:db:a7:86:c6:02:ad:f0:99:66:22:52:83:
                    51:63:ef:6e:5e:28:ca:98:b1:00:61:5b:c1:60:96:
                    6f:a9:0c:52:58:a4:45:64:f7:10:87:95:d7:3f:c2:
                    7c:f3:81:55:23:ef:66:8e:d6:15:9c:36:84:28:0a:
                    4a:2d:95:6c:a7:9b:4e:53:aa:5f:90:31:5b:ec:98:
                    a9:2c:14:d1:23:57:32:1b:fb:d2:fe:d9:dd:1e:19:
                    d5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7B:24:A0:A9:76:CF:A9:AD:60:CB:69:FF:BA:6F:66:89:5E:0A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d97cf89b-4e71-39ff-ac39-7e272b28d860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f5:62:6c:d4:ea:b9:76:59:21:1d:44:6b:11:b4:bd:18:f8:
         1b:13:46:63:78:0b:74:e2:ec:b7:88:e3:8e:c5:2f:30:bb:2e:
         99:27:a2:e9:bb:d2:56:c6:54:6d:cc:9c:e2:88:a5:16:2d:c7:
         04:b2:8b:e7:b7:bd:8b:4b:a2:44:0d:a8:5d:54:9c:ea:14:24:
         ed:2b:23:d2:d8:0c:70:77:96:9c:03:6d:06:56:a9:86:62:ce:
         09:5f:63:96:80:3c:c1:48:75:fe:c6:10:8b:dd:a1:e4:bc:36:
         19:26:fd:d7:74:4c:57:a4:a6:07:7a:b5:4d:2c:ab:75:a3:ea:
         b2:44:9d:ea:e9:e0:88:22:5d:9d:aa:06:fe:5a:8f:06:54:fe:
         65:99:cf:4f:48:34:bd:01:0d:42:ff:10:e7:e5:27:a9:7d:10:
         0f:7c:4f:3e:ab:83:09:94:f8:d0:c7:0d:0b:f0:f5:1e:d8:47:
         0f:d4:45:dc:0c:31:46:f6:b0:d5:bd:80:97:47:46:5b:f6:35:
         95:15:56:6c:de:78:15:e7:32:81:e5:b9:07:20:13:b7:45:93:
         58:0f:7a:87:6d:03:5c:1f:6e:7b:9a:82:94:af:35:02:50:83:
         a6:62:a5:b8:b0:6c:6f:24:b6:81:79:3a:5e:25:9b:81:21:b7:
         42:a0:31:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TTbTiR5HfNIKVEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
NjgyN2MzMmYtZmE1Ni00NzI1LWFkNTctMzgyN2Y3MWUwMzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb+ASSXrJQHTaYmXz2hwP9wNQAn3DdJ71UG6
zxl6ZvgSDgoJddbucbg6J+ga4Crycn9Tn+jNcAu3qlXvpvGh7e7rg014QMAau9Ni
LepTIeRwle7yz4CaTUUa7EpJd5AiKkAKncldoccl9vTOYvb23Jaqo3TEH6FnjHbm
xmLK3lNEwb+Me+edfdMFBLNaRS6EjDY2spjllHgCcIwhb8uabITOxAJsQxrbp4bG
Aq3wmWYiUoNRY+9uXijKmLEAYVvBYJZvqQxSWKRFZPcQh5XXP8J884FVI+9mjtYV
nDaEKApKLZVsp5tOU6pfkDFb7JipLBTRI1cyG/vS/tndHhnVXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPd7JKCpds+prWDLaf+6b2aJXgoNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDk3Y2Y4OWItNGU3MS0z
OWZmLWFjMzktN2UyNzJiMjhkODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE31YmzU6rl2WSEdRGsRtL0Y+BsTRmN4C3Ti7LeI447FLzC7Lpknoum7
0lbGVG3MnOKIpRYtxwSyi+e3vYtLokQNqF1UnOoUJO0rI9LYDHB3lpwDbQZWqYZi
zglfY5aAPMFIdf7GEIvdoeS8Nhkm/dd0TFekpgd6tU0sq3Wj6rJEnerp4IgiXZ2q
Bv5ajwZU/mWZz09INL0BDUL/EOflJ6l9EA98Tz6rgwmU+NDHDQvw9R7YRw/URdwM
MUb2sNW9gJdHRlv2NZUVVmzeeBXnMoHluQcgE7dFk1gPeodtA1wfbnuagpSvNQJQ
g6ZipbiwbG8ktoF5Ol4lm4Eht0KgMfc=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:47:59 2026 by rpki-client