Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb2278d3-4413-31df-9a2c-dbb12196d346.roa
File:                     eb2278d3-4413-31df-9a2c-dbb12196d346.roa (raw, json)
Hash identifier:          vdb0Ab+4oj/hp8lpFQ8zZ/dRrLKx2B/jAPeID6pSKcU=
Subject key identifier:   6F:65:1B:4E:D4:80:ED:DF:A0:56:C7:81:A9:FA:A1:B4:1D:CE:3F:E3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E210F72A81AC67DFFC59FF160
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb2278d3-4413-31df-9a2c-dbb12196d346.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     6939
IP address blocks:        136.0.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:72:a8:1a:c6:7d:ff:c5:9f:f1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=bf64357d-c7b4-4524-bd11-9825422438a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7b:df:74:e3:9f:27:3c:99:c6:e0:20:4e:bd:
                    4a:58:af:1e:0c:6d:08:11:17:7d:ac:11:f2:3a:9b:
                    8f:b0:d8:13:56:8d:77:f0:65:18:eb:5e:a4:c9:a3:
                    21:2e:04:48:62:7d:74:c4:b3:73:8d:a4:c9:94:0a:
                    05:e6:63:c7:81:35:1f:90:6c:fd:d2:75:11:a4:32:
                    68:04:b7:b1:46:47:b6:65:ad:77:8a:94:46:46:93:
                    94:47:40:8f:3f:c3:ad:a3:11:be:cc:f6:73:c6:da:
                    16:46:8d:18:b9:f3:ff:bf:b6:62:55:80:d8:d9:1f:
                    eb:df:bd:7a:79:63:fc:b5:0e:29:82:63:3b:80:20:
                    c2:16:e3:9f:b1:ba:5d:97:ac:27:17:54:62:21:e2:
                    9b:13:18:c0:02:48:55:e2:24:d6:50:b7:1a:05:a5:
                    e6:ab:ad:c2:2d:77:cf:71:d8:fd:98:4b:e8:14:5f:
                    05:de:2b:ca:19:8b:c0:76:68:08:6b:c1:32:8e:f1:
                    ba:d3:65:65:b7:50:50:36:6f:92:89:7d:19:a7:55:
                    8f:de:d0:f4:0d:d6:04:65:a1:03:f3:1a:a4:bf:d5:
                    e9:a0:0f:1f:98:ce:dc:d5:21:83:f7:a0:60:70:d4:
                    e6:0e:3c:e0:c1:2c:7e:b0:32:95:aa:ca:09:e7:53:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:65:1B:4E:D4:80:ED:DF:A0:56:C7:81:A9:FA:A1:B4:1D:CE:3F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb2278d3-4413-31df-9a2c-dbb12196d346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b5:8a:e2:65:55:58:62:4c:b7:93:91:2d:c2:ae:ee:75:da:
         18:c0:dc:13:9b:90:1c:e1:6e:55:fb:40:d2:04:f2:e9:f4:0e:
         31:69:81:02:03:8d:5d:e8:12:30:04:7a:f6:4d:76:dc:8e:39:
         9d:d2:4e:c4:39:5b:a5:8e:84:b4:ce:a3:dd:1b:f8:0e:93:15:
         c6:0f:e0:f9:02:74:6d:35:e8:04:7c:28:74:e2:7a:43:01:31:
         d8:b4:d0:78:df:cc:4b:94:9a:8a:ea:67:38:a9:49:32:de:72:
         0a:8f:27:c6:fd:c5:7d:d4:d6:0b:ec:26:ee:0f:c9:ae:1c:d6:
         af:4f:6c:ae:8a:1d:43:b3:b7:aa:f5:94:db:76:67:a0:19:1b:
         ac:a0:be:5b:34:38:c7:8e:d1:2d:d6:2d:d0:ba:18:f3:ef:51:
         01:bf:16:c8:f5:5d:29:fe:3b:d5:51:8b:c0:90:22:be:02:bb:
         8d:8d:ca:c7:f9:79:6f:48:41:8b:5e:24:60:7e:fe:00:70:38:
         53:9b:74:2e:cd:00:1b:f7:5d:91:fa:f0:27:43:1c:53:5c:76:
         14:0a:44:5a:3c:e6:4c:90:b4:94:9f:b6:9b:e2:82:84:d4:6c:
         e6:a5:5b:96:98:1a:37:ce:33:a5:5d:15:94:6f:1c:69:d1:fa:
         43:95:a7:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hD3KoGsZ9/8Wf8WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
YmY2NDM1N2QtYzdiNC00NTI0LWJkMTEtOTgyNTQyMjQzOGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HvfdOOfJzyZxuAgTr1KWK8eDG0IERd9rBHy
OpuPsNgTVo138GUY616kyaMhLgRIYn10xLNzjaTJlAoF5mPHgTUfkGz90nURpDJo
BLexRke2Za13ipRGRpOUR0CPP8OtoxG+zPZzxtoWRo0YufP/v7ZiVYDY2R/r3716
eWP8tQ4pgmM7gCDCFuOfsbpdl6wnF1RiIeKbExjAAkhV4iTWULcaBaXmq63CLXfP
cdj9mEvoFF8F3ivKGYvAdmgIa8EyjvG602Vlt1BQNm+SiX0Zp1WP3tD0DdYEZaED
8xqkv9XpoA8fmM7c1SGD96BgcNTmDjzgwSx+sDKVqsoJ51NTKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG9lG07UgO3foFbHgan6obQdzj/jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWIyMjc4ZDMtNDQxMy0z
MWRmLTlhMmMtZGJiMTIxOTZkMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFy1iuJlVVhiTLeTkS3Cru512hjA3BObkBzhblX7QNIE8un0DjFpgQID
jV3oEjAEevZNdtyOOZ3STsQ5W6WOhLTOo90b+A6TFcYP4PkCdG016AR8KHTiekMB
Mdi00HjfzEuUmorqZzipSTLecgqPJ8b9xX3U1gvsJu4Pya4c1q9PbK6KHUOzt6r1
lNt2Z6AZG6ygvls0OMeO0S3WLdC6GPPvUQG/Fsj1XSn+O9VRi8CQIr4Cu42Nysf5
eW9IQYteJGB+/gBwOFObdC7NABv3XZH68CdDHFNcdhQKRFo85kyQtJSftpvigoTU
bOalW5aYGjfOM6VdFZRvHGnR+kOVp8M=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:42:55 2026 by rpki-client