Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/36cb5d2c-2469-3a32-877c-bc1354906cdd.roa
File:                     36cb5d2c-2469-3a32-877c-bc1354906cdd.roa (raw, json)
Hash identifier:          oVD3+EeEz8qmjUhrOUVNVyqx8HSFzwZ1ys445nIp7H0=
Subject key identifier:   58:26:E6:C3:A4:85:A7:97:73:33:29:C6:F5:93:DA:35:A5:C3:A9:87
Certificate issuer:       /CN=83123792-cda3-4a51-83f1-391c845bc812
Certificate serial:       010D0C9F4328584EA788AC3F1D94AE2210590180
Authority key identifier: 60:48:6D:F4:76:69:54:C8:BA:5F:7F:64:AA:DF:7B:64:62:DD:47:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/36cb5d2c-2469-3a32-877c-bc1354906cdd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397914
IP address blocks:        170.117.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/83123792-cda3-4a51-83f1-391c845bc812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/83123792-cda3-4a51-83f1-391c845bc812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:ac:3f:1d:94:ae:22:10:59:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83123792-cda3-4a51-83f1-391c845bc812
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=58a6b86c-210a-4994-a381-a52fa26d6c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e5:34:f1:1d:31:6b:70:8f:fa:c8:b1:42:67:
                    ca:b0:8b:de:ee:9c:fd:c3:69:22:d2:96:d3:46:c5:
                    0b:4c:5f:23:1f:f7:d5:75:2d:f5:e1:45:88:76:81:
                    a0:6a:25:02:72:ae:f1:33:0b:40:02:b8:2f:e5:a1:
                    98:82:aa:51:1b:42:6e:18:8a:51:02:e9:f7:82:cf:
                    a0:02:59:4d:89:cd:d5:d4:f2:29:3d:05:dd:f7:e2:
                    e7:f8:4a:e4:00:4f:2f:a9:19:81:02:8c:c1:2c:81:
                    bc:11:57:c2:81:04:1e:a9:06:e0:b1:03:bb:9c:87:
                    95:33:22:df:d0:ff:61:62:01:3c:a7:3c:2a:26:11:
                    b7:96:12:e9:72:00:d3:36:ce:85:24:74:5b:0b:db:
                    48:11:da:69:63:f0:e2:f4:37:a3:de:c5:56:be:7f:
                    0f:ca:24:80:7b:60:1f:2b:ed:5c:f2:66:af:44:56:
                    ed:71:b8:5e:6d:8a:3f:0f:4f:04:ad:b7:42:56:a8:
                    8d:c4:c2:33:1c:6e:84:9c:ac:fe:5a:28:ae:e1:11:
                    29:25:3a:7c:63:5e:0d:41:4d:e4:a9:f4:d1:9e:db:
                    04:89:7c:f3:85:7e:9f:3b:8d:53:67:1e:04:19:94:
                    d7:81:ea:3c:3f:ac:95:6d:6a:62:dd:11:a1:b5:ec:
                    55:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:26:E6:C3:A4:85:A7:97:73:33:29:C6:F5:93:DA:35:A5:C3:A9:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/36cb5d2c-2469-3a32-877c-bc1354906cdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/83123792-cda3-4a51-83f1-391c845bc812.crl

            X509v3 Authority Key Identifier:
                keyid:60:48:6D:F4:76:69:54:C8:BA:5F:7F:64:AA:DF:7B:64:62:DD:47:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.117.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:61:43:48:ca:2d:0c:3e:30:5c:b7:7d:54:67:8a:9c:f7:0d:
         4b:c0:f0:da:8f:c4:e8:5f:98:1a:54:38:6f:da:9e:ff:63:28:
         b7:7f:43:cc:b8:2c:b4:06:5c:35:a2:f0:36:8f:34:6b:a3:cf:
         8f:cd:a8:4e:d6:1c:17:6f:d9:87:86:da:11:3e:86:85:fd:b2:
         9b:5b:b0:5a:02:8e:6d:30:43:b0:70:71:93:f5:ce:23:d7:d0:
         d3:e0:58:ba:00:27:5b:57:28:1c:22:63:83:b6:5d:de:a0:62:
         48:e5:e7:55:be:54:44:69:ac:1e:49:39:88:b1:5e:c6:3d:72:
         a1:e5:1d:1f:a1:9e:51:bb:46:32:e2:c3:94:0e:98:72:19:8a:
         b2:e6:73:f3:74:5e:b7:bb:3a:d1:91:2a:b4:f4:26:bb:b7:b5:
         f5:8d:1b:0a:e1:2f:83:8a:7a:0a:7b:a7:69:24:7c:80:95:91:
         d4:87:d7:08:b5:04:ec:21:e6:a4:66:9f:40:1b:59:52:ef:7e:
         c9:6e:62:1c:22:ef:c7:00:8e:b2:2c:6c:d7:48:65:d3:d2:76:
         b3:ca:a1:33:f1:d5:67:0d:f4:87:12:e4:7e:b3:29:da:5b:04:
         a3:59:3b:fc:9c:b0:ce:08:55:da:ec:f2:08:25:86:94:46:bc:
         21:ce:bc:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niKw/HZSuIhBZAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxMjM3OTItY2RhMy00YTUxLTgzZjEtMzkxYzg0NWJj
ODEyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NThhNmI4NmMtMjEwYS00OTk0LWEzODEtYTUyZmEyNmQ2YzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOU08R0xa3CP+sixQmfKsIve7pz9w2ki0pbT
RsULTF8jH/fVdS314UWIdoGgaiUCcq7xMwtAArgv5aGYgqpRG0JuGIpRAun3gs+g
AllNic3V1PIpPQXd9+Ln+ErkAE8vqRmBAozBLIG8EVfCgQQeqQbgsQO7nIeVMyLf
0P9hYgE8pzwqJhG3lhLpcgDTNs6FJHRbC9tIEdppY/Di9Dej3sVWvn8PyiSAe2Af
K+1c8mavRFbtcbhebYo/D08ErbdCVqiNxMIzHG6EnKz+Wiiu4REpJTp8Y14NQU3k
qfTRntsEiXzzhX6fO41TZx4EGZTXgeo8P6yVbWpi3RGhtexViQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFgm5sOkhaeXczMpxvWT2jWlw6mHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MzEy
Mzc5Mi1jZGEzLTRhNTEtODNmMS0zOTFjODQ1YmM4MTIvMzZjYjVkMmMtMjQ2OS0z
YTMyLTg3N2MtYmMxMzU0OTA2Y2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODMxMjM3OTItY2RhMy00YTUxLTgz
ZjEtMzkxYzg0NWJjODEyLzgzMTIzNzkyLWNkYTMtNGE1MS04M2YxLTM5MWM4NDVi
YzgxMi5jcmwwHwYDVR0jBBgwFoAUYEht9HZpVMi6X39kqt97ZGLdR7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MzEyMzc5Mi1jZGEzLTRhNTEtODNmMS0zOTFj
ODQ1YmM4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnXTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI9hQ0jKLQw+MFy3fVRnipz3DUvA8NqPxOhfmBpUOG/anv9jKLd/Q8y4
LLQGXDWi8DaPNGujz4/NqE7WHBdv2YeG2hE+hoX9sptbsFoCjm0wQ7BwcZP1ziPX
0NPgWLoAJ1tXKBwiY4O2Xd6gYkjl51W+VERprB5JOYixXsY9cqHlHR+hnlG7RjLi
w5QOmHIZirLmc/N0Xre7OtGRKrT0Jru3tfWNGwrhL4OKegp7p2kkfICVkdSH1wi1
BOwh5qRmn0AbWVLvfsluYhwi78cAjrIsbNdIZdPSdrPKoTPx1WcN9IcS5H6zKdpb
BKNZO/ycsM4IVdrs8gglhpRGvCHOvJc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:46:12 2026 by rpki-client