Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d6a7016e-3f10-3678-a66b-42aadce01514.roa
File:                     d6a7016e-3f10-3678-a66b-42aadce01514.roa (raw, json)
Hash identifier:          qBIcEe9rI5WsJFB/PSuoWiMWcHMLFERAmk06Ag77pW8=
Subject key identifier:   65:6E:E5:22:06:6E:43:9D:EE:82:8F:C9:7C:FB:A5:C5:53:3F:43:5F
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E296EF7BA3A44790C8D115180
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d6a7016e-3f10-3678-a66b-42aadce01514.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     62610
IP address blocks:        128.1.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6e:f7:ba:3a:44:79:0c:8d:11:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=a8b9bcaa-05e2-44c7-8cec-baa3aece69b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:fb:4c:bf:5c:85:ed:35:b6:fe:eb:74:ea:
                    eb:ca:5a:a8:28:d5:0e:16:62:f1:f4:1b:0b:0e:00:
                    28:1d:18:c9:48:ff:cf:65:76:17:65:04:74:9e:b2:
                    03:2c:fe:39:70:72:59:ba:b5:e8:88:30:e2:6c:33:
                    30:b9:49:7f:8b:9d:17:20:25:60:aa:74:a1:a3:25:
                    94:ca:fe:58:92:f6:1f:6c:8e:1f:be:d6:36:48:ed:
                    90:9b:f4:60:e4:5c:a0:7a:fc:2f:13:7b:30:3f:f2:
                    dc:31:a0:be:d4:bd:ca:0b:8e:bd:d1:cc:e4:91:23:
                    f6:e5:14:d9:47:8b:83:81:c5:82:dd:56:cf:9f:cc:
                    bc:39:13:b5:67:4e:32:4f:67:79:4d:15:72:03:ad:
                    d9:ec:15:a1:02:b1:38:77:c6:ee:f0:fb:5d:d5:42:
                    c9:5d:3e:ee:63:58:ad:67:22:76:6b:04:5f:46:ac:
                    0b:79:f8:3b:59:c5:e7:f6:d0:b9:fe:ae:1b:43:6c:
                    b8:dc:c6:09:3c:80:a4:48:49:10:dc:e3:2d:93:e9:
                    bf:93:c0:89:81:d0:01:ac:8a:48:16:be:97:42:48:
                    a4:32:91:4e:ee:8a:1e:a0:11:77:11:01:c7:66:0b:
                    d4:ee:55:5f:8c:00:83:84:64:69:00:84:0e:7d:cb:
                    14:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6E:E5:22:06:6E:43:9D:EE:82:8F:C9:7C:FB:A5:C5:53:3F:43:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d6a7016e-3f10-3678-a66b-42aadce01514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2f:43:01:66:20:1d:8a:b8:b4:d5:0b:23:3f:9e:60:63:39:
         65:23:b2:0c:59:7d:22:8a:d0:6f:4e:90:b0:09:56:89:67:60:
         b6:a7:61:be:9a:35:9e:90:81:89:45:ca:f5:d2:e8:c4:04:44:
         1e:e8:cb:0f:04:3f:13:c4:2b:ae:22:c0:b5:9d:d0:a7:94:c3:
         1c:01:56:48:67:8d:e2:a4:dd:c0:70:08:d8:f9:a5:f9:e6:30:
         50:c0:bc:5b:74:0d:4a:1f:ed:94:26:ef:8b:b0:67:38:54:af:
         ca:8c:19:73:db:a8:08:37:ce:47:17:f9:81:90:82:b8:eb:d3:
         79:61:5f:77:5c:6b:05:04:37:d8:c6:2a:71:28:23:ad:59:af:
         32:9d:8a:0a:71:0a:80:9b:df:7d:09:4d:05:22:59:20:7d:73:
         9b:ce:14:95:7f:92:ac:7c:fe:d2:81:8b:f4:68:f8:44:13:ed:
         38:a3:7a:9a:c0:9c:5e:78:2f:65:9f:3c:08:70:75:32:c8:39:
         bf:47:bf:63:89:7c:83:88:3a:15:73:64:cf:ce:8f:45:95:e8:
         d5:59:30:3d:fa:28:d8:ab:46:dd:6f:c5:60:0d:8a:02:31:b5:
         93:a3:38:1f:33:fd:ac:c4:60:e9:23:3d:bb:75:45:ba:cb:78:
         38:35:16:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbve6OkR5DI0RUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk
YThiOWJjYWEtMDVlMi00NGM3LThjZWMtYmFhM2FlY2U2OWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4D7TL9che01tv7rdOrrylqoKNUOFmLx9BsL
DgAoHRjJSP/PZXYXZQR0nrIDLP45cHJZurXoiDDibDMwuUl/i50XICVgqnShoyWU
yv5YkvYfbI4fvtY2SO2Qm/Rg5FygevwvE3swP/LcMaC+1L3KC4690czkkSP25RTZ
R4uDgcWC3VbPn8y8ORO1Z04yT2d5TRVyA63Z7BWhArE4d8bu8Ptd1ULJXT7uY1it
ZyJ2awRfRqwLefg7WcXn9tC5/q4bQ2y43MYJPICkSEkQ3OMtk+m/k8CJgdABrIpI
Fr6XQkikMpFO7ooeoBF3EQHHZgvU7lVfjACDhGRpAIQOfcsUPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGVu5SIGbkOd7oKPyXz7pcVTP0NfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZDZhNzAxNmUtM2YxMC0z
Njc4LWE2NmItNDJhYWRjZTAxNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgAGIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYvQwFmIB2KuLTVCyM/nmBjOWUjsgxZfSKK0G9OkLAJVolnYLanYb6a
NZ6QgYlFyvXS6MQERB7oyw8EPxPEK64iwLWd0KeUwxwBVkhnjeKk3cBwCNj5pfnm
MFDAvFt0DUof7ZQm74uwZzhUr8qMGXPbqAg3zkcX+YGQgrjr03lhX3dcawUEN9jG
KnEoI61ZrzKdigpxCoCb330JTQUiWSB9c5vOFJV/kqx8/tKBi/Ro+EQT7TijeprA
nF54L2WfPAhwdTLIOb9Hv2OJfIOIOhVzZM/Oj0WV6NVZMD36KNirRt1vxWANigIx
tZOjOB8z/azEYOkjPbt1RbrLeDg1FvI=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:49:33 2026 by rpki-client