Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/22b15f53-85ad-329f-b602-c291a22fceb6.roa
File:                     22b15f53-85ad-329f-b602-c291a22fceb6.roa (raw, json)
Hash identifier:          MGi3jUFXs6hVipYFn77JSHi13xhnQGAsvA+wCZ31xrU=
Subject key identifier:   E0:50:43:77:AA:05:D2:9B:01:F3:67:27:8B:A7:E3:35:E6:88:2B:3E
Certificate issuer:       /CN=01586a37-c709-480e-ac0d-b07d855c615b
Certificate serial:       010D0C9F4328584F119CDE3841A687AECAB7E0C0
Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/22b15f53-85ad-329f-b602-c291a22fceb6.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     209043
IP address blocks:        138.128.135.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:de:38:41:a6:87:ae:ca:b7:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=73f1590a-7b04-43c0-9bc6-1fdd63c83cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:78:62:3c:7e:b2:d3:20:90:6f:51:98:12:
                    f3:3f:ae:4c:21:aa:31:e5:cf:5f:ff:11:a2:ab:29:
                    c8:7c:4d:c8:7b:44:d5:f6:84:45:62:37:9a:c3:b5:
                    ee:9a:40:4b:c1:f6:27:c2:77:f7:2b:bc:10:e4:b9:
                    c7:8a:32:63:6c:4b:87:f6:b6:58:c2:69:7d:53:3d:
                    8d:8c:e1:2b:97:14:51:36:75:01:c9:77:d3:56:ba:
                    1a:ee:a7:23:59:85:ef:4d:8c:95:e8:7d:97:bd:84:
                    11:68:e3:d1:07:31:e4:83:e1:5a:db:44:19:55:db:
                    af:24:28:79:5e:61:63:95:bc:ee:f7:c1:71:99:ab:
                    41:da:ed:e4:df:37:a3:cf:2a:58:31:94:12:c4:84:
                    c5:5c:d0:aa:e9:4b:74:d7:72:a9:80:0d:5b:01:41:
                    bb:8b:09:dc:e5:3e:b0:0f:8a:eb:51:26:24:25:56:
                    08:b9:ec:1e:48:57:76:66:22:9b:8b:97:81:83:ff:
                    2b:53:5b:9d:74:db:70:e2:0c:45:7a:2b:ba:7f:91:
                    fc:ab:3b:da:51:b3:6d:82:57:a4:ea:ae:54:43:d7:
                    47:f4:be:24:1c:77:b6:0e:11:c6:04:6f:b8:39:a1:
                    fe:94:a9:2f:55:4a:26:96:53:fd:f5:08:1a:37:24:
                    40:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:50:43:77:AA:05:D2:9B:01:F3:67:27:8B:A7:E3:35:E6:88:2B:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/22b15f53-85ad-329f-b602-c291a22fceb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl

            X509v3 Authority Key Identifier:
                keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.128.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b9:ec:a1:a7:5a:f7:20:68:d8:4e:91:fe:79:35:ef:e2:21:
         22:63:0d:1c:22:a1:94:4a:64:4e:56:6a:db:f6:3d:cd:39:69:
         e7:00:a3:da:63:32:08:8d:47:ab:b7:a7:44:9c:39:24:84:c7:
         a3:9f:fe:54:3e:bc:d9:bc:5d:92:f2:b0:93:83:c6:95:41:a4:
         f6:a2:54:cd:40:ff:70:a1:b9:6e:b9:53:fe:89:af:f5:4e:3b:
         4c:3f:27:3d:8c:53:c0:41:1a:a8:1e:f9:54:14:27:1c:e1:c6:
         1e:0c:5e:97:15:7d:bc:14:d7:f5:3b:af:85:94:d4:e4:cb:73:
         37:be:2a:d4:2e:92:4c:32:df:b8:ec:35:44:55:4e:b5:b3:37:
         15:43:78:58:c0:2f:49:e8:97:7a:74:7d:d8:97:52:41:6a:9c:
         0e:c8:61:17:1c:11:d1:56:17:e9:00:f0:09:e3:4e:89:46:98:
         da:c8:a1:2a:71:c4:10:c1:ac:28:d4:6d:94:b8:88:a8:a7:cd:
         5d:ac:ba:1f:55:a0:b9:f8:4d:75:ae:df:61:27:28:9e:66:ab:
         08:de:b9:ff:e4:7b:2c:b7:ca:85:90:1b:4f:e8:e7:e9:f5:c1:
         76:ae:5d:42:a6:ef:1e:bc:c1:41:5e:7d:35:eb:bc:14:97:43:
         53:6b:be:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnN44QaaHrsq34MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2
MTViMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzNmMTU5MGEtN2IwNC00M2MwLTliYzYtMWZkZDYzYzgzY2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1R4Yjx+stMgkG9RmBLzP65MIaox5c9f/xGi
qynIfE3Ie0TV9oRFYjeaw7XumkBLwfYnwnf3K7wQ5LnHijJjbEuH9rZYwml9Uz2N
jOErlxRRNnUByXfTVroa7qcjWYXvTYyV6H2XvYQRaOPRBzHkg+Fa20QZVduvJCh5
XmFjlbzu98FxmatB2u3k3zejzypYMZQSxITFXNCq6Ut013KpgA1bAUG7iwnc5T6w
D4rrUSYkJVYIueweSFd2ZiKbi5eBg/8rU1uddNtw4gxFeiu6f5H8qzvaUbNtglek
6q5UQ9dH9L4kHHe2DhHGBG+4OaH+lKkvVUomllP99QgaNyRA3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOBQQ3eqBdKbAfNnJ4un4zXmiCs+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4
NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvMjJiMTVmNTMtODVhZC0z
MjlmLWI2MDItYzI5MWEyMmZjZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj
MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj
NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk
ODU1YzYxNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioCHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAy57KGnWvcgaNhOkf55Ne/iISJjDRwioZRKZE5Watv2Pc05aecAo9pj
MgiNR6u3p0ScOSSEx6Of/lQ+vNm8XZLysJODxpVBpPaiVM1A/3ChuW65U/6Jr/VO
O0w/Jz2MU8BBGqge+VQUJxzhxh4MXpcVfbwU1/U7r4WU1OTLcze+KtQukkwy37js
NURVTrWzNxVDeFjAL0nol3p0fdiXUkFqnA7IYRccEdFWF+kA8AnjTolGmNrIoSpx
xBDBrCjUbZS4iKinzV2suh9VoLn4TXWu32EnKJ5mqwjeuf/keyy3yoWQG0/o5+n1
wXauXUKm7x68wUFefTXrvBSXQ1Nrvvc=
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:46:48 2026 by rpki-client