Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa
File:                     0a793ce5-2a13-3752-babb-d659187f1a1c.roa (raw, json)
Hash identifier:          dxjzKCcItU5Pgv0bdnFdl90/Gv9OSgPHMKyQOoHF1TM=
Subject key identifier:   B8:C4:E4:D8:02:FF:FB:47:94:73:EA:57:EA:45:5F:B6:7F:98:79:74
Certificate issuer:       /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial:       010D0C9F4328584F0D6CDBC838923552C04CE8C0
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        136.228.0.0/19 maxlen: 32
                          139.60.200.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:db:c8:38:92:35:52:c0:4c:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=5b4ad4d4-be0d-4c8f-accd-1ed296f5604c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:eb:74:89:d9:06:55:36:ab:3b:c6:98:12:39:
                    d7:68:56:a1:9b:d5:c3:8f:78:ba:bb:ed:d3:2c:6c:
                    fc:4c:f7:e9:85:06:3f:01:86:05:ba:3e:fb:c4:6e:
                    b3:fe:d0:32:49:b9:7b:ec:e0:8e:cb:7f:95:b6:f3:
                    16:1a:b7:fb:68:64:b9:e4:14:54:8c:cf:6f:f1:06:
                    6d:60:bf:86:ac:dd:ec:4e:4d:01:3d:98:65:2f:0d:
                    6d:58:e6:36:f4:fd:7d:f9:be:f0:5a:56:2c:f8:60:
                    9b:0e:3e:39:49:9b:32:b7:7a:7d:00:4d:7f:45:d2:
                    49:50:30:ef:f3:21:fa:b4:f2:83:eb:c6:aa:a1:d4:
                    05:37:f3:ab:b5:ba:dc:f2:3f:6e:ef:64:21:d6:ab:
                    69:24:ef:57:2a:19:ad:31:fb:fb:8e:80:c8:62:b4:
                    c3:d4:10:72:b2:07:c0:a6:4e:fd:9d:fc:d7:a8:c9:
                    c0:82:49:fc:cd:cf:cd:f5:04:ba:b3:0c:21:6c:41:
                    c2:b9:44:a9:72:13:00:86:f3:31:c7:db:38:02:29:
                    a2:ac:54:a1:a2:60:e4:2c:ec:9b:8e:be:d1:08:51:
                    26:57:91:5f:a5:65:07:59:0e:88:09:57:a6:dd:ff:
                    55:e4:86:ca:70:af:7e:49:1e:f7:c1:87:51:11:09:
                    55:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C4:E4:D8:02:FF:FB:47:94:73:EA:57:EA:45:5F:B6:7F:98:79:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.0.0/19
                  139.60.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:88:0f:fa:7d:5a:4a:3a:e6:94:5a:93:9d:5f:13:82:92:52:
         44:49:93:cf:5f:32:df:24:50:66:5c:f4:ab:de:22:29:72:ec:
         e1:5c:de:84:f8:aa:bf:d8:38:fd:ff:9b:dc:e1:af:2d:a6:b0:
         e7:23:96:b7:fa:59:8b:e2:37:e1:f1:5b:f4:ec:09:cf:d5:bc:
         16:e9:78:76:23:1a:f4:91:7b:95:35:60:96:a0:28:c7:93:19:
         24:a9:f9:1d:1d:41:80:60:47:2c:be:02:67:18:ce:06:01:ef:
         1b:46:9b:6b:22:c4:0e:b6:6f:3f:f6:40:8f:a1:88:bf:07:b6:
         4f:80:03:02:0d:c0:a6:d8:11:5b:64:3d:ae:4a:49:b3:4f:ee:
         2b:73:b2:bc:76:2c:45:6d:b4:75:dc:1c:08:18:d7:35:d2:10:
         83:80:7e:5c:d7:1f:91:1b:8a:e3:6d:7b:49:c7:46:34:ad:c7:
         f7:10:f8:ea:7e:34:a5:38:af:68:13:30:75:72:9b:06:98:bc:
         43:fb:d6:b0:30:20:9f:ca:7a:64:25:dc:21:dd:b4:d8:5a:0a:
         ff:d0:fd:c6:56:a3:c7:73:92:f5:58:35:b2:8d:50:de:b1:42:
         0a:e6:64:5c:7e:1f:08:bd:00:22:7a:fd:7f:8a:74:ac:b9:d1:
         08:01:07:32
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8NbNvIOJI1UsBM6MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm
NDdkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
NWI0YWQ0ZDQtYmUwZC00YzhmLWFjY2QtMWVkMjk2ZjU2MDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+t0idkGVTarO8aYEjnXaFahm9XDj3i6u+3T
LGz8TPfphQY/AYYFuj77xG6z/tAySbl77OCOy3+VtvMWGrf7aGS55BRUjM9v8QZt
YL+GrN3sTk0BPZhlLw1tWOY29P19+b7wWlYs+GCbDj45SZsyt3p9AE1/RdJJUDDv
8yH6tPKD68aqodQFN/Ortbrc8j9u72Qh1qtpJO9XKhmtMfv7joDIYrTD1BBysgfA
pk79nfzXqMnAgkn8zc/N9QS6swwhbEHCuUSpchMAhvMxx9s4AimirFShomDkLOyb
jr7RCFEmV5FfpWUHWQ6ICVem3f9V5IbKcK9+SR73wYdREQlVTwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLjE5NgC//tHlHPqV+pFX7Z/mHl0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh
NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvMGE3OTNjZTUtMmExMy0z
NzUyLWJhYmItZDY1OTE4N2YxYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk
MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5
ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5
MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD
izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAK+ID/p9Wko65pRak51fE4KSUkRJk89fMt8kUGZc9KveIily
7OFc3oT4qr/YOP3/m9zhry2msOcjlrf6WYviN+HxW/TsCc/VvBbpeHYjGvSRe5U1
YJagKMeTGSSp+R0dQYBgRyy+AmcYzgYB7xtGm2sixA62bz/2QI+hiL8Htk+AAwIN
wKbYEVtkPa5KSbNP7itzsrx2LEVttHXcHAgY1zXSEIOAflzXH5EbiuNte0nHRjSt
x/cQ+Op+NKU4r2gTMHVymwaYvEP71rAwIJ/KemQl3CHdtNhaCv/Q/cZWo8dzkvVY
NbKNUN6xQgrmZFx+Hwi9ACJ6/X+KdKy50QgBBzI=
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:41:05 2026 by rpki-client