Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/36f625bd-2f75-3d09-8ae3-662db7924431.roa
File:                     36f625bd-2f75-3d09-8ae3-662db7924431.roa (raw, json)
Hash identifier:          WHc0v3j7GF6pubyQuKYr67hpGtbS6/yQq8oJVJX8LTQ=
Subject key identifier:   09:66:D2:5E:A4:BE:F6:2E:8A:C2:95:9A:CB:3D:2C:52:ED:F1:30:EB
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584E296F1B5034562B8D69F02B90
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/36f625bd-2f75-3d09-8ae3-662db7924431.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     14555
IP address blocks:        198.23.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:1b:50:34:56:2b:8d:69:f0:2b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=acfa2442-c9d5-4c90-b077-137b8de0d5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:27:22:58:31:9e:e3:1f:20:5f:d1:ae:e3:
                    d5:85:fb:df:30:8b:ff:d5:75:a8:6b:d1:14:bd:0d:
                    9a:67:b2:d5:ef:58:0f:0c:7a:5f:68:61:5e:bc:92:
                    c6:80:77:6a:76:41:c7:0c:1a:3a:c7:bf:7d:24:d4:
                    33:52:7d:58:6a:61:7a:50:6c:c9:ba:46:0e:a1:ba:
                    3c:7b:54:85:fc:f7:c4:db:3e:c4:eb:fb:78:9e:f0:
                    23:40:83:1a:6a:75:32:52:20:7f:48:d8:aa:3e:e2:
                    5d:38:4a:05:e9:68:ac:ff:15:3c:23:f6:6c:fd:a9:
                    47:2d:bc:ed:dc:66:2e:47:91:ba:9c:49:22:c7:f8:
                    c6:59:ba:41:2c:89:be:cb:bd:b3:84:ed:90:8f:bf:
                    a9:d5:b3:ae:7a:92:6c:28:1d:4f:e5:6b:cb:f4:5a:
                    02:ce:57:6a:2c:9b:06:07:9a:77:9a:fc:4c:d5:e6:
                    c8:b4:54:91:6e:59:53:74:36:6d:77:48:0a:73:33:
                    11:90:24:f0:fe:2a:bc:a9:18:e9:b0:08:05:b9:e3:
                    a1:25:84:aa:6c:63:0c:c4:e9:ab:e4:09:87:02:b8:
                    2b:b2:dc:d8:94:66:0f:65:ea:e0:e6:cb:79:43:b1:
                    0e:ff:7c:cc:66:9d:dd:7a:f7:86:5e:e4:c1:ee:c9:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:66:D2:5E:A4:BE:F6:2E:8A:C2:95:9A:CB:3D:2C:52:ED:F1:30:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/36f625bd-2f75-3d09-8ae3-662db7924431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:ab:2f:03:d6:bd:9f:fc:ff:41:2d:c5:a0:2f:2b:c9:af:ee:
         c8:33:f2:40:ac:20:82:e9:e5:ac:15:e5:1b:cb:be:a0:fd:42:
         96:34:06:f8:70:82:c7:b1:41:5b:07:9e:7f:89:cd:c4:ce:44:
         bd:64:54:ab:dc:69:98:9a:12:b6:39:0a:e3:01:56:29:0b:69:
         2c:16:f5:7b:1a:2b:86:e5:9f:bd:73:ef:4d:79:60:a1:30:71:
         b2:ee:31:f4:78:d1:0d:6f:ef:87:02:f8:d4:68:c2:a0:06:e7:
         79:84:a7:37:8d:f3:d0:e3:63:47:4b:ad:20:c0:6a:59:8c:de:
         48:fc:94:cb:cb:99:b6:11:ce:16:02:a5:b9:29:b6:7c:dd:c5:
         5e:6b:06:d6:da:88:5a:5d:9f:f1:cc:0a:f5:ef:32:19:64:c8:
         a9:1c:1f:5c:a8:56:fc:27:eb:1a:db:e1:a9:df:b8:5e:69:79:
         7e:94:36:9f:51:08:33:a1:0d:78:a3:7e:6a:aa:f2:ef:d5:79:
         94:cc:b8:42:9d:c0:85:cb:81:bb:9b:e5:ba:d7:0b:d7:a5:ef:
         5d:85:e4:c0:4b:b8:17:34:f5:2a:00:f3:e1:ba:45:78:aa:8a:
         a5:c1:ce:e8:d1:43:1c:ef:94:43:c6:34:0d:84:34:4b:86:5c:
         0e:ba:03:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbxtQNFYrjWnwK5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh
OWM5MB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk
YWNmYTI0NDItYzlkNS00YzkwLWIwNzctMTM3YjhkZTBkNWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8knIlgxnuMfIF/RruPVhfvfMIv/1XWoa9EU
vQ2aZ7LV71gPDHpfaGFevJLGgHdqdkHHDBo6x799JNQzUn1YamF6UGzJukYOobo8
e1SF/PfE2z7E6/t4nvAjQIMaanUyUiB/SNiqPuJdOEoF6Wis/xU8I/Zs/alHLbzt
3GYuR5G6nEkix/jGWbpBLIm+y72zhO2Qj7+p1bOuepJsKB1P5WvL9FoCzldqLJsG
B5p3mvxM1ebItFSRbllTdDZtd0gKczMRkCTw/iq8qRjpsAgFueOhJYSqbGMMxOmr
5AmHArgrstzYlGYPZerg5st5Q7EO/3zMZp3deveGXuTB7slXFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAlm0l6kvvYuisKVmss9LFLt8TDrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0
MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvMzZmNjI1YmQtMmY3NS0z
ZDA5LThhZTMtNjYyZGI3OTI0NDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0
NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj
YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1
Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhc9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKirLwPWvZ/8/0EtxaAvK8mv7sgz8kCsIILp5awV5RvLvqD9QpY0Bvhw
gsexQVsHnn+JzcTORL1kVKvcaZiaErY5CuMBVikLaSwW9XsaK4bln71z7015YKEw
cbLuMfR40Q1v74cC+NRowqAG53mEpzeN89DjY0dLrSDAalmM3kj8lMvLmbYRzhYC
pbkptnzdxV5rBtbaiFpdn/HMCvXvMhlkyKkcH1yoVvwn6xrb4anfuF5peX6UNp9R
CDOhDXijfmqq8u/VeZTMuEKdwIXLgbub5brXC9el712F5MBLuBc09SoA8+G6RXiq
iqXBzujRQxzvlEPGNA2ENEuGXA66A7s=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:00:23 2026 by rpki-client