Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/79cc570e-a3e0-4e8b-b090-8cf98b3fca32/b3ca600a-f931-388c-b9b6-659251e46105.roa
File:                     b3ca600a-f931-388c-b9b6-659251e46105.roa (raw, json)
Hash identifier:          jF+z4XjVZFH5/6ig3HkTGSKGLbNQxoT/samHZX4V0AU=
Subject key identifier:   4F:DC:75:04:C7:80:A1:75:FA:A3:F0:78:D5:CA:57:B2:D1:2D:67:DE
Certificate issuer:       /CN=79cc570e-a3e0-4e8b-b090-8cf98b3fca32
Certificate serial:       010D0C9F4328584F80334423F65D4061FA847E40
Authority key identifier: 36:3E:8B:CB:59:07:84:2D:64:58:9E:49:DA:9D:1B:19:20:1B:6A:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/79cc570e-a3e0-4e8b-b090-8cf98b3fca32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/79cc570e-a3e0-4e8b-b090-8cf98b3fca32/b3ca600a-f931-388c-b9b6-659251e46105.roa
Signing time:             Wed 14 Oct 2026 15:42:13 +0000
ROA not before:           Wed 14 Oct 2026 15:42:13 +0000
ROA not after:            Tue 12 Jan 2027 16:42:13 +0000
asID:                     43009
IP address blocks:        136.176.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/79cc570e-a3e0-4e8b-b090-8cf98b3fca32/79cc570e-a3e0-4e8b-b090-8cf98b3fca32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/79cc570e-a3e0-4e8b-b090-8cf98b3fca32/79cc570e-a3e0-4e8b-b090-8cf98b3fca32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/79cc570e-a3e0-4e8b-b090-8cf98b3fca32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:80:33:44:23:f6:5d:40:61:fa:84:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc570e-a3e0-4e8b-b090-8cf98b3fca32
        Validity
            Not Before: Oct 14 15:42:13 2026 GMT
            Not After : Jan 12 16:42:13 2027 GMT
        Subject: CN=864133d1-9b36-4647-b3b0-5c95561f6579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:68:23:82:47:96:41:e0:29:83:1d:ba:9b:9c:
                    98:c1:05:47:3d:11:e0:08:62:45:63:46:83:13:cf:
                    f4:d7:e1:3e:58:57:b9:a5:fd:4e:ed:97:e8:fd:5d:
                    76:ed:65:d9:3f:5d:5b:60:55:b9:bf:bb:80:93:07:
                    fb:9e:b2:74:e2:30:6e:b8:8b:43:2c:79:4c:99:7a:
                    cd:b3:1f:9b:e4:d0:e7:4e:1d:72:2a:eb:9b:3e:7a:
                    51:3d:55:f9:fb:16:f4:3b:65:0d:0a:ad:45:cc:cc:
                    bd:7b:3c:bb:87:5a:aa:7e:be:47:76:8e:7c:ce:9b:
                    8b:7e:55:1d:0a:22:c5:cc:d5:f3:e9:97:86:ac:7c:
                    8f:6b:89:2e:6f:61:ec:50:dd:ae:4e:0a:b4:fe:0a:
                    13:a7:c7:62:ce:3c:8c:d8:6f:12:53:6b:4d:c9:0c:
                    bc:36:d7:4c:b0:f7:62:8a:62:94:a8:57:d3:0b:84:
                    37:cf:78:55:76:3f:39:2e:2b:ca:2a:32:95:c2:61:
                    7f:e7:ca:25:ad:9d:f6:d7:8c:20:8c:93:79:5d:ac:
                    01:ff:96:fb:0a:8a:19:eb:c5:41:c3:ab:8a:cf:1d:
                    f8:fd:cb:2f:dd:50:0c:e7:72:b6:8e:44:1d:54:48:
                    c2:29:a2:78:46:4e:a5:19:80:5c:86:8a:6a:86:6f:
                    7a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DC:75:04:C7:80:A1:75:FA:A3:F0:78:D5:CA:57:B2:D1:2D:67:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/79cc570e-a3e0-4e8b-b090-8cf98b3fca32/b3ca600a-f931-388c-b9b6-659251e46105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/79cc570e-a3e0-4e8b-b090-8cf98b3fca32/79cc570e-a3e0-4e8b-b090-8cf98b3fca32.crl

            X509v3 Authority Key Identifier:
                keyid:36:3E:8B:CB:59:07:84:2D:64:58:9E:49:DA:9D:1B:19:20:1B:6A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/79cc570e-a3e0-4e8b-b090-8cf98b3fca32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.176.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:4d:24:a2:12:fd:25:76:64:01:cb:bc:82:00:5e:34:f4:
         bf:1d:b2:0b:85:db:7b:03:0b:26:df:71:eb:e7:97:c8:d3:00:
         38:45:cf:df:9a:9e:2c:e2:70:2a:40:f7:38:cd:5b:10:f1:25:
         73:45:9f:8e:67:c5:5b:d9:61:02:e2:cf:c1:da:1a:f2:a9:ad:
         4c:bf:3f:50:02:30:ba:d0:4d:7c:c5:ee:ac:7d:3e:40:f0:39:
         26:dd:33:f2:6f:93:97:61:11:f0:fd:ba:48:5b:88:8e:ac:eb:
         c2:21:2c:17:1c:59:4a:06:bb:12:50:f5:5d:0f:b8:91:09:dd:
         ce:2f:a5:5f:43:17:0e:45:f5:97:79:45:dd:f0:fc:d7:16:ac:
         7b:aa:d7:ed:b7:02:8a:66:95:cb:4c:c9:b1:6a:57:be:28:6b:
         10:87:f0:98:5a:fa:49:f0:17:d5:0e:35:0e:2f:cf:41:b9:9d:
         a0:ca:da:82:a6:42:df:c9:21:55:14:b1:b6:fc:9a:17:9c:27:
         da:9b:f8:08:94:45:26:26:21:cd:6f:05:cb:16:0c:5a:f5:b6:
         ce:18:c5:cb:8b:7f:72:0b:98:97:1c:2b:b7:54:cd:94:3d:c2:
         f1:a7:6a:ae:91:bb:36:96:60:4c:39:81:d9:89:87:fc:e1:23:
         d8:4f:86:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+AM0Qj9l1AYfqEfkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzljYzU3MGUtYTNlMC00ZThiLWIwOTAtOGNmOThiM2Zj
YTMyMB4XDTI2MTAxNDE1NDIxM1oXDTI3MDExMjE2NDIxM1owLzEtMCsGA1UEAxMk
ODY0MTMzZDEtOWIzNi00NjQ3LWIzYjAtNWM5NTU2MWY2NTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2gjgkeWQeApgx26m5yYwQVHPRHgCGJFY0aD
E8/01+E+WFe5pf1O7Zfo/V127WXZP11bYFW5v7uAkwf7nrJ04jBuuItDLHlMmXrN
sx+b5NDnTh1yKuubPnpRPVX5+xb0O2UNCq1FzMy9ezy7h1qqfr5Hdo58zpuLflUd
CiLFzNXz6ZeGrHyPa4kub2HsUN2uTgq0/goTp8dizjyM2G8SU2tNyQy8NtdMsPdi
imKUqFfTC4Q3z3hVdj85LivKKjKVwmF/58olrZ3214wgjJN5XawB/5b7CooZ68VB
w6uKzx34/csv3VAM53K2jkQdVEjCKaJ4Rk6lGYBchopqhm96lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/cdQTHgKF1+qPweNXKV7LRLWfeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83OWNj
NTcwZS1hM2UwLTRlOGItYjA5MC04Y2Y5OGIzZmNhMzIvYjNjYTYwMGEtZjkzMS0z
ODhjLWI5YjYtNjU5MjUxZTQ2MTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNzljYzU3MGUtYTNlMC00ZThiLWIw
OTAtOGNmOThiM2ZjYTMyLzc5Y2M1NzBlLWEzZTAtNGU4Yi1iMDkwLThjZjk4YjNm
Y2EzMi5jcmwwHwYDVR0jBBgwFoAUNj6Ly1kHhC1kWJ5J2p0bGSAbagowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS83OWNjNTcwZS1hM2UwLTRlOGItYjA5MC04Y2Y5
OGIzZmNhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiLCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXBTSSiEv0ldmQBy7yCAF409L8dsguF23sDCybfcevnl8jTADhFz9+a
nizicCpA9zjNWxDxJXNFn45nxVvZYQLiz8HaGvKprUy/P1ACMLrQTXzF7qx9PkDw
OSbdM/Jvk5dhEfD9ukhbiI6s68IhLBccWUoGuxJQ9V0PuJEJ3c4vpV9DFw5F9Zd5
Rd3w/NcWrHuq1+23AopmlctMybFqV74oaxCH8Jha+knwF9UONQ4vz0G5naDK2oKm
Qt/JIVUUsbb8mhecJ9qb+AiURSYmIc1vBcsWDFr1ts4YxcuLf3ILmJccK7dUzZQ9
wvGnaq6RuzaWYEw5gdmJh/zhI9hPhjY=
-----END CERTIFICATE-----
Generated at Wed Nov 4 16:43:31 2026 by rpki-client