Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/d33ccbb3-807d-3989-ad12-645534f47c21.roa
File:                     d33ccbb3-807d-3989-ad12-645534f47c21.roa (raw, json)
Hash identifier:          cW/mZNHuSqbOVNF+sSv7oaNWkH8fksHPgq8+o52gybg=
Subject key identifier:   5D:9B:75:41:14:81:0F:8A:1E:12:BF:17:DA:3D:C4:81:6E:BD:7B:B3
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584F49739EF3DD5D1A81112A1000
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/d33ccbb3-807d-3989-ad12-645534f47c21.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        136.184.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:9e:f3:dd:5d:1a:81:11:2a:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=03555e2c-2788-41b4-82d2-91795cfa69c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ca:60:f4:e7:2a:87:b4:00:3c:1b:69:20:a5:
                    f3:36:77:d3:15:45:f6:0b:67:3f:ca:ab:b0:3a:3e:
                    20:b0:25:36:c7:5d:89:88:df:30:51:09:54:7b:16:
                    4a:fd:7d:20:0a:fb:f8:92:0e:d5:15:68:dc:bc:06:
                    a4:a5:75:04:ba:c0:66:71:89:e2:fe:a8:3c:04:f7:
                    82:8a:49:c4:08:a7:1c:35:b2:87:d1:d3:b9:13:3e:
                    2a:09:8a:a1:bd:f5:5f:b5:4e:21:81:db:3a:12:64:
                    1f:db:46:ff:63:09:0f:1c:7a:16:4c:b8:3e:ec:76:
                    0d:30:a4:3a:9c:d6:55:99:2f:4a:fb:d1:84:03:18:
                    8c:74:fd:f5:ab:36:12:9e:1e:0a:38:9b:5d:f2:e5:
                    de:72:fc:b7:76:fb:76:bf:a4:ff:e0:58:e5:cc:4b:
                    ef:f1:17:d9:95:ac:99:97:80:c7:13:6d:fe:89:ea:
                    ea:96:d3:7e:4b:cb:f0:2a:63:fb:aa:55:ae:db:3f:
                    f4:5c:c3:bd:e5:e8:97:6f:ff:46:ab:55:48:af:09:
                    46:1e:49:b4:a8:7f:2f:b2:45:7e:37:aa:6e:15:ca:
                    3c:e4:a3:13:3e:0f:67:34:1e:06:0e:8d:49:50:83:
                    b7:2c:df:b6:79:1b:36:f6:1a:da:36:e6:3f:45:27:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9B:75:41:14:81:0F:8A:1E:12:BF:17:DA:3D:C4:81:6E:BD:7B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/d33ccbb3-807d-3989-ad12-645534f47c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c9:e6:1e:57:3d:c4:c4:c4:61:c6:7c:e1:55:bc:e1:32:04:
         bc:6e:c2:5c:c5:da:13:a7:e1:3e:d2:17:d6:40:ac:92:d6:db:
         81:32:56:21:ce:95:b1:a0:6c:0f:b6:97:78:71:bc:69:59:77:
         6e:06:e3:b4:bf:34:86:ef:bb:af:e8:1f:21:72:a7:cb:88:26:
         1f:43:a7:5d:f6:fc:e6:28:85:57:2c:4a:97:3e:d2:f1:a2:39:
         aa:55:02:7b:e9:8b:b4:c8:da:3b:69:08:b8:67:70:b9:49:32:
         7e:16:f0:21:29:3e:69:8e:1c:31:65:73:69:2f:d1:ed:77:ab:
         62:6b:c2:a9:ef:81:48:54:08:1f:9e:40:c0:bc:78:86:eb:85:
         ae:bb:da:cb:7a:82:20:2d:aa:da:6e:3a:6c:0b:96:a2:12:16:
         43:a0:9b:81:12:22:f6:2d:6f:e1:bb:7f:23:d6:4b:18:a1:d7:
         78:cd:4c:cf:5d:68:70:24:89:33:35:0d:4d:12:6b:cf:e9:df:
         a7:12:f8:43:26:ff:c8:14:b7:12:f2:7b:a6:c1:f1:bc:54:3c:
         d6:77:ad:a3:78:27:c7:5a:70:bb:87:59:48:4e:fe:94:4a:28:
         4e:25:3d:1d:d9:e1:4b:a8:68:62:52:a6:25:15:8c:b0:ae:85:
         b9:dd:de:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc57z3V0agREqEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzM3MDM1ZjAtZDVkMS00NWQwLWI2NDctN2EyM2Y5ZTNk
NTRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDM1NTVlMmMtMjc4OC00MWI0LTgyZDItOTE3OTVjZmE2OWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgspg9Ocqh7QAPBtpIKXzNnfTFUX2C2c/yquw
Oj4gsCU2x12JiN8wUQlUexZK/X0gCvv4kg7VFWjcvAakpXUEusBmcYni/qg8BPeC
iknECKccNbKH0dO5Ez4qCYqhvfVftU4hgds6EmQf20b/YwkPHHoWTLg+7HYNMKQ6
nNZVmS9K+9GEAxiMdP31qzYSnh4KOJtd8uXecvy3dvt2v6T/4FjlzEvv8RfZlayZ
l4DHE23+ierqltN+S8vwKmP7qlWu2z/0XMO95eiXb/9Gq1VIrwlGHkm0qH8vskV+
N6puFco85KMTPg9nNB4GDo1JUIO3LN+2eRs29hraNuY/RSfNHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2bdUEUgQ+KHhK/F9o9xIFuvXuzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcw
MzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIzZjllM2Q1NGMvZDMzY2NiYjMtODA3ZC0z
OTg5LWFkMTItNjQ1NTM0ZjQ3YzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzM3MDM1ZjAtZDVkMS00NWQwLWI2
NDctN2EyM2Y5ZTNkNTRjLzMzNzAzNWYwLWQ1ZDEtNDVkMC1iNjQ3LTdhMjNmOWUz
ZDU0Yy5jcmwwHwYDVR0jBBgwFoAUQxtL6ZGGkmChwHIkxJcDv+hKMW8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcwMzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIz
ZjllM2Q1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLjrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHrJ5h5XPcTExGHGfOFVvOEyBLxuwlzF2hOn4T7SF9ZArJLW24EyViHO
lbGgbA+2l3hxvGlZd24G47S/NIbvu6/oHyFyp8uIJh9Dp132/OYohVcsSpc+0vGi
OapVAnvpi7TI2jtpCLhncLlJMn4W8CEpPmmOHDFlc2kv0e13q2JrwqnvgUhUCB+e
QMC8eIbrha672st6giAtqtpuOmwLlqISFkOgm4ESIvYtb+G7fyPWSxih13jNTM9d
aHAkiTM1DU0Sa8/p36cS+EMm/8gUtxLye6bB8bxUPNZ3raN4J8dacLuHWUhO/pRK
KE4lPR3Z4UuoaGJSpiUVjLCuhbnd3mw=
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:07:54 2026 by rpki-client