Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/9ac873db-60d0-37bc-99f7-886fc9158e10.roa
File:                     9ac873db-60d0-37bc-99f7-886fc9158e10.roa (raw, json)
Hash identifier:          XvVSvpyr4oTJm6GrFkqAqHsxK1KpCJ2I0WKVI5mviuI=
Subject key identifier:   78:63:DC:C6:4F:9F:29:10:FD:5B:ED:26:A8:87:FF:30:E0:1B:58:00
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584EC371BD2357E08D9F4C0AB51C
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/9ac873db-60d0-37bc-99f7-886fc9158e10.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     15169
IP address blocks:        136.146.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:bd:23:57:e0:8d:9f:4c:0a:b5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=4ba2fcab-451a-425c-b1c5-0af423403026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a4:ee:98:71:db:79:c6:f0:26:40:99:b4:45:
                    52:38:41:d1:14:8f:69:b9:8a:69:be:7b:34:54:5d:
                    82:3e:68:37:aa:97:3c:21:b9:24:68:24:c1:b6:17:
                    00:e8:8b:b3:03:cd:cb:22:d1:49:fb:b6:77:6b:44:
                    1b:09:6f:af:ca:50:8c:1d:6f:64:1a:c1:09:99:cb:
                    08:e9:03:f9:e4:5d:36:e9:10:38:ae:10:5f:4f:cc:
                    7b:17:cc:d7:bf:86:7b:f8:c5:83:61:57:9e:9f:79:
                    b8:1d:22:3c:e0:27:89:a8:9f:1c:63:48:c0:56:26:
                    90:95:56:50:86:44:d0:19:3d:8b:22:09:40:18:25:
                    47:cf:5f:ac:ac:e9:d6:03:a2:76:cc:87:bf:11:8b:
                    1c:a4:0b:e3:00:4e:56:85:f1:60:6e:ea:67:86:9c:
                    1b:e3:23:69:f1:14:e9:90:3c:8d:15:1a:a8:93:fe:
                    7e:16:fa:17:f9:c6:3d:60:65:5e:ef:44:62:98:34:
                    2b:81:55:a5:d0:7c:7f:5b:d4:f2:ee:a3:06:74:59:
                    ac:ca:79:61:71:02:14:54:85:77:9e:a8:04:46:ce:
                    4a:18:3a:0c:89:d8:db:b0:f8:f1:46:93:d1:6a:9b:
                    03:b3:7b:3f:25:0d:cd:e2:98:14:b8:01:9b:ee:d5:
                    76:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:63:DC:C6:4F:9F:29:10:FD:5B:ED:26:A8:87:FF:30:E0:1B:58:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/9ac873db-60d0-37bc-99f7-886fc9158e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.146.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:67:17:45:2b:4e:f0:15:46:21:1d:7f:5e:da:6d:bc:d2:5b:
         28:20:35:ad:e5:f5:92:c4:34:ad:01:3b:26:59:10:87:9d:18:
         ca:57:47:a0:18:ca:02:4b:b9:75:5c:da:59:b2:78:b9:22:24:
         c8:51:77:aa:b4:fd:90:58:df:c5:68:9f:ce:2d:25:5f:ce:b7:
         f4:a9:17:6d:92:65:f6:c7:d2:6d:8e:77:4d:63:e3:1f:98:b4:
         a7:62:6e:10:7a:af:12:b4:42:53:a7:41:65:07:47:2e:0e:e2:
         17:ec:e3:0f:6d:1d:a5:b9:17:f5:47:db:00:cd:b9:b4:fb:b9:
         4e:08:0c:f6:ff:71:c7:0c:4a:e7:ea:84:a3:42:50:d2:4f:f4:
         64:26:9f:bd:a0:28:7e:bc:1d:c6:14:d1:9a:b9:40:7a:db:ab:
         b4:7a:e7:60:52:37:4b:d1:d9:fc:e9:6b:e2:5f:6b:d6:fc:88:
         00:ab:53:ba:59:56:2c:bb:aa:93:57:6d:b9:b7:fe:b0:b9:a8:
         40:6b:30:26:6f:22:a8:9e:ef:ef:0b:68:27:70:88:f0:e3:46:
         1f:99:5a:ea:2e:8f:04:37:ab:47:f5:32:50:e3:91:60:36:a1:
         2d:4d:40:5a:f3:a8:31:69:f3:5d:28:62:ec:48:4f:42:71:ab:
         0f:70:5e:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dcb0jV+CNn0wKtRwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl
NTRmMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
NGJhMmZjYWItNDUxYS00MjVjLWIxYzUtMGFmNDIzNDAzMDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qTumHHbecbwJkCZtEVSOEHRFI9puYppvns0
VF2CPmg3qpc8IbkkaCTBthcA6IuzA83LItFJ+7Z3a0QbCW+vylCMHW9kGsEJmcsI
6QP55F026RA4rhBfT8x7F8zXv4Z7+MWDYVeen3m4HSI84CeJqJ8cY0jAViaQlVZQ
hkTQGT2LIglAGCVHz1+srOnWA6J2zIe/EYscpAvjAE5WhfFgbupnhpwb4yNp8RTp
kDyNFRqok/5+FvoX+cY9YGVe70RimDQrgVWl0Hx/W9Ty7qMGdFmsynlhcQIUVIV3
nqgERs5KGDoMidjbsPjxRpPRapsDs3s/JQ3N4pgUuAGb7tV2/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHhj3MZPnykQ/VvtJqiH/zDgG1gAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj
MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvOWFjODczZGItNjBkMC0z
N2JjLTk5ZjctODg2ZmM5MTU4ZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1
NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm
ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz
MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiJI0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJlnF0UrTvAVRiEdf17abbzSWyggNa3l9ZLENK0BOyZZEIedGMpXR6AY
ygJLuXVc2lmyeLkiJMhRd6q0/ZBY38Von84tJV/Ot/SpF22SZfbH0m2Od01j4x+Y
tKdibhB6rxK0QlOnQWUHRy4O4hfs4w9tHaW5F/VH2wDNubT7uU4IDPb/cccMSufq
hKNCUNJP9GQmn72gKH68HcYU0Zq5QHrbq7R652BSN0vR2fzpa+Jfa9b8iACrU7pZ
Viy7qpNXbbm3/rC5qEBrMCZvIqie7+8LaCdwiPDjRh+ZWuoujwQ3q0f1MlDjkWA2
oS1NQFrzqDFp810oYuxIT0Jxqw9wXqg=
-----END CERTIFICATE-----
Generated at Sun Aug 16 00:42:34 2026 by rpki-client