Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2fbb3c19-6d36-3042-b89a-234c94110989.roa
File:                     2fbb3c19-6d36-3042-b89a-234c94110989.roa (raw, json)
Hash identifier:          VwShNwGU2ulP1kskCrGO5gRwUBlZOIoD+7aRgOrx4+I=
Subject key identifier:   06:C8:51:FC:F1:07:F6:58:D4:A0:C7:3B:47:E2:87:C2:04:01:BA:E6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E564F7F73DFCDDDF5AEC72E80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2fbb3c19-6d36-3042-b89a-234c94110989.roa
Signing time:             Mon 29 Jun 2026 22:48:13 +0000
ROA not before:           Mon 29 Jun 2026 22:48:13 +0000
ROA not after:            Sun 27 Sep 2026 22:48:13 +0000
asID:                     812
IP address blocks:        136.0.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:4f:7f:73:df:cd:dd:f5:ae:c7:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 29 22:48:13 2026 GMT
            Not After : Sep 27 22:48:13 2026 GMT
        Subject: CN=ee4b5708-c297-4aa4-97dc-56c50666c4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9d:d2:2f:05:01:06:47:6f:cd:8e:1c:2e:73:
                    eb:fc:09:5b:d1:ef:2a:19:4e:1f:13:2b:2b:09:53:
                    e3:c0:c5:f7:f6:2d:99:11:15:94:aa:ae:8a:b2:bd:
                    67:41:4e:a3:a8:97:8f:36:37:59:d4:23:35:b6:30:
                    69:a6:4f:1d:75:1d:8e:c1:12:ad:45:18:ce:bb:d4:
                    8b:5e:2e:b5:86:c4:1c:54:12:c9:8e:40:e2:d2:a2:
                    34:15:c0:a1:4d:ef:58:98:d6:b8:4f:b1:e8:a7:13:
                    68:06:db:57:e1:81:3e:7d:ef:16:57:89:e2:a9:39:
                    ab:d1:c0:26:3c:09:e2:c4:e2:b5:6f:d5:e2:2a:7c:
                    62:71:88:2c:26:34:70:04:40:ec:55:27:30:ae:34:
                    d5:7d:9d:5c:a8:dc:d8:75:ca:5c:6f:ae:f7:0d:02:
                    42:b2:41:73:0e:67:4e:40:eb:f1:c6:59:78:e7:4e:
                    c6:70:fe:c7:59:39:a9:e0:ab:a6:b1:54:23:c6:1a:
                    8a:d8:85:41:5f:f4:44:37:88:b0:15:4f:4e:23:dd:
                    a2:17:20:1d:5e:85:fc:e8:a4:49:cd:b4:0d:ba:19:
                    18:e4:71:20:03:bc:4a:d9:83:91:f8:1c:f6:5e:25:
                    f0:51:6d:9b:91:7a:91:96:1e:75:97:d4:ea:c0:28:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C8:51:FC:F1:07:F6:58:D4:A0:C7:3B:47:E2:87:C2:04:01:BA:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2fbb3c19-6d36-3042-b89a-234c94110989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:9b:ca:db:75:c8:5d:fb:0f:33:3a:20:c3:be:8f:2b:d2:99:
         22:97:49:cc:98:fd:1c:2b:c9:47:f5:4c:0d:80:88:05:24:40:
         97:d7:5c:96:00:17:f5:0f:94:2e:dd:6d:cb:ad:00:cb:51:24:
         a3:ad:c5:fa:ba:42:01:0d:48:a7:30:4a:29:c2:5f:6d:1a:3c:
         3f:d0:4e:9e:f8:bf:70:8c:2c:fd:51:b1:2b:51:ca:fe:b8:d7:
         a8:d5:85:87:6e:30:74:7a:7d:6e:89:43:fe:45:69:35:14:82:
         92:af:a9:a7:75:23:41:60:21:bd:a6:a2:ba:98:34:e7:74:6f:
         fe:8e:a3:08:c9:e1:38:ec:7e:8a:f4:a9:95:fb:68:a0:a2:73:
         42:67:12:37:46:82:de:54:ed:ab:cb:74:1e:f5:89:e0:a3:ff:
         01:f3:dd:35:6d:ee:2e:83:d1:ff:e4:00:19:47:b0:15:09:10:
         52:50:95:76:86:78:1c:79:53:e0:32:1e:63:be:32:d9:56:51:
         85:ba:54:72:2a:cc:3d:58:7f:bc:0f:fa:7c:a9:7e:af:c8:bc:
         86:ae:86:77:c6:25:fb:c7:86:f4:35:00:d2:7e:d7:b6:aa:f5:
         7f:4c:7e:1a:b2:a5:a3:91:79:22:71:e5:99:b7:d7:08:b2:68:
         27:1f:c4:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WT39z383d9a7HLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDYyOTIyNDgxM1oXDTI2MDkyNzIyNDgxM1owLzEtMCsGA1UEAxMk
ZWU0YjU3MDgtYzI5Ny00YWE0LTk3ZGMtNTZjNTA2NjZjNGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ3SLwUBBkdvzY4cLnPr/Alb0e8qGU4fEysr
CVPjwMX39i2ZERWUqq6Ksr1nQU6jqJePNjdZ1CM1tjBppk8ddR2OwRKtRRjOu9SL
Xi61hsQcVBLJjkDi0qI0FcChTe9YmNa4T7HopxNoBttX4YE+fe8WV4niqTmr0cAm
PAnixOK1b9XiKnxicYgsJjRwBEDsVScwrjTVfZ1cqNzYdcpcb673DQJCskFzDmdO
QOvxxll4507GcP7HWTmp4KumsVQjxhqK2IVBX/REN4iwFU9OI92iFyAdXoX86KRJ
zbQNuhkY5HEgA7xK2YOR+Bz2XiXwUW2bkXqRlh51l9TqwChQsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbIUfzxB/ZY1KDHO0fih8IEAbrmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmZiYjNjMTktNmQzNi0z
MDQyLWI4OWEtMjM0Yzk0MTEwOTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJabytt1yF37DzM6IMO+jyvSmSKXScyY/RwryUf1TA2AiAUkQJfXXJYA
F/UPlC7dbcutAMtRJKOtxfq6QgENSKcwSinCX20aPD/QTp74v3CMLP1RsStRyv64
16jVhYduMHR6fW6JQ/5FaTUUgpKvqad1I0FgIb2morqYNOd0b/6OowjJ4Tjsfor0
qZX7aKCic0JnEjdGgt5U7avLdB71ieCj/wHz3TVt7i6D0f/kABlHsBUJEFJQlXaG
eBx5U+AyHmO+MtlWUYW6VHIqzD1Yf7wP+nypfq/IvIauhnfGJfvHhvQ1ANJ+17aq
9X9MfhqypaOReSJx5Zm31wiyaCcfxP0=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:33:05 2026 by rpki-client