Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d65c72b-124d-39eb-bff3-1c300b51b11a.roa
File:                     6d65c72b-124d-39eb-bff3-1c300b51b11a.roa (raw, json)
Hash identifier:          8qQKp9I7u/iqyRYxqWyGeUDfjhNK5X/8h7PInE/TBPM=
Subject key identifier:   39:B4:DB:17:35:3D:F7:D1:A5:00:87:25:78:C4:75:73:E4:2E:2D:E2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F331D1543ADA7013AFCD01D20
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d65c72b-124d-39eb-bff3-1c300b51b11a.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     212238
IP address blocks:        136.0.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:15:43:ad:a7:01:3a:fc:d0:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=f831f4ae-fbed-47e7-8182-2bcf574f4f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5e:30:cd:78:31:8b:6d:e4:57:b1:ad:2e:df:
                    2b:e5:e1:00:d5:12:3c:d3:18:82:4e:2f:36:d0:39:
                    35:86:03:24:30:b7:22:12:60:19:0b:b8:2c:fe:bc:
                    0f:74:43:3b:bf:67:90:c6:34:68:b0:ca:fd:08:8e:
                    98:65:01:f3:0d:2f:97:ce:c8:6e:73:01:4d:65:23:
                    ad:b6:e1:f4:47:89:d5:f8:3e:b9:58:27:3f:7e:18:
                    ed:12:66:93:4c:dc:6e:01:1d:c1:ce:96:ed:a0:0c:
                    e9:38:89:54:3c:ca:07:bf:5f:d7:bb:20:56:cf:6b:
                    b2:7f:44:7d:64:e2:52:57:af:85:82:d7:b2:81:0f:
                    54:f2:11:49:a4:3b:c6:92:4f:fc:35:ec:1d:82:42:
                    5c:8f:e6:0f:18:b9:fe:28:c1:fe:a7:10:9c:c4:59:
                    24:ee:a2:c3:31:25:bd:fa:fd:bd:f0:01:de:82:85:
                    d5:38:7f:ea:1a:31:f0:31:b1:1d:44:aa:f4:ca:5c:
                    5a:db:6e:da:70:d6:c3:bb:2e:ea:bf:a3:91:85:c3:
                    23:b5:2c:99:10:c6:5a:4b:28:98:13:0c:6f:fd:7c:
                    dd:04:74:00:8d:a7:9f:4e:88:e6:dd:8f:5a:1f:ba:
                    04:cb:fe:60:0d:f2:e4:65:94:78:aa:43:b1:5b:51:
                    47:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B4:DB:17:35:3D:F7:D1:A5:00:87:25:78:C4:75:73:E4:2E:2D:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d65c72b-124d-39eb-bff3-1c300b51b11a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a0:0f:2a:2d:fa:5f:1a:63:8b:d2:48:91:2f:4f:7f:35:e6:
         63:1e:ed:2d:c4:5b:0d:bd:09:ad:5c:1d:3a:f8:e5:24:72:16:
         e6:f9:ed:7c:36:45:76:12:54:a4:f7:b2:91:0c:18:a5:d0:60:
         21:c9:2d:8c:21:63:be:cd:22:e6:30:66:4e:b6:76:93:43:ce:
         75:b6:2c:7f:da:06:dc:8d:6c:5e:30:b6:ff:87:69:59:aa:35:
         3e:24:33:3e:ed:73:db:de:7c:91:e4:17:d7:18:99:7f:65:05:
         e2:54:be:44:b4:88:4c:9e:0e:43:96:26:15:97:53:41:2b:34:
         6a:9b:e1:71:ff:2c:b4:a7:28:67:74:d8:f6:fa:e3:a3:69:bb:
         d9:9e:24:e4:19:47:b5:81:dd:d1:7c:5b:81:8f:21:1c:c8:fc:
         80:1d:a7:01:f9:97:94:62:98:2e:3f:e2:23:1e:30:84:e0:1f:
         dd:fa:36:3e:6c:b0:dd:e3:1e:75:b2:b2:6c:12:2e:e1:2a:07:
         60:e7:3d:d4:13:d2:38:4f:94:0a:ec:d0:14:04:3e:41:85:9f:
         ad:76:d3:f9:b5:38:b9:b7:98:8f:6e:21:ae:e3:a6:a7:3f:91:
         7b:d2:93:b2:d9:0e:69:00:ba:76:0a:3f:4e:bd:8a:a8:81:a6:
         6d:68:f0:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHRVDracBOvzQHSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk
ZjgzMWY0YWUtZmJlZC00N2U3LTgxODItMmJjZjU3NGY0ZjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl14wzXgxi23kV7GtLt8r5eEA1RI80xiCTi82
0Dk1hgMkMLciEmAZC7gs/rwPdEM7v2eQxjRosMr9CI6YZQHzDS+XzshucwFNZSOt
tuH0R4nV+D65WCc/fhjtEmaTTNxuAR3BzpbtoAzpOIlUPMoHv1/XuyBWz2uyf0R9
ZOJSV6+FgteygQ9U8hFJpDvGkk/8NewdgkJcj+YPGLn+KMH+pxCcxFkk7qLDMSW9
+v298AHegoXVOH/qGjHwMbEdRKr0ylxa227acNbDuy7qv6ORhcMjtSyZEMZaSyiY
Ewxv/XzdBHQAjaefTojm3Y9aH7oEy/5gDfLkZZR4qkOxW1FHhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDm02xc1PffRpQCHJXjEdXPkLi3iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNmQ2NWM3MmItMTI0ZC0z
OWViLWJmZjMtMWMzMDBiNTFiMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAA8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISgDyot+l8aY4vSSJEvT3815mMe7S3EWw29Ca1cHTr45SRyFub57Xw2
RXYSVKT3spEMGKXQYCHJLYwhY77NIuYwZk62dpNDznW2LH/aBtyNbF4wtv+HaVmq
NT4kMz7tc9vefJHkF9cYmX9lBeJUvkS0iEyeDkOWJhWXU0ErNGqb4XH/LLSnKGd0
2Pb646Npu9meJOQZR7WB3dF8W4GPIRzI/IAdpwH5l5RimC4/4iMeMITgH936Nj5s
sN3jHnWysmwSLuEqB2DnPdQT0jhPlArs0BQEPkGFn6120/m1OLm3mI9uIa7jpqc/
kXvSk7LZDmkAunYKP069iqiBpm1o8Es=
-----END CERTIFICATE-----
Generated at Fri Sep 18 15:17:08 2026 by rpki-client