Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd50b9a1-48e5-35ec-9d07-b09a256081e0.roa
File:                     bd50b9a1-48e5-35ec-9d07-b09a256081e0.roa (raw, json)
Hash identifier:          pLBKnV7XRj+vOXnp+qmNI/HASSMcVdZifx0KHWBKXQU=
Subject key identifier:   BD:4C:7B:12:26:5A:B7:12:6A:1B:E8:FB:30:FA:5B:16:E5:6A:08:86
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F68281E588BAC29B57699F900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd50b9a1-48e5-35ec-9d07-b09a256081e0.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     11798
IP address blocks:        136.0.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:1e:58:8b:ac:29:b5:76:99:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=ea293403-3ca2-4f6a-9717-eb402a6fedeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:80:43:4a:6d:1a:99:3f:63:27:d4:ff:9c:
                    36:9e:61:18:29:6d:d2:a4:10:49:90:83:49:a0:b3:
                    2a:f7:6d:57:83:0b:fa:d2:e6:10:a3:a3:3a:59:0e:
                    be:b5:81:36:83:30:be:48:7c:5f:e7:ca:20:5e:99:
                    66:f0:2d:56:62:f2:1c:1c:2d:84:36:1c:f2:32:7f:
                    2e:02:48:9a:b6:6b:00:13:37:b9:34:2f:7c:9a:ab:
                    29:1e:2e:30:2d:8e:2f:de:06:0c:e4:1f:d9:f2:7c:
                    11:93:ad:1e:11:90:4e:c9:c0:01:a1:9a:e7:fb:ef:
                    ac:54:31:7e:92:39:f9:f7:5a:f3:cf:51:02:82:2a:
                    e3:01:f1:31:96:a0:81:71:78:d7:5e:ce:6e:6d:a9:
                    3b:bf:0a:da:46:a0:4f:ca:89:62:03:66:7c:e9:96:
                    e2:5e:af:31:94:06:c2:34:21:54:b1:6f:c5:b7:d8:
                    9f:97:b5:65:a5:c4:49:af:65:1f:40:80:ac:79:41:
                    c4:4c:ee:3e:58:6f:9a:56:cd:bd:a7:11:68:a9:95:
                    34:e6:d7:ad:18:00:28:91:0a:d7:73:a5:c4:52:c0:
                    14:96:22:70:c2:75:f0:b0:e4:24:51:12:c5:cc:02:
                    95:f9:31:56:21:0b:9d:99:aa:c1:f8:9c:5d:55:d4:
                    51:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4C:7B:12:26:5A:B7:12:6A:1B:E8:FB:30:FA:5B:16:E5:6A:08:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd50b9a1-48e5-35ec-9d07-b09a256081e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:73:b3:1a:7d:26:c0:17:32:ef:fe:75:c8:46:a9:12:1c:d3:
         68:7a:5e:cc:5e:2b:4e:0c:a3:4b:f2:24:24:32:b7:ff:06:31:
         12:02:9c:78:c2:5b:fd:51:44:1f:b0:6b:44:0d:17:50:2d:7d:
         ff:ac:c8:bb:ce:25:37:fd:ca:c3:85:0b:4d:b4:32:a5:23:e1:
         3f:4b:22:1a:0b:c3:64:34:56:fe:4c:0f:49:d3:26:13:40:fa:
         fb:94:80:9b:48:86:7e:a4:65:85:79:86:95:9e:9a:77:44:a5:
         e7:13:d0:b8:8a:03:e1:a4:64:11:23:6f:5a:9e:79:31:2e:5b:
         5f:41:b7:73:c9:da:e1:ff:e8:9e:8f:c9:9e:dc:5b:d9:ee:bd:
         1f:d9:6f:0a:13:c8:09:ed:a0:b9:7c:c2:6a:16:21:e3:76:46:
         c2:24:00:16:ac:1f:2f:8c:c3:7a:1d:71:0f:ed:f9:14:47:59:
         bf:2a:1a:56:08:12:4f:59:68:57:88:c0:3a:1f:c7:71:31:ed:
         0a:20:16:30:da:94:3e:51:6b:bf:83:55:49:a4:e3:a5:b0:7e:
         42:58:1b:c1:63:ea:5b:ef:d9:16:40:17:74:64:d1:22:34:19:
         db:6e:91:aa:52:61:8e:7c:a5:b2:ad:35:67:92:d4:47:0c:07:
         40:e3:a0:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKB5Yi6wptXaZ+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk
ZWEyOTM0MDMtM2NhMi00ZjZhLTk3MTctZWI0MDJhNmZlZGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknyAQ0ptGpk/YyfU/5w2nmEYKW3SpBBJkINJ
oLMq921Xgwv60uYQo6M6WQ6+tYE2gzC+SHxf58ogXplm8C1WYvIcHC2ENhzyMn8u
AkiatmsAEze5NC98mqspHi4wLY4v3gYM5B/Z8nwRk60eEZBOycABoZrn+++sVDF+
kjn591rzz1ECgirjAfExlqCBcXjXXs5ubak7vwraRqBPyoliA2Z86ZbiXq8xlAbC
NCFUsW/Ft9ifl7VlpcRJr2UfQICseUHETO4+WG+aVs29pxFoqZU05tetGAAokQrX
c6XEUsAUliJwwnXwsOQkURLFzAKV+TFWIQudmarB+JxdVdRRWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1MexImWrcSahvo+zD6WxblagiGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmQ1MGI5YTEtNDhlNS0z
NWVjLTlkMDctYjA5YTI1NjA4MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFzsxp9JsAXMu/+dchGqRIc02h6XsxeK04Mo0vyJCQyt/8GMRICnHjC
W/1RRB+wa0QNF1Atff+syLvOJTf9ysOFC020MqUj4T9LIhoLw2Q0Vv5MD0nTJhNA
+vuUgJtIhn6kZYV5hpWemndEpecT0LiKA+GkZBEjb1qeeTEuW19Bt3PJ2uH/6J6P
yZ7cW9nuvR/ZbwoTyAntoLl8wmoWIeN2RsIkABasHy+Mw3odcQ/t+RRHWb8qGlYI
Ek9ZaFeIwDofx3Ex7QogFjDalD5Ra7+DVUmk46WwfkJYG8Fj6lvv2RZAF3Rk0SI0
GdtukapSYY58pbKtNWeS1EcMB0DjoHo=
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:13:01 2026 by rpki-client