Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/36eb8bdb-fc28-3030-8aa5-8961aa4b98c0.roa
File:                     36eb8bdb-fc28-3030-8aa5-8961aa4b98c0.roa (raw, json)
Hash identifier:          s3Bunpj09Le30YxgMLYjSTUWKwCufoGxE+L2bh5K9FQ=
Subject key identifier:   4E:F8:02:D3:43:7D:65:57:DE:01:7C:BA:B9:12:C8:9B:08:2F:D1:EB
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F4328584D25F85810E769830A3CA73B40
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/36eb8bdb-fc28-3030-8aa5-8961aa4b98c0.roa
Signing time:             Thu 12 Mar 2026 22:26:52 +0000
ROA not before:           Thu 12 Mar 2026 22:26:52 +0000
ROA not after:            Wed 10 Jun 2026 22:26:52 +0000
asID:                     21713
IP address blocks:        168.182.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:f8:58:10:e7:69:83:0a:3c:a7:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: Mar 12 22:26:52 2026 GMT
            Not After : Jun 10 22:26:52 2026 GMT
        Subject: CN=48469023-d6f4-46ee-bfc1-ead10ef14fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8d:22:a3:7d:f0:39:d2:99:b6:03:fa:43:83:
                    33:88:34:b1:99:41:a5:26:ab:72:56:43:3c:e3:96:
                    09:48:fb:b3:ef:a1:87:51:a8:34:e7:7f:26:07:65:
                    15:f8:21:95:a9:04:56:d6:f1:f8:ae:e0:d5:39:bb:
                    1f:e2:fe:dd:b2:e0:77:c1:eb:0a:ee:98:6c:58:aa:
                    10:22:58:f3:81:ba:de:47:97:87:ac:70:ec:d7:8b:
                    76:e4:b0:90:26:f2:0f:06:fc:06:11:69:b1:73:0d:
                    7f:ec:54:ac:2a:8c:43:aa:c6:dd:00:48:1f:c2:f6:
                    3a:01:47:e5:21:5b:11:2b:03:3d:fa:56:6f:e8:9e:
                    ad:f3:2d:48:60:a3:ee:0e:9e:38:03:ff:f5:3f:5b:
                    3d:66:87:a7:6f:7d:bd:be:21:ed:1c:d4:d4:22:3c:
                    f5:f4:ca:76:54:5c:c0:f6:67:51:db:7a:87:77:b2:
                    65:d0:b5:6e:68:d9:16:f4:08:87:cd:b6:1e:e8:bd:
                    85:57:7f:fe:2b:08:c0:0e:43:87:c6:22:51:ca:cd:
                    6b:d2:3a:cd:5a:31:60:b1:4d:db:26:61:de:12:be:
                    f1:18:3c:8f:c6:17:1c:22:47:eb:23:d0:f2:58:55:
                    88:e4:65:fa:56:6c:17:f5:4d:b0:ea:ac:95:0c:9b:
                    51:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F8:02:D3:43:7D:65:57:DE:01:7C:BA:B9:12:C8:9B:08:2F:D1:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/36eb8bdb-fc28-3030-8aa5-8961aa4b98c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.182.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4a:e9:5b:c7:3f:0e:5c:28:cf:74:ba:f3:1c:d2:b4:14:99:
         3f:1e:bb:e8:a2:9b:9c:a9:03:05:42:dd:27:3c:d5:29:8b:50:
         d4:96:05:aa:05:18:36:01:0e:3e:cb:c8:48:1a:65:80:e2:84:
         63:45:54:8f:c7:e2:69:55:1a:2b:5d:b5:73:1f:ad:e8:27:dc:
         44:21:fa:3e:ca:9f:fc:4d:4e:fb:68:08:db:61:29:15:23:a8:
         c2:1d:49:89:a4:bd:aa:15:52:70:34:2e:94:81:02:60:0a:2c:
         bb:6d:46:3f:83:f5:c8:8f:ef:04:82:d5:33:5a:10:aa:01:a3:
         70:26:89:8b:5b:56:16:a3:60:a1:59:79:82:df:ec:49:78:cf:
         0f:14:60:08:37:6e:a5:1a:09:71:cc:cd:2e:8a:87:58:99:7e:
         66:17:0d:cb:57:ea:f2:32:b7:98:3b:2d:1f:33:09:04:65:f8:
         07:fe:04:96:0d:3b:97:09:43:ab:d6:72:92:71:4b:dc:90:a6:
         ab:5f:05:47:2b:42:56:03:4a:f0:e6:e5:98:e9:53:4a:bf:e5:
         e1:ab:88:43:8c:77:1e:b8:16:59:93:d7:82:71:aa:e0:c6:39:
         95:d3:60:28:0e:f7:07:5c:dd:50:f9:e9:a1:fd:eb:fb:4d:8b:
         1f:ce:8a:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0l+FgQ52mDCjynO0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDkzMWU3MTctYzFkMS00ZGQ4LTg2M2QtNWMwNmZiNzZm
NDdiMB4XDTI2MDMxMjIyMjY1MloXDTI2MDYxMDIyMjY1MlowLzEtMCsGA1UEAxMk
NDg0NjkwMjMtZDZmNC00NmVlLWJmYzEtZWFkMTBlZjE0ZmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA140io33wOdKZtgP6Q4MziDSxmUGlJqtyVkM8
45YJSPuz76GHUag0538mB2UV+CGVqQRW1vH4ruDVObsf4v7dsuB3wesK7phsWKoQ
IljzgbreR5eHrHDs14t25LCQJvIPBvwGEWmxcw1/7FSsKoxDqsbdAEgfwvY6AUfl
IVsRKwM9+lZv6J6t8y1IYKPuDp44A//1P1s9Zoenb329viHtHNTUIjz19Mp2VFzA
9mdR23qHd7Jl0LVuaNkW9AiHzbYe6L2FV3/+KwjADkOHxiJRys1r0jrNWjFgsU3b
JmHeEr7xGDyPxhccIkfrI9DyWFWI5GX6VmwX9U2w6qyVDJtRxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE74AtNDfWVX3gF8urkSyJsIL9HrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80OTMx
ZTcxNy1jMWQxLTRkZDgtODYzZC01YzA2ZmI3NmY0N2IvMzZlYjhiZGItZmMyOC0z
MDMwLThhYTUtODk2MWFhNGI5OGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDkzMWU3MTctYzFkMS00ZGQ4LTg2
M2QtNWMwNmZiNzZmNDdiLzQ5MzFlNzE3LWMxZDEtNGRkOC04NjNkLTVjMDZmYjc2
ZjQ3Yi5jcmwwHwYDVR0jBBgwFoAUzkL+cRFxw0kbjbZ7dOQfT+KR3owwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80OTMxZTcxNy1jMWQxLTRkZDgtODYzZC01YzA2
ZmI3NmY0N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqLZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpK6VvHPw5cKM90uvMc0rQUmT8eu+iim5ypAwVC3Sc81SmLUNSWBaoF
GDYBDj7LyEgaZYDihGNFVI/H4mlVGitdtXMfregn3EQh+j7Kn/xNTvtoCNthKRUj
qMIdSYmkvaoVUnA0LpSBAmAKLLttRj+D9ciP7wSC1TNaEKoBo3AmiYtbVhajYKFZ
eYLf7El4zw8UYAg3bqUaCXHMzS6Kh1iZfmYXDctX6vIyt5g7LR8zCQRl+Af+BJYN
O5cJQ6vWcpJxS9yQpqtfBUcrQlYDSvDm5ZjpU0q/5eGriEOMdx64FlmT14JxquDG
OZXTYCgO9wdc3VD56aH96/tNix/Oiuw=
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:56:49 2026 by rpki-client