Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9529a9ed-3e23-3833-9ad0-c20a079c7587.roa
File:                     9529a9ed-3e23-3833-9ad0-c20a079c7587.roa (raw, json)
Hash identifier:          7sQ8UB714xAFa6nR5XGYe8zPZkM11m/6JJ7u6n7p4qo=
Subject key identifier:   6B:45:5D:E3:84:20:42:86:1D:54:0D:FD:06:21:68:B3:52:C3:19:DF
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584EB6E1A2DE654A5A1C7DA53500
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9529a9ed-3e23-3833-9ad0-c20a079c7587.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     33067
IP address blocks:        137.119.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a2:de:65:4a:5a:1c:7d:a5:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=0221512f-c22d-4f9f-9c4c-b0b40b439764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:72:17:f5:76:de:62:0d:1c:e3:31:6b:91:
                    ca:74:05:c8:d2:c6:f2:33:d2:d5:c0:92:f4:d4:9b:
                    8b:dd:f1:23:81:e1:e8:fb:23:e7:a6:30:98:96:28:
                    fa:12:eb:eb:21:a8:e5:22:f9:0e:ec:17:f0:c2:43:
                    ea:b5:fa:3c:b6:c8:9e:a6:a3:60:75:e2:80:5b:0b:
                    81:26:84:f6:51:81:a0:8e:b6:49:d1:7b:be:81:dd:
                    b0:dc:da:0b:ff:69:35:0e:0e:a4:28:63:05:d4:b0:
                    86:1b:af:35:00:5a:96:a9:b0:ac:d4:1f:d7:be:49:
                    27:34:99:35:4f:0d:74:ae:23:a6:09:73:a5:ef:83:
                    92:ec:92:e0:99:49:17:f4:26:1e:32:cc:91:48:e8:
                    a9:7c:c2:22:81:3f:82:05:ea:ba:66:a8:23:0e:5a:
                    d9:6b:99:c1:5f:a2:68:99:6b:84:84:01:16:03:d6:
                    c7:b9:bf:f9:47:aa:33:9f:f1:20:c7:a1:0b:ea:cb:
                    2c:a0:98:44:fd:ac:39:e9:5c:fc:00:fb:ce:ac:df:
                    09:eb:1c:63:a7:81:8b:d1:d9:25:77:a6:ee:d1:2f:
                    6e:9d:74:e5:24:4e:63:1a:b4:7f:46:26:d1:45:c5:
                    69:78:99:0a:c4:6d:12:1f:f9:4d:0b:89:07:1e:55:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:45:5D:E3:84:20:42:86:1D:54:0D:FD:06:21:68:B3:52:C3:19:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9529a9ed-3e23-3833-9ad0-c20a079c7587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.119.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9f:2a:c4:f2:d8:40:ee:db:a0:9c:01:e9:84:15:da:6f:dc:
         2a:48:81:79:9f:68:d6:c3:92:80:67:88:39:dd:e2:84:ca:7a:
         df:0c:b3:8c:07:c7:67:b1:df:36:1d:cb:7b:85:a8:d8:8d:10:
         87:8d:7a:ca:38:4d:36:c7:74:78:25:8c:0e:fd:3f:0d:cd:79:
         a2:5f:bd:dd:7e:a3:75:15:92:8e:2d:bb:11:57:7c:69:ca:19:
         d0:c6:17:1e:ca:62:40:4d:bc:2a:c3:ce:cb:95:35:d6:a5:fe:
         e1:63:8f:1e:24:96:ea:93:9e:48:aa:7c:a8:60:3f:ce:64:36:
         df:9f:af:dc:e7:c6:40:d2:6b:a8:f8:66:aa:c6:4e:99:39:aa:
         b9:bf:27:5c:ae:ab:b9:a7:62:7c:a2:d8:2f:b5:67:c2:6d:a1:
         48:a9:e0:9f:4b:f5:aa:30:29:b6:62:76:f8:c6:ad:1f:9c:c5:
         61:99:8e:4e:33:68:da:73:95:1d:78:89:b2:60:0c:38:10:84:
         ff:66:a3:99:b0:1f:6d:20:27:12:0b:4d:24:3d:e0:0c:e3:7b:
         a2:90:df:8d:13:b4:30:2d:0f:a6:9b:44:cc:5f:1e:0f:8c:12:
         ca:6b:26:63:76:ae:b6:01:a4:d6:5b:3a:c7:8c:7b:d1:56:63:
         e1:0f:4c:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624aLeZUpaHH2lNQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk
MDIyMTUxMmYtYzIyZC00ZjlmLTljNGMtYjBiNDBiNDM5NzY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgFyF/V23mINHOMxa5HKdAXI0sbyM9LVwJL0
1JuL3fEjgeHo+yPnpjCYlij6EuvrIajlIvkO7BfwwkPqtfo8tsiepqNgdeKAWwuB
JoT2UYGgjrZJ0Xu+gd2w3NoL/2k1Dg6kKGMF1LCGG681AFqWqbCs1B/XvkknNJk1
Tw10riOmCXOl74OS7JLgmUkX9CYeMsyRSOipfMIigT+CBeq6ZqgjDlrZa5nBX6Jo
mWuEhAEWA9bHub/5R6ozn/Egx6EL6sssoJhE/aw56Vz8APvOrN8J6xxjp4GL0dkl
d6bu0S9unXTlJE5jGrR/RibRRcVpeJkKxG0SH/lNC4kHHlUz0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGtFXeOEIEKGHVQN/QYhaLNSwxnfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvOTUyOWE5ZWQtM2UyMy0z
ODMzLTlhZDAtYzIwYTA3OWM3NTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiXeIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHefKsTy2EDu26CcAemEFdpv3CpIgXmfaNbDkoBniDnd4oTKet8Ms4wH
x2ex3zYdy3uFqNiNEIeNeso4TTbHdHgljA79Pw3NeaJfvd1+o3UVko4tuxFXfGnK
GdDGFx7KYkBNvCrDzsuVNdal/uFjjx4kluqTnkiqfKhgP85kNt+fr9znxkDSa6j4
ZqrGTpk5qrm/J1yuq7mnYnyi2C+1Z8JtoUip4J9L9aowKbZidvjGrR+cxWGZjk4z
aNpzlR14ibJgDDgQhP9mo5mwH20gJxILTSQ94Azje6KQ340TtDAtD6abRMxfHg+M
EsprJmN2rrYBpNZbOseMe9FWY+EPTFg=
-----END CERTIFICATE-----
Generated at Mon Aug 31 11:38:12 2026 by rpki-client