Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4dc547a1-c47c-39a8-89ff-91a0c77b4228.roa
File:                     4dc547a1-c47c-39a8-89ff-91a0c77b4228.roa (raw, json)
Hash identifier:          vbjEsGRLoDKFrLvDhsGQrepgriwBEHQhMcCzX0vFE/U=
Subject key identifier:   D7:15:0C:F9:72:21:EF:20:F7:B3:B7:99:B0:B3:DD:C4:FF:26:AC:86
Certificate issuer:       /CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Certificate serial:       010D0C9F4328584F00DCD0D2A124CFF7ED988AA0
Authority key identifier: E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4dc547a1-c47c-39a8-89ff-91a0c77b4228.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     61622
IP address blocks:        136.175.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:d0:d2:a1:24:cf:f7:ed:98:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=3d07110c-75f0-48b2-82cc-cc672eec828b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:c6:f9:50:d0:02:e7:58:2d:0a:fd:47:00:
                    a6:61:91:56:db:98:69:cf:2c:fb:21:54:0e:ff:ee:
                    53:c4:df:f0:13:34:45:31:22:32:24:39:59:4b:a9:
                    92:b5:79:e4:4d:6c:63:98:12:72:52:bd:65:87:4d:
                    2c:47:1b:49:ce:cf:60:9d:cd:ee:ae:de:68:22:ae:
                    6f:7c:33:0b:e0:f4:a5:4b:ed:05:08:39:35:9f:20:
                    5b:2e:b6:c2:79:e7:c4:a8:0f:b1:5b:07:70:e2:3f:
                    9a:11:45:e7:a5:21:3b:41:f9:cd:af:fc:e5:8b:f8:
                    ec:d7:f9:b9:bb:f1:54:1b:0f:3b:55:22:47:91:e5:
                    5d:18:3a:5b:63:b0:82:95:48:b5:60:cc:03:ba:84:
                    39:56:44:17:71:40:eb:d9:13:6e:9e:3b:66:9f:0c:
                    3b:6b:d1:d4:bf:8b:ed:fe:04:40:ac:87:8e:a9:76:
                    d5:04:5f:ad:6d:59:a8:b5:68:ef:36:3d:36:8e:ce:
                    c0:47:e1:6b:95:60:8c:fc:92:24:f7:70:de:23:0c:
                    7c:78:c0:26:47:39:60:0f:bf:9f:af:2d:3d:13:5c:
                    36:dc:5e:92:c6:fe:fa:7a:e7:f5:d4:3c:0b:ba:6e:
                    cc:24:f5:e1:2b:a7:57:95:4b:f2:e7:c0:6e:a6:62:
                    b9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:15:0C:F9:72:21:EF:20:F7:B3:B7:99:B0:B3:DD:C4:FF:26:AC:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4dc547a1-c47c-39a8-89ff-91a0c77b4228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl

            X509v3 Authority Key Identifier:
                keyid:E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d4:c5:f9:6b:3e:6b:99:6d:6a:25:f8:40:6a:23:a1:4a:58:
         38:05:59:e6:fe:d0:a5:c5:c4:a3:fa:e0:d6:f8:b7:33:43:b4:
         2c:2a:c8:64:c3:ad:ce:5e:a0:b4:ea:f3:56:be:c8:e5:5d:0c:
         f5:9b:0e:1f:56:6f:59:fd:f6:99:f3:22:57:bb:52:ef:1e:8b:
         19:6f:bc:cf:6e:b3:f3:57:87:04:96:c6:f3:ea:20:0c:67:97:
         b8:5d:63:66:29:86:1a:49:e3:ad:b5:8e:c9:53:8e:e7:24:24:
         e8:5e:fa:67:cd:ab:6c:3f:90:fa:4c:5d:66:dd:2e:e4:d3:40:
         a0:1a:99:e5:fd:3e:8d:28:0c:f4:3e:e8:5b:78:33:0d:a4:98:
         16:5f:f2:50:1e:35:7e:0d:ca:8c:56:c2:6f:d3:35:36:51:03:
         2f:22:38:6f:9f:db:4c:ab:69:a3:e2:d3:02:2e:b0:01:9d:07:
         69:38:b6:2a:87:d4:70:48:cf:40:2b:95:14:49:70:fc:77:9a:
         ed:79:24:f1:24:58:e0:9f:ba:ed:5e:23:9d:a5:2c:8d:f8:4b:
         8e:d4:5e:8a:bc:93:c3:92:cd:48:d8:d1:56:96:14:f2:fc:c1:
         ca:28:38:14:f6:ec:ed:f8:65:76:e3:62:1a:27:db:ca:9a:bc:
         91:cf:d0:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3NDSoSTP9+2YiqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ4MDExZmEtZjFhZS00NmM2LTk0NDEtMmY0ODZlMDRh
NmRlMB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
M2QwNzExMGMtNzVmMC00OGIyLTgyY2MtY2M2NzJlZWM4MjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVjG+VDQAudYLQr9RwCmYZFW25hpzyz7IVQO
/+5TxN/wEzRFMSIyJDlZS6mStXnkTWxjmBJyUr1lh00sRxtJzs9gnc3urt5oIq5v
fDML4PSlS+0FCDk1nyBbLrbCeefEqA+xWwdw4j+aEUXnpSE7QfnNr/zli/js1/m5
u/FUGw87VSJHkeVdGDpbY7CClUi1YMwDuoQ5VkQXcUDr2RNunjtmnww7a9HUv4vt
/gRArIeOqXbVBF+tbVmotWjvNj02js7AR+FrlWCM/JIk93DeIwx8eMAmRzlgD7+f
ry09E1w23F6Sxv76euf11DwLum7MJPXhK6dXlUvy58BupmK54QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNcVDPlyIe8g97O3mbCz3cT/JqyGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZDgw
MTFmYS1mMWFlLTQ2YzYtOTQ0MS0yZjQ4NmUwNGE2ZGUvNGRjNTQ3YTEtYzQ3Yy0z
OWE4LTg5ZmYtOTFhMGM3N2I0MjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGQ4MDExZmEtZjFhZS00NmM2LTk0
NDEtMmY0ODZlMDRhNmRlLzRkODAxMWZhLWYxYWUtNDZjNi05NDQxLTJmNDg2ZTA0
YTZkZS5jcmwwHwYDVR0jBBgwFoAU54hrAHQubHuwCUVp2sUyljNfs5kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZDgwMTFmYS1mMWFlLTQ2YzYtOTQ0MS0yZjQ4
NmUwNGE2ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiK8UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDUxflrPmuZbWol+EBqI6FKWDgFWeb+0KXFxKP64Nb4tzNDtCwqyGTD
rc5eoLTq81a+yOVdDPWbDh9Wb1n99pnzIle7Uu8eixlvvM9us/NXhwSWxvPqIAxn
l7hdY2YphhpJ4621jslTjuckJOhe+mfNq2w/kPpMXWbdLuTTQKAameX9Po0oDPQ+
6Ft4Mw2kmBZf8lAeNX4NyoxWwm/TNTZRAy8iOG+f20yraaPi0wIusAGdB2k4tiqH
1HBIz0ArlRRJcPx3mu15JPEkWOCfuu1eI52lLI34S47UXoq8k8OSzUjY0VaWFPL8
wcooOBT27O34ZXbjYhon28qavJHP0NI=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:50:32 2026 by rpki-client