Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa
File:                     00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa (raw, json)
Hash identifier:          bj4UlqqUzqa5ui5GTQHkoq5kHy5YrTh1lLiG6wR30IU=
Subject key identifier:   CF:F0:62:DC:84:56:BB:64:85:C6:77:21:69:1F:10:E5:6D:08:F9:D7
Certificate issuer:       /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial:       010D0C9F4328584EC20C5C866B0328C9C2929480
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     40183
IP address blocks:        68.68.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:5c:86:6b:03:28:c9:c2:92:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=bf7cb5b0-3fb1-4e1f-8586-e6ab48ccf489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:c4:aa:e4:3a:ea:6c:d3:2b:1d:a2:20:d6:
                    ee:3a:92:b9:e7:90:e1:3f:81:42:01:c7:33:b2:c6:
                    ac:a6:a5:e2:63:3a:c8:09:85:24:65:6b:db:5a:ec:
                    87:95:fc:ab:ac:d7:67:f0:52:e2:48:e3:40:4e:f4:
                    5a:b0:fc:3a:c0:bf:b6:1e:61:79:0b:5a:fb:13:b3:
                    b3:e2:47:15:35:bd:83:c5:ff:19:4b:74:56:b6:78:
                    1f:da:c4:65:a9:d2:8f:2b:c0:c2:d3:8b:d1:b6:2b:
                    b9:42:0f:05:78:7b:c1:00:dd:36:9a:8e:80:7e:87:
                    8a:93:a0:30:9a:a5:7a:1d:18:a9:8b:a2:51:84:81:
                    ab:5b:a1:e8:03:cc:5b:d4:01:96:c5:aa:60:00:f5:
                    6b:7a:05:70:0f:32:11:b1:d6:13:c3:fa:a4:2e:ec:
                    2b:88:bf:c6:7b:8b:58:46:15:ab:34:2e:d2:6f:6c:
                    0d:e4:d0:23:a5:fb:08:58:41:4b:80:c5:91:0c:93:
                    2d:59:98:c0:af:ff:12:66:94:fe:47:14:01:0e:be:
                    87:31:7b:5c:f6:1e:7e:71:23:bd:82:09:b7:ba:05:
                    40:f2:85:9f:2c:ff:64:05:e4:95:2a:4b:6b:a3:ef:
                    3a:85:e2:eb:60:a1:c1:ae:4c:c3:9f:50:2a:8e:1a:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F0:62:DC:84:56:BB:64:85:C6:77:21:69:1F:10:E5:6D:08:F9:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1e:35:bd:4d:63:30:da:47:a2:31:cb:34:55:b3:d4:c6:65:
         30:e5:f5:8c:4d:e4:a7:4a:15:1a:35:28:e5:1c:d6:8e:a3:ff:
         7a:08:7c:e0:0a:a3:1d:54:3b:18:ab:9e:87:92:ca:21:cd:d4:
         43:e5:6e:5a:6f:e7:39:b4:94:8a:7c:4d:6f:97:f4:aa:51:ae:
         6e:4a:ca:98:0b:4a:98:52:f9:ce:d2:03:94:f2:38:88:62:be:
         21:fa:b3:d9:6f:64:2e:01:fe:58:d9:ff:ed:2b:d3:ce:52:5a:
         60:4e:d8:89:6c:11:c7:a2:c4:cd:6f:23:40:78:7a:66:b8:bc:
         7f:81:cf:3c:34:ad:93:e2:75:25:a6:89:0e:6a:16:b3:19:9d:
         5c:36:4f:63:24:ba:7a:7d:91:f1:1a:75:16:40:18:d3:ac:b1:
         bc:8b:85:33:91:42:78:56:56:a6:43:79:9e:04:ca:c0:9e:7d:
         d6:b2:88:e7:4c:52:ee:53:f3:14:6d:e0:38:4e:22:5a:e2:23:
         f5:3a:1f:3e:c6:70:88:37:82:ab:9d:75:7a:cb:3b:36:7d:07:
         c9:09:78:d8:34:ee:8f:b2:e4:cd:72:a2:cd:7b:79:ac:a9:7e:
         f2:fb:48:d6:b6:9d:83:ba:a4:94:91:13:e8:70:52:27:41:47:
         f3:7f:05:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDFyGawMoycKSlIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VhYmE4MzAtMGYxNS00YzM2LTk5YjAtMGMxNGJmN2Vi
ZjllMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
YmY3Y2I1YjAtM2ZiMS00ZTFmLTg1ODYtZTZhYjQ4Y2NmNDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08PEquQ66mzTKx2iINbuOpK555DhP4FCAccz
ssaspqXiYzrICYUkZWvbWuyHlfyrrNdn8FLiSONATvRasPw6wL+2HmF5C1r7E7Oz
4kcVNb2Dxf8ZS3RWtngf2sRlqdKPK8DC04vRtiu5Qg8FeHvBAN02mo6AfoeKk6Aw
mqV6HRipi6JRhIGrW6HoA8xb1AGWxapgAPVregVwDzIRsdYTw/qkLuwriL/Ge4tY
RhWrNC7Sb2wN5NAjpfsIWEFLgMWRDJMtWZjAr/8SZpT+RxQBDr6HMXtc9h5+cSO9
ggm3ugVA8oWfLP9kBeSVKktro+86heLrYKHBrkzDn1AqjhqxoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM/wYtyEVrtkhcZ3IWkfEOVtCPnXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFi
YTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0YmY3ZWJmOWUvMDBiMzZiNGYtYjkyZS0z
ZmI2LTg0NzktMWIxNjZiMWY1ZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2VhYmE4MzAtMGYxNS00YzM2LTk5
YjAtMGMxNGJmN2ViZjllLzNlYWJhODMwLTBmMTUtNGMzNi05OWIwLTBjMTRiZjdl
YmY5ZS5jcmwwHwYDVR0jBBgwFoAUtkIn1zQmnRVMSxbhUm+PwQP6MTMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFiYTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0
YmY3ZWJmOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARERZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIeNb1NYzDaR6IxyzRVs9TGZTDl9YxN5KdKFRo1KOUc1o6j/3oIfOAK
ox1UOxirnoeSyiHN1EPlblpv5zm0lIp8TW+X9KpRrm5KypgLSphS+c7SA5TyOIhi
viH6s9lvZC4B/ljZ/+0r085SWmBO2IlsEceixM1vI0B4ema4vH+Bzzw0rZPidSWm
iQ5qFrMZnVw2T2Mkunp9kfEadRZAGNOssbyLhTORQnhWVqZDeZ4EysCefdayiOdM
Uu5T8xRt4DhOIlriI/U6Hz7GcIg3gquddXrLOzZ9B8kJeNg07o+y5M1yos17eayp
fvL7SNa2nYO6pJSRE+hwUidBR/N/BdE=
-----END CERTIFICATE-----
Generated at Fri Sep 11 17:13:55 2026 by rpki-client