Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/36e73b18-777c-36fc-98d1-05fbaf40f077.roa
File:                     36e73b18-777c-36fc-98d1-05fbaf40f077.roa (raw, json)
Hash identifier:          zkV+gTyJ0EV7jf10fBIKOShtbkOCTJIOexTazBdqtNc=
Subject key identifier:   91:93:0E:45:E0:07:8B:0C:CB:D2:9A:89:E8:B8:29:85:89:FB:AE:47
Certificate issuer:       /CN=5dc32e87-d25f-444f-adc0-e3c94e9679db
Certificate serial:       010D0C9F4328584E81CFA52D0416CEEA7783F600
Authority key identifier: 9A:9A:36:11:68:63:DC:25:76:34:69:7C:7C:0B:BA:19:88:E5:4C:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/36e73b18-777c-36fc-98d1-05fbaf40f077.roa
Signing time:             Wed 15 Jul 2026 12:46:10 +0000
ROA not before:           Wed 15 Jul 2026 12:46:10 +0000
ROA not after:            Tue 13 Oct 2026 12:46:10 +0000
asID:                     400384
IP address blocks:        208.77.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:cf:a5:2d:04:16:ce:ea:77:83:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc32e87-d25f-444f-adc0-e3c94e9679db
        Validity
            Not Before: Jul 15 12:46:10 2026 GMT
            Not After : Oct 13 12:46:10 2026 GMT
        Subject: CN=2071641d-d03b-4851-89d8-871acb821723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b1:81:8c:1e:d7:de:e7:f9:26:ca:ab:d6:13:
                    7d:4c:b4:5a:fe:c5:65:e5:ab:99:07:4b:1c:af:1f:
                    42:7e:23:e7:ab:98:88:f3:38:58:c3:76:66:b7:f9:
                    ac:cb:7c:b4:de:a3:ab:e2:4e:cc:34:fa:6a:4b:79:
                    d0:c2:53:80:64:39:dc:b1:49:c4:16:bf:c8:78:e4:
                    da:65:f5:cf:9b:8a:a1:02:1e:a5:40:f0:3c:f6:3a:
                    8a:3c:0b:05:34:0f:e5:1e:3b:a2:03:61:cb:2d:fb:
                    00:c5:14:73:bc:aa:44:36:0e:29:6a:26:20:b6:c2:
                    79:62:f3:dd:3b:f9:b9:61:8b:0b:d9:87:ba:99:06:
                    05:08:85:de:c3:f8:8b:5c:18:7e:54:35:5d:9c:e3:
                    e6:83:73:03:03:d9:9d:9e:44:20:89:80:75:b7:c8:
                    46:1a:e6:74:84:4d:8c:07:b9:af:e8:99:2c:ad:27:
                    b6:74:99:f1:6e:10:ad:bf:0c:a5:12:40:80:5c:02:
                    ba:fb:b8:9d:26:b5:d4:45:81:a8:0a:59:e3:14:a8:
                    80:08:2a:fd:ca:f8:b4:e7:cc:82:21:bf:19:23:29:
                    d8:3c:e1:4a:d6:ff:0b:f6:aa:46:68:96:11:07:b2:
                    d3:bd:82:f6:ac:3c:c5:9f:b2:9a:96:43:ca:01:f3:
                    f4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:93:0E:45:E0:07:8B:0C:CB:D2:9A:89:E8:B8:29:85:89:FB:AE:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/36e73b18-777c-36fc-98d1-05fbaf40f077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.crl

            X509v3 Authority Key Identifier:
                keyid:9A:9A:36:11:68:63:DC:25:76:34:69:7C:7C:0B:BA:19:88:E5:4C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.77.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e0:43:93:18:d6:c0:65:a1:57:43:d8:e0:06:19:6b:ce:a6:
         83:17:a2:a0:d9:5a:01:b9:f1:2a:cb:96:81:f8:0e:5d:68:9b:
         45:91:f5:f5:58:4d:41:08:e1:e2:05:90:4e:ba:42:a3:b7:2c:
         e4:fa:88:1b:42:a8:c2:15:2f:6b:85:cc:a4:39:ae:77:01:24:
         cd:59:b1:d0:23:7c:05:24:a2:5e:5c:3a:b3:a5:ce:43:59:61:
         87:3b:17:82:b8:02:c8:c2:1a:ed:9a:f7:ce:89:c8:06:e2:87:
         ba:7d:87:88:a3:f4:a7:e8:62:f4:ad:cd:2c:7a:f0:b1:bf:8e:
         f8:ff:5e:db:e5:20:ed:72:ba:51:49:8e:31:79:a0:9c:e2:0b:
         98:d5:65:41:c2:3d:38:1b:a9:2c:63:f1:44:61:91:b0:a2:60:
         d6:25:a1:0e:60:96:13:77:97:83:e5:42:60:69:91:1e:8e:ac:
         90:26:44:2e:13:2a:bf:d0:8b:d9:0a:ea:cf:f8:4c:4b:ca:91:
         2e:7f:c7:e4:6e:b8:2f:c4:a8:d4:9b:22:cd:f3:e4:14:45:7f:
         6c:00:81:fa:5b:a2:2b:d3:05:43:b1:cc:41:12:ab:6f:41:91:
         9d:d8:be:8b:ae:53:e6:3c:0b:0c:24:33:4c:5b:3b:47:77:fd:
         3a:6b:c1:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Bz6UtBBbO6neD9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjMzJlODctZDI1Zi00NDRmLWFkYzAtZTNjOTRlOTY3
OWRiMB4XDTI2MDcxNTEyNDYxMFoXDTI2MTAxMzEyNDYxMFowLzEtMCsGA1UEAxMk
MjA3MTY0MWQtZDAzYi00ODUxLTg5ZDgtODcxYWNiODIxNzIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirGBjB7X3uf5Jsqr1hN9TLRa/sVl5auZB0sc
rx9CfiPnq5iI8zhYw3Zmt/msy3y03qOr4k7MNPpqS3nQwlOAZDncsUnEFr/IeOTa
ZfXPm4qhAh6lQPA89jqKPAsFNA/lHjuiA2HLLfsAxRRzvKpENg4paiYgtsJ5YvPd
O/m5YYsL2Ye6mQYFCIXew/iLXBh+VDVdnOPmg3MDA9mdnkQgiYB1t8hGGuZ0hE2M
B7mv6JksrSe2dJnxbhCtvwylEkCAXAK6+7idJrXURYGoClnjFKiACCr9yvi058yC
Ib8ZIynYPOFK1v8L9qpGaJYRB7LTvYL2rDzFn7KalkPKAfP0oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJGTDkXgB4sMy9Kaiei4KYWJ+65HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZGMz
MmU4Ny1kMjVmLTQ0NGYtYWRjMC1lM2M5NGU5Njc5ZGIvMzZlNzNiMTgtNzc3Yy0z
NmZjLTk4ZDEtMDVmYmFmNDBmMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWRjMzJlODctZDI1Zi00NDRmLWFk
YzAtZTNjOTRlOTY3OWRiLzVkYzMyZTg3LWQyNWYtNDQ0Zi1hZGMwLWUzYzk0ZTk2
NzlkYi5jcmwwHwYDVR0jBBgwFoAUmpo2EWhj3CV2NGl8fAu6GYjlTEowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZGMzMmU4Ny1kMjVmLTQ0NGYtYWRjMC1lM2M5
NGU5Njc5ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E2mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJvgQ5MY1sBloVdD2OAGGWvOpoMXoqDZWgG58SrLloH4Dl1om0WR9fVY
TUEI4eIFkE66QqO3LOT6iBtCqMIVL2uFzKQ5rncBJM1ZsdAjfAUkol5cOrOlzkNZ
YYc7F4K4AsjCGu2a986JyAbih7p9h4ij9KfoYvStzSx68LG/jvj/XtvlIO1yulFJ
jjF5oJziC5jVZUHCPTgbqSxj8URhkbCiYNYloQ5glhN3l4PlQmBpkR6OrJAmRC4T
Kr/Qi9kK6s/4TEvKkS5/x+RuuC/EqNSbIs3z5BRFf2wAgfpboivTBUOxzEESq29B
kZ3YvouuU+Y8CwwkM0xbO0d3/TprwQM=
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:18 2026 by rpki-client