Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/2a915880-5b12-3635-8c32-606ae88c6966.roa
File:                     2a915880-5b12-3635-8c32-606ae88c6966.roa (raw, json)
Hash identifier:          j8vSEX/uh4nOhe+6WURKvgiyiRq0wFN++3/4I3m6wCQ=
Subject key identifier:   CB:88:45:05:0F:20:1E:85:9B:41:6B:A4:6B:B4:13:F6:7F:1A:D2:05
Certificate issuer:       /CN=9b2dd4d6-06da-4602-9071-aee92968f31a
Certificate serial:       010D0C9F4328584E683E310377FAF8C307B91880
Authority key identifier: 86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/2a915880-5b12-3635-8c32-606ae88c6966.roa
Signing time:             Mon 06 Jul 2026 08:57:53 +0000
ROA not before:           Mon 06 Jul 2026 08:57:53 +0000
ROA not after:            Sun 04 Oct 2026 08:57:53 +0000
asID:                     136725
IP address blocks:        169.128.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3e:31:03:77:fa:f8:c3:07:b9:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2dd4d6-06da-4602-9071-aee92968f31a
        Validity
            Not Before: Jul  6 08:57:53 2026 GMT
            Not After : Oct  4 08:57:53 2026 GMT
        Subject: CN=3658138d-3c62-42bc-99e3-5e77835b6b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cd:38:ab:3d:3a:03:19:0c:be:c2:7a:6b:47:
                    c8:5e:ee:11:e0:8a:05:1c:c6:d6:c3:65:4f:1d:54:
                    e1:c1:bd:55:fc:b7:0e:9b:fa:94:3a:be:37:15:d1:
                    f8:61:43:6a:f0:b2:c3:4c:d1:b8:3c:d0:6d:d5:fd:
                    00:f9:d3:44:1b:45:04:55:d8:37:71:a1:a0:1e:e0:
                    46:f1:5a:52:ed:69:01:f4:ba:c2:41:46:e9:68:69:
                    f3:98:d1:19:7f:60:b9:fc:24:d4:b0:8b:d1:27:9c:
                    8f:e7:77:25:94:3c:db:ad:19:f9:86:0b:33:90:40:
                    b0:35:17:7d:1b:d8:10:27:a2:68:31:21:c2:08:78:
                    33:83:03:94:d2:ce:c1:4b:b8:6b:57:65:8c:19:35:
                    13:fb:4b:17:43:cc:c9:84:31:0d:66:ca:84:cb:fa:
                    26:78:aa:b5:c9:a7:ee:4c:62:44:70:9b:25:cf:d2:
                    88:59:df:a8:62:f6:28:4f:76:20:64:47:45:29:91:
                    31:2e:52:b0:f1:fa:26:2d:50:06:75:ab:65:ab:5b:
                    73:5b:43:68:a0:c5:15:80:67:9b:97:f3:0b:78:43:
                    90:aa:f1:dd:ea:05:84:ba:1f:8f:de:87:33:e5:0c:
                    81:25:b4:08:b8:03:bf:e9:e2:cd:57:ae:8c:f8:dd:
                    2b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:88:45:05:0F:20:1E:85:9B:41:6B:A4:6B:B4:13:F6:7F:1A:D2:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/2a915880-5b12-3635-8c32-606ae88c6966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl

            X509v3 Authority Key Identifier:
                keyid:86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:07:d0:65:31:b0:9c:9c:00:54:9c:58:e6:3a:1a:84:ed:c7:
         94:c2:3a:fd:a2:92:0e:b7:13:ec:d5:a0:2f:6e:0a:5f:5a:06:
         39:8c:48:09:68:b7:db:e3:a9:a3:ef:3c:e3:a5:bf:24:47:6a:
         ee:ca:5c:5e:87:6d:ad:e2:46:bc:99:0f:65:31:c2:c6:6e:5e:
         e5:40:7d:e6:14:ed:20:f4:78:98:05:1e:b3:40:9f:62:05:3d:
         a1:3f:86:e3:08:6d:b2:88:4e:23:e7:82:6d:5f:f2:12:e8:c5:
         53:18:c9:98:4d:9d:c8:79:4c:4e:4d:95:15:e5:82:38:93:13:
         ea:9b:73:e1:ed:60:20:fe:4d:09:6c:4d:04:0f:8c:8c:8c:ee:
         b3:d8:c9:00:8f:94:19:c7:7c:83:59:ea:97:08:0b:c3:bb:a4:
         aa:7e:d2:2d:17:5e:a7:de:bd:dd:eb:d4:29:05:78:3d:8c:65:
         33:f4:d9:0b:ec:00:ec:48:57:24:68:8c:69:3d:be:b4:6c:96:
         d1:1c:47:66:82:ca:68:c1:5e:e9:9b:7b:8c:aa:e5:52:b6:6e:
         14:0f:37:c8:80:29:ed:eb:6f:ab:6e:44:b3:f3:a4:2a:c5:e6:
         ba:93:23:8b:71:87:5f:06:e0:be:d6:84:9e:30:04:e7:63:35:
         fe:35:50:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5oPjEDd/r4wwe5GIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIyZGQ0ZDYtMDZkYS00NjAyLTkwNzEtYWVlOTI5Njhm
MzFhMB4XDTI2MDcwNjA4NTc1M1oXDTI2MTAwNDA4NTc1M1owLzEtMCsGA1UEAxMk
MzY1ODEzOGQtM2M2Mi00MmJjLTk5ZTMtNWU3NzgzNWI2YjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq804qz06AxkMvsJ6a0fIXu4R4IoFHMbWw2VP
HVThwb1V/LcOm/qUOr43FdH4YUNq8LLDTNG4PNBt1f0A+dNEG0UEVdg3caGgHuBG
8VpS7WkB9LrCQUbpaGnzmNEZf2C5/CTUsIvRJ5yP53cllDzbrRn5hgszkECwNRd9
G9gQJ6JoMSHCCHgzgwOU0s7BS7hrV2WMGTUT+0sXQ8zJhDENZsqEy/omeKq1yafu
TGJEcJslz9KIWd+oYvYoT3YgZEdFKZExLlKw8fomLVAGdatlq1tzW0NooMUVgGeb
l/MLeEOQqvHd6gWEuh+P3ocz5QyBJbQIuAO/6eLNV66M+N0rAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMuIRQUPIB6Fm0FrpGu0E/Z/GtIFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjJk
ZDRkNi0wNmRhLTQ2MDItOTA3MS1hZWU5Mjk2OGYzMWEvMmE5MTU4ODAtNWIxMi0z
NjM1LThjMzItNjA2YWU4OGM2OTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWIyZGQ0ZDYtMDZkYS00NjAyLTkw
NzEtYWVlOTI5NjhmMzFhLzliMmRkNGQ2LTA2ZGEtNDYwMi05MDcxLWFlZTkyOTY4
ZjMxYS5jcmwwHwYDVR0jBBgwFoAUhttI55ulqKaIWlTVYBPNgnRyiYowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjJkZDRkNi0wNmRhLTQ2MDItOTA3MS1hZWU5
Mjk2OGYzMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqYCIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABoH0GUxsJycAFScWOY6GoTtx5TCOv2ikg63E+zVoC9uCl9aBjmMSAlo
t9vjqaPvPOOlvyRHau7KXF6Hba3iRryZD2UxwsZuXuVAfeYU7SD0eJgFHrNAn2IF
PaE/huMIbbKITiPngm1f8hLoxVMYyZhNnch5TE5NlRXlgjiTE+qbc+HtYCD+TQls
TQQPjIyM7rPYyQCPlBnHfINZ6pcIC8O7pKp+0i0XXqfevd3r1CkFeD2MZTP02Qvs
AOxIVyRojGk9vrRsltEcR2aCymjBXumbe4yq5VK2bhQPN8iAKe3rb6tuRLPzpCrF
5rqTI4txh18G4L7WhJ4wBOdjNf41UDQ=
-----END CERTIFICATE-----
Generated at Thu Jul 9 21:02:04 2026 by rpki-client