Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/e3d9753b-d297-3f28-8411-a24b30d79d35.roa
File:                     e3d9753b-d297-3f28-8411-a24b30d79d35.roa (raw, json)
Hash identifier:          ARV14BcPnUiiFpLqq+wySpoSWQh/m0EoN8NvEc5JMU4=
Subject key identifier:   CE:5C:9B:D7:8D:86:14:73:85:3F:0D:96:55:9D:9E:75:92:CA:E6:1B
Certificate issuer:       /CN=df45c214-cd13-454c-ac2d-2978c76c6f7f
Certificate serial:       010D0C9F4328584EB2B200B0A864B2AD1A647900
Authority key identifier: D8:2F:F5:F6:19:80:33:AB:69:54:1A:B3:28:6A:5E:90:45:D5:62:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/e3d9753b-d297-3f28-8411-a24b30d79d35.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     401561
IP address blocks:        23.135.36.0/24 maxlen: 24
                          2602:f6db::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b2:00:b0:a8:64:b2:ad:1a:64:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df45c214-cd13-454c-ac2d-2978c76c6f7f
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=405cba58-94b6-4bd6-a2ce-d5bbc6864140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:67:72:96:fb:36:03:5a:d9:85:49:e6:3f:
                    e5:19:b1:f2:09:b3:db:7b:49:31:21:dd:b9:33:6b:
                    52:d0:be:f0:87:12:0f:40:78:e1:db:58:11:1b:7b:
                    f7:d1:7c:ae:97:3a:2c:5a:78:ac:66:33:20:c0:5e:
                    bf:de:9d:e1:56:09:b4:25:2f:e3:20:ea:19:23:19:
                    72:65:d8:ad:6b:53:b7:86:81:4d:b2:78:72:0c:33:
                    76:35:ff:24:dd:cf:ef:a4:5a:6c:93:7a:74:1f:57:
                    e2:db:28:07:18:7b:30:93:0d:0d:51:55:71:5f:dd:
                    31:99:15:2f:f6:d0:3b:26:a7:36:45:12:c2:32:4a:
                    b4:bd:d9:35:32:f2:a4:2c:17:d5:31:b0:b8:1f:04:
                    24:a0:f2:22:39:c2:65:0e:c4:03:c7:9a:ca:ae:02:
                    7b:9f:21:95:6c:37:b9:00:c7:d3:7b:81:ec:f0:b5:
                    dc:53:f6:ba:85:2e:36:31:52:d3:80:17:1b:fe:3f:
                    6c:07:78:6a:57:b6:8c:0a:95:50:53:b1:c7:f0:06:
                    66:84:27:49:d3:9c:1e:96:9b:a8:6f:83:77:65:ad:
                    b6:6b:a7:ba:2d:9a:4f:11:e4:a3:42:65:a2:21:dc:
                    23:2c:b0:e8:3b:5e:56:52:6e:8a:b9:f5:5d:c7:52:
                    7b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5C:9B:D7:8D:86:14:73:85:3F:0D:96:55:9D:9E:75:92:CA:E6:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/e3d9753b-d297-3f28-8411-a24b30d79d35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2F:F5:F6:19:80:33:AB:69:54:1A:B3:28:6A:5E:90:45:D5:62:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.36.0/24
                IPv6:
                  2602:f6db::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5a:0c:47:18:db:d0:37:01:d0:a3:33:2a:e1:a7:09:58:70:
         ee:bd:26:1a:6c:a0:d7:e2:3d:f9:fd:53:ef:d0:ba:c9:8b:1a:
         80:7f:8d:63:aa:bf:df:36:3d:03:04:de:6a:cc:10:3d:7e:d6:
         71:11:cf:6a:7f:bb:18:b1:1e:6d:20:7f:9d:41:e5:f6:b1:30:
         5b:c3:37:49:9c:fb:61:f2:40:c5:33:9c:a4:d8:fb:e2:4a:a8:
         35:b3:b9:0e:f6:2a:79:31:a0:1d:f2:a7:b4:fd:4a:34:79:49:
         d3:1a:18:2d:ef:96:38:89:74:74:55:d6:e8:bf:82:e1:4b:1a:
         e4:7a:cf:f1:f1:12:ca:0f:9e:c0:78:ac:14:be:19:a7:75:9d:
         af:e6:17:da:4b:10:59:a7:ee:9d:04:e4:06:9c:fd:2a:15:e3:
         0e:75:9d:a1:ca:cc:bc:10:35:60:ae:bf:5c:e7:51:fb:e0:46:
         1a:1c:f3:ff:22:4f:1c:ea:bd:48:d3:db:c6:a2:75:db:ee:2c:
         d5:15:ce:c8:0c:38:19:0f:40:a5:51:3f:1a:b3:49:24:4d:0d:
         84:b3:16:99:40:72:a9:63:eb:02:b3:03:ad:f9:77:ee:b1:68:
         18:a3:82:22:2a:7f:70:63:de:a8:db:69:08:1d:8a:07:af:84:
         2a:ca:8b:5b
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6ysgCwqGSyrRpkeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY0NWMyMTQtY2QxMy00NTRjLWFjMmQtMjk3OGM3NmM2
ZjdmMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
NDA1Y2JhNTgtOTRiNi00YmQ2LWEyY2UtZDViYmM2ODY0MTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbhncpb7NgNa2YVJ5j/lGbHyCbPbe0kxId25
M2tS0L7whxIPQHjh21gRG3v30XyulzosWnisZjMgwF6/3p3hVgm0JS/jIOoZIxly
Zdita1O3hoFNsnhyDDN2Nf8k3c/vpFpsk3p0H1fi2ygHGHswkw0NUVVxX90xmRUv
9tA7Jqc2RRLCMkq0vdk1MvKkLBfVMbC4HwQkoPIiOcJlDsQDx5rKrgJ7nyGVbDe5
AMfTe4Hs8LXcU/a6hS42MVLTgBcb/j9sB3hqV7aMCpVQU7HH8AZmhCdJ05welpuo
b4N3Za22a6e6LZpPEeSjQmWiIdwjLLDoO15WUm6KufVdx1J7QwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFM5cm9eNhhRzhT8NllWdnnWSyuYbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjQ1
YzIxNC1jZDEzLTQ1NGMtYWMyZC0yOTc4Yzc2YzZmN2YvZTNkOTc1M2ItZDI5Ny0z
ZjI4LTg0MTEtYTI0YjMwZDc5ZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY0NWMyMTQtY2QxMy00NTRjLWFj
MmQtMjk3OGM3NmM2ZjdmL2RmNDVjMjE0LWNkMTMtNDU0Yy1hYzJkLTI5NzhjNzZj
NmY3Zi5jcmwwHwYDVR0jBBgwFoAU2C/19hmAM6tpVBqzKGpekEXVYugwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjQ1YzIxNC1jZDEzLTQ1NGMtYWMyZC0yOTc4
Yzc2YzZmN2YuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ckMA4E
AgACMAgDBgQmAvbbADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0WgxHGNvQNwHQozMq4acJWHDuvSYabKDX
4j35/VPv0LrJixqAf41jqr/fNj0DBN5qzBA9ftZxEc9qf7sYsR5tIH+dQeX2sTBb
wzdJnPth8kDFM5yk2PviSqg1s7kO9ip5MaAd8qe0/Uo0eUnTGhgt75Y4iXR0Vdbo
v4LhSxrkes/x8RLKD57AeKwUvhmndZ2v5hfaSxBZp+6dBOQGnP0qFeMOdZ2hysy8
EDVgrr9c51H74EYaHPP/Ik8c6r1I09vGonXb7izVFc7IDDgZD0ClUT8as0kkTQ2E
sxaZQHKpY+sCswOt+XfusWgYo4IiKn9wY96o22kIHYoHr4Qqyotb
-----END CERTIFICATE-----
Generated at Fri Sep 11 18:37:17 2026 by rpki-client