Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/40449c0b-7967-3ad1-800d-976492202fef.roa
File:                     40449c0b-7967-3ad1-800d-976492202fef.roa (raw, json)
Hash identifier:          lU8qUhslhjbi+uMeUFOMoM1DeODmJww+nqTwJbs0DtE=
Subject key identifier:   5D:82:AD:DF:57:79:FD:EE:DC:4B:CF:41:AD:96:0E:C9:CB:2C:A0:90
Certificate issuer:       /CN=d714f85c-7c5b-49fe-8910-f5b808ebb556
Certificate serial:       010D0C9F4328584E48248CDDFBB9E9F543AB9400
Authority key identifier: 27:C3:38:AD:C5:DF:C1:B6:5D:08:22:EB:E2:FD:35:53:3E:D5:C6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/40449c0b-7967-3ad1-800d-976492202fef.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     18646
IP address blocks:        2620:be:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:8c:dd:fb:b9:e9:f5:43:ab:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d714f85c-7c5b-49fe-8910-f5b808ebb556
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=564a3163-f73b-4e61-be9c-34b8f48eae24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:7d:34:ea:c3:e1:bb:67:7d:8a:3c:a5:4c:
                    ac:5c:90:07:21:56:46:a5:26:b8:5c:21:d6:5a:b5:
                    a8:20:8b:ff:a7:87:f7:d8:2c:1d:55:92:e4:bc:3e:
                    89:c4:e0:51:5a:7d:55:73:20:63:ad:59:f9:35:ba:
                    39:31:40:47:fc:c1:18:78:89:67:95:28:fd:66:3c:
                    67:ab:6a:ab:31:09:b1:5a:92:f2:03:ab:9a:d8:f2:
                    f9:67:eb:b5:8c:95:15:dc:f6:30:92:50:16:63:e9:
                    a5:4c:68:25:48:8e:77:b7:3a:cc:e2:b7:7c:63:22:
                    10:73:e5:e5:cc:15:64:71:93:42:06:a6:b0:06:9a:
                    c2:65:75:ab:e6:43:1d:97:59:07:fa:fb:47:68:98:
                    47:ec:3b:29:5a:76:42:19:4a:07:ad:a1:6c:ab:76:
                    1d:6b:27:c2:a5:e0:b5:79:f2:20:12:61:d2:9a:52:
                    c2:0f:5a:57:c2:30:62:09:0e:ac:fe:24:c1:5c:bc:
                    95:23:ae:9f:b2:b5:0a:04:f6:3b:b0:86:60:a1:bd:
                    d5:3d:a9:dc:01:20:da:65:ee:9a:e9:1e:04:bc:b1:
                    88:c6:d7:88:31:89:92:eb:23:76:02:e3:0b:c0:ee:
                    1e:83:15:3a:76:b4:c1:7e:5e:74:69:d8:f3:d7:c9:
                    bb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:82:AD:DF:57:79:FD:EE:DC:4B:CF:41:AD:96:0E:C9:CB:2C:A0:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/40449c0b-7967-3ad1-800d-976492202fef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.crl

            X509v3 Authority Key Identifier:
                keyid:27:C3:38:AD:C5:DF:C1:B6:5D:08:22:EB:E2:FD:35:53:3E:D5:C6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:be:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:11:ae:b6:9f:92:47:bd:17:93:f9:3e:5f:f9:ca:79:8f:e7:
         9b:54:85:9e:2a:8a:fb:ae:b2:dd:10:63:7b:2c:70:f0:bf:71:
         35:24:cc:d5:bc:67:1b:19:53:b4:d6:b3:d4:bf:d3:98:64:7d:
         19:d1:22:3a:d6:c1:e1:63:2d:55:bb:00:d9:80:ae:2a:c7:ca:
         b8:07:ef:80:52:7f:9d:60:40:7d:eb:3a:33:c9:58:b6:79:d2:
         37:ef:b7:61:45:d6:82:f0:d8:e1:9f:24:96:64:1f:84:e1:ae:
         df:6f:78:57:c5:c4:65:86:f2:39:fd:13:1f:6e:3e:a2:81:d5:
         bb:7a:7d:cc:e2:25:ca:bc:55:30:45:24:37:67:a8:4c:14:41:
         ad:d2:cf:d6:05:51:b1:69:8a:65:70:c2:67:65:68:c4:11:19:
         67:72:8c:2a:79:6a:51:89:83:78:70:e4:b3:4f:68:79:d2:48:
         32:81:94:d8:ef:17:d3:57:d6:82:66:77:19:0a:d8:33:1a:48:
         7d:0b:3c:ca:b2:63:d2:10:a4:05:de:0f:b2:53:cd:1b:89:d2:
         f8:93:59:6c:6f:b7:87:5d:df:99:4c:2b:55:7c:6e:c0:4b:d4:
         50:84:52:74:ce:98:e6:25:f3:69:03:3e:cc:fc:ff:8f:0b:b2:
         dc:57:17:10
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5IJIzd+7np9UOrlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcxNGY4NWMtN2M1Yi00OWZlLTg5MTAtZjViODA4ZWJi
NTU2MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
NTY0YTMxNjMtZjczYi00ZTYxLWJlOWMtMzRiOGY0OGVhZTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxh9NOrD4btnfYo8pUysXJAHIVZGpSa4XCHW
WrWoIIv/p4f32CwdVZLkvD6JxOBRWn1VcyBjrVn5Nbo5MUBH/MEYeIlnlSj9Zjxn
q2qrMQmxWpLyA6ua2PL5Z+u1jJUV3PYwklAWY+mlTGglSI53tzrM4rd8YyIQc+Xl
zBVkcZNCBqawBprCZXWr5kMdl1kH+vtHaJhH7DspWnZCGUoHraFsq3YdayfCpeC1
efIgEmHSmlLCD1pXwjBiCQ6s/iTBXLyVI66fsrUKBPY7sIZgob3VPancASDaZe6a
6R4EvLGIxteIMYmS6yN2AuMLwO4egxU6drTBfl50adjz18m72QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF2Crd9Xef3u3EvPQa2WDsnLLKCQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNzE0
Zjg1Yy03YzViLTQ5ZmUtODkxMC1mNWI4MDhlYmI1NTYvNDA0NDljMGItNzk2Ny0z
YWQxLTgwMGQtOTc2NDkyMjAyZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDcxNGY4NWMtN2M1Yi00OWZlLTg5
MTAtZjViODA4ZWJiNTU2L2Q3MTRmODVjLTdjNWItNDlmZS04OTEwLWY1YjgwOGVi
YjU1Ni5jcmwwHwYDVR0jBBgwFoAUJ8M4rcXfwbZdCCLr4v01Uz7VxgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNzE0Zjg1Yy03YzViLTQ5ZmUtODkxMC1mNWI4
MDhlYmI1NTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAviAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG4Rrrafkke9F5P5Pl/5ynmP55tUhZ4qivuust0QY3sscPC/cTUk
zNW8ZxsZU7TWs9S/05hkfRnRIjrWweFjLVW7ANmArirHyrgH74BSf51gQH3rOjPJ
WLZ50jfvt2FF1oLw2OGfJJZkH4Thrt9veFfFxGWG8jn9Ex9uPqKB1bt6fcziJcq8
VTBFJDdnqEwUQa3Sz9YFUbFpimVwwmdlaMQRGWdyjCp5alGJg3hw5LNPaHnSSDKB
lNjvF9NX1oJmdxkK2DMaSH0LPMqyY9IQpAXeD7JTzRuJ0viTWWxvt4dd35lMK1V8
bsBL1FCEUnTOmOYl82kDPsz8/48LstxXFxA=
-----END CERTIFICATE-----
Generated at Sat Jul 11 02:20:47 2026 by rpki-client