Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa
File:                     3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa (raw, json)
Hash identifier:          KuDsJ6be/vcCLogh19YxNCKROwTho/KUPooEkroYkog=
Subject key identifier:   D4:C1:BE:D5:F3:A7:92:B6:D7:ED:66:CF:84:84:F1:24:D9:FE:36:FA
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584E3764657BAE1B7A8D1AEC7480
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     16904
IP address blocks:        207.191.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:65:7b:ae:1b:7a:8d:1a:ec:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=e53976dd-dcc6-4024-874a-38770e7cffbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:a9:82:11:83:7f:bc:ea:74:99:28:e3:50:
                    e9:21:fe:64:e2:ae:3e:e4:07:1e:21:ed:8e:4c:01:
                    66:6e:cf:51:ce:8b:31:9e:ea:1a:ad:56:0a:08:8a:
                    fd:e9:b7:6e:34:c6:30:df:65:b0:70:cb:b4:25:55:
                    19:df:2e:bb:9f:67:e6:08:71:72:6b:fb:82:2d:ae:
                    45:3e:93:74:9b:c8:aa:10:38:fc:d5:38:78:75:5c:
                    f0:fc:68:1a:b0:4d:77:95:54:8c:dd:9a:0c:68:33:
                    f3:a7:bf:b9:dd:05:f3:6f:1f:c6:24:ac:74:85:69:
                    58:6c:e9:c2:8f:62:62:3c:4e:42:d9:e9:d1:b9:0b:
                    74:9f:04:a9:e7:52:a2:55:87:85:3b:96:72:91:31:
                    1f:74:98:80:d8:25:eb:a6:cb:b0:3b:fa:81:43:a6:
                    7e:95:22:be:7f:8b:e7:19:b8:a7:06:9e:27:3c:fa:
                    84:83:1d:e3:a4:57:c7:b1:59:79:58:2a:e5:bc:9f:
                    2b:29:52:eb:97:53:69:0f:fd:4f:06:61:81:e2:de:
                    41:37:07:c9:16:83:2c:d5:6d:bc:60:9c:02:69:cc:
                    43:61:79:c0:45:02:d3:5e:f5:10:68:4d:e0:20:ee:
                    4b:c9:5f:32:38:b1:ae:01:5f:ce:3f:7b:62:bd:1c:
                    b1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C1:BE:D5:F3:A7:92:B6:D7:ED:66:CF:84:84:F1:24:D9:FE:36:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e8:9e:97:62:41:69:91:c0:08:82:58:11:57:79:34:64:e6:
         94:50:67:50:9f:a6:59:1a:4f:71:61:20:28:e8:79:12:52:06:
         e3:a0:74:5d:18:fd:05:6f:5e:e6:98:83:0a:b2:72:13:7e:64:
         df:bd:9e:c6:f2:7d:e8:67:9e:22:98:a7:90:ff:1c:ec:e4:37:
         64:bd:56:6c:82:cc:10:fa:5f:eb:1f:1d:d7:9f:4b:ef:44:39:
         6f:fa:5f:23:2d:a2:d8:e3:a3:7f:ef:39:47:11:1a:f4:0a:e0:
         08:12:2c:d0:c7:0c:e2:17:f7:ad:d7:56:3a:c9:ea:98:eb:a7:
         27:aa:56:0a:a0:6b:5f:04:19:6a:28:8f:bb:be:ce:7c:73:59:
         63:b6:8b:37:bb:35:f4:1f:2e:4b:38:5a:44:cd:97:83:0e:33:
         c9:db:7b:16:6d:6f:44:f9:b1:92:a2:4a:d0:61:db:db:a1:da:
         92:02:1b:34:cd:86:4b:e6:f1:92:c4:53:74:87:4f:a5:e2:6f:
         e4:d7:4e:28:de:cc:96:48:73:30:b0:18:22:d8:81:8d:cb:2a:
         c6:d4:e6:a4:5f:05:a0:25:c7:e5:ed:92:9d:4c:29:b9:71:9d:
         e6:27:1c:c8:7d:69:a2:2e:9d:3b:ca:8d:70:e5:c2:85:88:26:
         3e:bb:e6:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZGV7rht6jRrsdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
ZTUzOTc2ZGQtZGNjNi00MDI0LTg3NGEtMzg3NzBlN2NmZmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2OpghGDf7zqdJko41DpIf5k4q4+5AceIe2O
TAFmbs9RzosxnuoarVYKCIr96bduNMYw32WwcMu0JVUZ3y67n2fmCHFya/uCLa5F
PpN0m8iqEDj81Th4dVzw/GgasE13lVSM3ZoMaDPzp7+53QXzbx/GJKx0hWlYbOnC
j2JiPE5C2enRuQt0nwSp51KiVYeFO5ZykTEfdJiA2CXrpsuwO/qBQ6Z+lSK+f4vn
GbinBp4nPPqEgx3jpFfHsVl5WCrlvJ8rKVLrl1NpD/1PBmGB4t5BNwfJFoMs1W28
YJwCacxDYXnARQLTXvUQaE3gIO5LyV8yOLGuAV/OP3tivRyxvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNTBvtXzp5K21+1mz4SE8STZ/jb6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvMzYyOGM5ZGQtOGVlMy0z
M2YwLTgwZjItZTBiOTc5ODQzMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz7+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvonpdiQWmRwAiCWBFXeTRk5pRQZ1CfplkaT3FhICjoeRJSBuOgdF0Y
/QVvXuaYgwqychN+ZN+9nsbyfehnniKYp5D/HOzkN2S9VmyCzBD6X+sfHdefS+9E
OW/6XyMtotjjo3/vOUcRGvQK4AgSLNDHDOIX963XVjrJ6pjrpyeqVgqga18EGWoo
j7u+znxzWWO2ize7NfQfLks4WkTNl4MOM8nbexZtb0T5sZKiStBh29uh2pICGzTN
hkvm8ZLEU3SHT6Xib+TXTijezJZIczCwGCLYgY3LKsbU5qRfBaAlx+Xtkp1MKblx
neYnHMh9aaIunTvKjXDlwoWIJj675go=
-----END CERTIFICATE-----
Generated at Fri Jul 10 15:55:44 2026 by rpki-client