Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/f1d24be6-c34e-302c-8efb-57c85e6c6673.roa
File:                     f1d24be6-c34e-302c-8efb-57c85e6c6673.roa (raw, json)
Hash identifier:          MEA18fMYHX0qVBxMEv/sdIE2aMSFMLSCxEH7hH2aPlk=
Subject key identifier:   12:B3:BB:7F:3C:F6:64:BD:BD:0C:07:6C:65:65:D8:02:9C:1A:25:99
Certificate issuer:       /CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
Certificate serial:       010D0C9F4328584E43F4790808AE9FC9314F5E00
Authority key identifier: 0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/f1d24be6-c34e-302c-8efb-57c85e6c6673.roa
Signing time:             Tue 23 Jun 2026 09:00:12 +0000
ROA not before:           Tue 23 Jun 2026 09:00:12 +0000
ROA not after:            Mon 21 Sep 2026 09:00:12 +0000
asID:                     396982
IP address blocks:        2605:a7c0::/32 maxlen: 48
                          2620:df:4000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:43:f4:79:08:08:ae:9f:c9:31:4f:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
        Validity
            Not Before: Jun 23 09:00:12 2026 GMT
            Not After : Sep 21 09:00:12 2026 GMT
        Subject: CN=804e83c1-0b7c-4071-9916-2f941b1e7cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d4:d5:bc:76:79:9b:f6:8d:a0:98:9a:e0:10:
                    d5:5e:2b:17:2b:4c:c3:ed:29:6c:38:71:a6:d0:e6:
                    c7:93:ff:e3:17:34:02:21:62:15:86:f8:6e:45:c5:
                    22:ce:25:57:3f:f5:5f:25:de:7d:0a:fa:57:e2:d5:
                    f8:07:7f:11:3f:b6:d3:0a:32:a2:45:d2:2f:15:87:
                    5f:b0:82:7f:08:ec:98:ff:48:41:c0:48:1a:fc:0c:
                    98:0d:f7:72:4e:8f:a8:32:94:1e:ad:4e:0a:6d:19:
                    15:75:03:96:ca:80:14:ee:6e:a8:a2:84:8a:76:2b:
                    3b:d0:e7:62:0f:e0:bf:16:3f:e2:4f:d8:d7:e6:8b:
                    23:d9:ae:e9:23:65:58:33:47:c2:cd:81:6f:5a:29:
                    6e:73:cf:4a:18:99:a9:74:aa:b0:0e:25:27:4d:f5:
                    76:38:22:24:21:3e:7e:d0:60:0f:fa:d2:62:7b:39:
                    75:c9:0b:5c:e6:f5:1f:d5:14:80:70:02:bb:d0:af:
                    57:83:f1:5f:b2:0d:da:a9:71:a9:35:d3:2e:a2:4b:
                    e3:28:ad:6a:85:ae:05:7b:1a:7e:37:8b:2d:04:8d:
                    62:24:ad:9d:53:a1:e2:10:aa:0f:5d:ed:22:6e:27:
                    b0:58:b2:ad:55:b2:4a:d3:18:c0:fc:70:6f:d8:51:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B3:BB:7F:3C:F6:64:BD:BD:0C:07:6C:65:65:D8:02:9C:1A:25:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/f1d24be6-c34e-302c-8efb-57c85e6c6673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a7c0::/32
                  2620:df:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:2a:1f:e8:7b:fe:5f:12:df:15:ff:1a:f5:01:fb:68:99:b4:
         5b:73:c0:1a:f8:f9:75:ec:9c:51:6c:e2:32:42:46:30:d9:37:
         57:dd:f5:02:3e:7c:b7:62:10:13:73:09:6e:e6:3e:6f:21:81:
         6a:23:02:c0:a1:fa:f6:1f:69:f2:44:3d:66:c2:de:4f:03:3e:
         ba:d4:f8:07:9d:72:96:74:ff:0d:07:05:c1:43:e8:93:09:ed:
         ae:f5:14:f9:63:14:2b:ee:71:13:5e:45:bd:7e:7d:37:9d:d4:
         79:d3:09:77:cd:b1:78:ad:92:da:f5:fd:4d:dc:61:2a:d6:c4:
         24:67:f5:48:52:7a:a2:7c:57:e6:06:34:4b:9c:ba:7d:2e:a0:
         15:90:9b:d7:40:f7:ab:c3:d1:40:37:ee:3c:5e:87:c1:00:05:
         b5:82:01:65:87:bc:2c:bf:b5:0a:da:69:b1:38:9f:0f:85:17:
         f1:9b:a6:35:86:55:65:a4:ec:49:e4:99:5c:e9:a9:a4:7c:d7:
         a0:00:05:3d:80:a1:ff:13:d2:12:88:2d:32:a2:c9:48:51:62:
         d3:f4:00:1b:69:db:56:b3:88:2f:5f:c4:48:1f:c5:de:35:66:
         76:29:fd:8c:d9:fb:e0:b8:0c:7e:65:69:b0:26:1a:58:9d:73:
         15:10:b3:f8
-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgIUAQ0Mn0MoWE5D9HkICK6fyTFPXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU4MmRmMTYtYzY1Zi00NTJmLWFjNGEtYTFkM2FmNmY4
YWQxMB4XDTI2MDYyMzA5MDAxMloXDTI2MDkyMTA5MDAxMlowLzEtMCsGA1UEAxMk
ODA0ZTgzYzEtMGI3Yy00MDcxLTk5MTYtMmY5NDFiMWU3Y2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotTVvHZ5m/aNoJia4BDVXisXK0zD7SlsOHGm
0ObHk//jFzQCIWIVhvhuRcUiziVXP/VfJd59CvpX4tX4B38RP7bTCjKiRdIvFYdf
sIJ/COyY/0hBwEga/AyYDfdyTo+oMpQerU4KbRkVdQOWyoAU7m6oooSKdis70Odi
D+C/Fj/iT9jX5osj2a7pI2VYM0fCzYFvWiluc89KGJmpdKqwDiUnTfV2OCIkIT5+
0GAP+tJiezl1yQtc5vUf1RSAcAK70K9Xg/Ffsg3aqXGpNdMuokvjKK1qha4Fexp+
N4stBI1iJK2dU6HiEKoPXe0ibiewWLKtVbJK0xjA/HBv2FG1owIDAQABo4IDXzCC
A1swHQYDVR0OBBYEFBKzu3889mS9vQwHbGVl2AKcGiWZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNTgy
ZGYxNi1jNjVmLTQ1MmYtYWM0YS1hMWQzYWY2ZjhhZDEvZjFkMjRiZTYtYzM0ZS0z
MDJjLThlZmItNTdjODVlNmM2NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjU4MmRmMTYtYzY1Zi00NTJmLWFj
NGEtYTFkM2FmNmY4YWQxL2I1ODJkZjE2LWM2NWYtNDUyZi1hYzRhLWExZDNhZjZm
OGFkMS5jcmwwHwYDVR0jBBgwFoAUDKVnxol+3I0MmsfLs0X47zkTrbEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNTgyZGYxNi1jNjVmLTQ1MmYtYWM0YS1hMWQz
YWY2ZjhhZDEuY2VyMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwUAJgWnwAMH
BCYgAN9AADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQDbKh/oe/5fEt8V/xr1AftombRbc8Aa+Pl17JxRbOIy
QkYw2TdX3fUCPny3YhATcwlu5j5vIYFqIwLAofr2H2nyRD1mwt5PAz661PgHnXKW
dP8NBwXBQ+iTCe2u9RT5YxQr7nETXkW9fn03ndR50wl3zbF4rZLa9f1N3GEq1sQk
Z/VIUnqifFfmBjRLnLp9LqAVkJvXQPerw9FAN+48XofBAAW1ggFlh7wsv7UK2mmx
OJ8PhRfxm6Y1hlVlpOxJ5Jlc6amkfNegAAU9gKH/E9ISiC0yoslIUWLT9AAbadtW
s4gvX8RIH8XeNWZ2Kf2M2fvguAx+ZWmwJhpYnXMVELP4
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:29:41 2026 by rpki-client