Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/ad9c33e3-f895-3023-b635-848c9cc54c08.roa
File:                     ad9c33e3-f895-3023-b635-848c9cc54c08.roa (raw, json)
Hash identifier:          OJRohwe8kl9G/NiQ2ELfrIv4GSVVYmqjzSXyW1LRTeU=
Subject key identifier:   45:9D:3B:EE:39:14:91:E8:01:EF:3A:1F:BF:CF:87:E1:F0:5C:72:4D
Certificate issuer:       /CN=9305060e-d479-4a8f-8eba-23b31106c750
Certificate serial:       010D0C9F4328584EE0C209D527E34F34533DA0C0
Authority key identifier: CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/ad9c33e3-f895-3023-b635-848c9cc54c08.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2601:1904:1140::/44 maxlen: 48
                          2601:1904:1180::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:09:d5:27:e3:4f:34:53:3d:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9305060e-d479-4a8f-8eba-23b31106c750
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=c858f824-aab2-4033-8c7c-ac0d76c4cdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:c8:62:f9:c8:dc:c6:e5:62:9f:12:b9:21:
                    5c:d3:3d:c7:8d:e3:23:c7:cd:ed:2d:af:30:41:52:
                    f3:c9:85:ba:a0:93:93:c6:54:fc:f0:92:ba:94:4c:
                    d1:07:2c:0a:2f:37:36:74:49:5c:bb:ba:de:51:fc:
                    2a:04:b3:f0:74:7f:97:95:3c:98:49:66:8e:2e:63:
                    31:4f:3e:7c:dc:1a:d6:20:40:43:c2:d0:e6:b1:80:
                    e8:33:ef:fc:44:16:08:8d:50:96:69:68:7a:97:d4:
                    7c:17:32:ab:15:35:6f:e7:5a:0d:f2:8e:ad:1b:f5:
                    cd:5c:9b:46:8a:55:b5:fd:5a:1b:ee:d2:de:7e:a4:
                    7a:1a:21:37:43:fa:98:16:34:2d:6a:32:b5:fb:28:
                    00:b1:9c:34:63:6a:48:cf:28:3a:b1:42:76:c5:63:
                    5f:38:44:0e:8e:da:6c:ae:05:50:24:50:f5:02:63:
                    88:3b:bc:56:f8:2b:35:f9:45:36:2f:fa:6f:60:cd:
                    bd:42:42:02:e1:81:56:ba:a8:c3:25:92:10:ec:46:
                    26:66:9b:08:a1:a4:54:6f:21:01:35:41:84:14:78:
                    07:8b:35:8e:38:65:af:69:0d:9d:fa:2b:c9:43:a1:
                    46:49:4c:7a:d2:f6:ee:ad:11:fd:e0:e1:0d:ec:1c:
                    11:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9D:3B:EE:39:14:91:E8:01:EF:3A:1F:BF:CF:87:E1:F0:5C:72:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/ad9c33e3-f895-3023-b635-848c9cc54c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl

            X509v3 Authority Key Identifier:
                keyid:CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1904:1140::/44
                  2601:1904:1180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:35:59:53:ee:0e:fb:e3:fa:59:42:f5:e2:40:c1:ec:5d:ed:
         dc:d8:28:e4:39:46:db:1d:45:da:ac:14:2a:22:7b:c4:34:0e:
         c5:15:84:e1:01:a7:39:96:a4:0c:e8:4d:6f:5d:d7:0b:e9:bb:
         45:ff:dc:b8:d2:7a:ef:c8:4c:44:b8:42:d2:56:a0:36:d4:64:
         62:b6:f1:4d:45:d7:e0:83:e3:62:c9:37:dc:54:61:73:1b:e7:
         8c:9d:34:d6:22:79:21:82:4d:bb:63:b3:97:db:9d:d6:16:ed:
         05:ca:2e:66:bd:dd:08:40:ed:94:3c:2d:78:c7:5e:8b:9b:0a:
         14:80:59:f8:ac:34:23:b2:f1:85:be:08:4c:10:93:dc:6a:01:
         fe:ad:02:ea:e7:a2:01:78:ef:d2:29:fa:da:c4:3e:1c:d9:da:
         04:35:44:91:98:93:ef:cc:c2:ed:99:33:c4:be:e1:c7:ee:c8:
         e7:c7:c2:d4:88:12:e6:d6:c6:c7:bb:86:15:96:b9:0e:14:26:
         e0:e7:f0:14:6f:df:1d:6a:8e:aa:20:c6:2f:d6:eb:97:96:28:
         e6:b5:ee:04:66:cd:a4:60:b4:96:31:48:59:46:b3:1c:e6:44:
         2b:48:7e:fc:8d:50:28:04:dd:96:58:48:a6:96:8f:c1:c9:08:
         a4:a4:28:38
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE7gwgnVJ+NPNFM9oMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTMwNTA2MGUtZDQ3OS00YThmLThlYmEtMjNiMzExMDZj
NzUwMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
Yzg1OGY4MjQtYWFiMi00MDMzLThjN2MtYWMwZDc2YzRjZGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/TIYvnI3MblYp8SuSFc0z3HjeMjx83tLa8w
QVLzyYW6oJOTxlT88JK6lEzRBywKLzc2dElcu7reUfwqBLPwdH+XlTyYSWaOLmMx
Tz583BrWIEBDwtDmsYDoM+/8RBYIjVCWaWh6l9R8FzKrFTVv51oN8o6tG/XNXJtG
ilW1/Vob7tLefqR6GiE3Q/qYFjQtajK1+ygAsZw0Y2pIzyg6sUJ2xWNfOEQOjtps
rgVQJFD1AmOIO7xW+Cs1+UU2L/pvYM29QkIC4YFWuqjDJZIQ7EYmZpsIoaRUbyEB
NUGEFHgHizWOOGWvaQ2d+ivJQ6FGSUx60vburRH94OEN7BwRSwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFEWdO+45FJHoAe86H7/Ph+HwXHJNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85MzA1
MDYwZS1kNDc5LTRhOGYtOGViYS0yM2IzMTEwNmM3NTAvYWQ5YzMzZTMtZjg5NS0z
MDIzLWI2MzUtODQ4YzljYzU0YzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTMwNTA2MGUtZDQ3OS00YThmLThl
YmEtMjNiMzExMDZjNzUwLzkzMDUwNjBlLWQ0NzktNGE4Zi04ZWJhLTIzYjMxMTA2
Yzc1MC5jcmwwHwYDVR0jBBgwFoAUzRCWmVrmSJONILPVSAqCYXP15AEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85MzA1MDYwZS1kNDc5LTRhOGYtOGViYS0yM2Iz
MTEwNmM3NTAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEJgEZBBFA
AwcEJgEZBBGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACE1WVPuDvvj+llC9eJAwexd7dzYKOQ5RtsdRdqs
FCoie8Q0DsUVhOEBpzmWpAzoTW9d1wvpu0X/3LjSeu/ITES4QtJWoDbUZGK28U1F
1+CD42LJN9xUYXMb54ydNNYieSGCTbtjs5fbndYW7QXKLma93QhA7ZQ8LXjHXoub
ChSAWfisNCOy8YW+CEwQk9xqAf6tAurnogF479Ip+trEPhzZ2gQ1RJGYk+/Mwu2Z
M8S+4cfuyOfHwtSIEubWxse7hhWWuQ4UJuDn8BRv3x1qjqogxi/W65eWKOa17gRm
zaRgtJYxSFlGsxzmRCtIfvyNUCgE3ZZYSKaWj8HJCKSkKDg=
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:40:19 2026 by rpki-client