Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/4fb105ef-7e3f-301f-b030-e161d2330d74.roa
File:                     4fb105ef-7e3f-301f-b030-e161d2330d74.roa (raw, json)
Hash identifier:          HrAomrz/QEBOSTsei0NPm3Qd72Zo4nHVKEyvzDsBQiQ=
Subject key identifier:   CE:80:0E:7B:78:82:FC:DE:6C:97:79:EB:4E:68:31:75:ED:36:34:E4
Certificate issuer:       /CN=d976d803-9006-4b37-9d12-23e5108d0e94
Certificate serial:       010D0C9F4328584DF210ACF47F501D83E1BAD000
Authority key identifier: 78:E1:07:6B:F3:61:E2:7E:0E:D0:08:5C:7F:63:E4:47:5C:8C:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/4fb105ef-7e3f-301f-b030-e161d2330d74.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     401918
IP address blocks:        96.45.72.0/21 maxlen: 24
                          2604:1f60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/d976d803-9006-4b37-9d12-23e5108d0e94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/d976d803-9006-4b37-9d12-23e5108d0e94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:ac:f4:7f:50:1d:83:e1:ba:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d976d803-9006-4b37-9d12-23e5108d0e94
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=ffd84b49-dd08-4c0c-b63f-0096ef9709e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fc:0a:c7:0b:3d:ce:b4:6e:c9:c7:14:3c:a0:
                    87:e2:68:49:51:73:2e:29:f1:22:67:6b:d6:b8:dd:
                    e1:ee:db:73:8f:df:7b:d6:30:79:5c:9b:19:45:70:
                    d2:e9:0f:9d:bb:40:7c:3a:65:48:ce:c2:77:50:60:
                    9a:6a:5f:08:da:43:8f:f1:ec:e6:7f:88:76:1e:45:
                    04:a8:8a:1a:05:7d:b4:27:9e:a5:07:08:4e:81:94:
                    31:91:ee:6d:43:25:12:d5:5c:31:9e:9c:55:d9:dd:
                    73:6f:2b:af:e7:be:14:21:30:3f:5d:b3:d2:d0:12:
                    9a:16:e3:2b:c1:35:36:c7:b5:2f:a8:b6:c5:22:fa:
                    2f:f2:5f:b7:17:b8:98:a9:c8:3c:9b:ab:26:ff:79:
                    95:ef:fe:ce:98:e2:bf:c3:27:72:94:93:2a:57:77:
                    f9:ac:55:0f:1d:b2:27:99:0a:04:9d:03:ee:b8:f9:
                    3f:4b:98:06:d8:7a:12:36:d9:a5:d5:74:93:df:a3:
                    68:5a:b3:77:b4:83:77:d4:23:28:1b:51:2d:ab:1f:
                    f6:28:51:76:06:86:ac:f6:0a:93:4d:0c:f6:4c:5e:
                    c7:d0:61:d8:3d:3c:b5:db:82:e1:db:78:de:9d:09:
                    42:91:25:1f:0c:a7:4d:3b:fc:1c:4b:bf:f9:ee:9b:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:80:0E:7B:78:82:FC:DE:6C:97:79:EB:4E:68:31:75:ED:36:34:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/4fb105ef-7e3f-301f-b030-e161d2330d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/d976d803-9006-4b37-9d12-23e5108d0e94.crl

            X509v3 Authority Key Identifier:
                keyid:78:E1:07:6B:F3:61:E2:7E:0E:D0:08:5C:7F:63:E4:47:5C:8C:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.72.0/21
                IPv6:
                  2604:1f60::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:16:7f:ec:49:3b:2f:7f:8b:ed:79:5c:8b:ee:3a:46:70:04:
         20:ea:0d:3a:10:97:1c:64:7e:cb:aa:c4:60:fd:7c:31:1a:04:
         2b:ce:c1:cf:f1:04:2d:e0:59:64:bb:6b:4c:07:1d:e2:2b:bc:
         a6:53:9b:a7:c2:c9:e9:87:2e:70:3a:d4:1c:fb:a0:a9:25:94:
         9e:6d:21:71:ab:8c:9a:71:2d:46:ea:ee:1a:94:e7:71:cd:2b:
         ad:09:c9:ed:41:26:25:7a:68:6d:6f:13:1b:b8:24:77:4d:0f:
         91:4a:55:50:f7:eb:70:3b:1c:d2:be:c0:30:b6:51:00:52:4f:
         c3:64:18:75:57:c0:92:a0:82:4f:99:3b:cc:29:a8:a9:36:9f:
         e5:35:17:a4:bc:1a:cf:ab:e4:fb:f7:47:d8:7f:5d:39:15:a9:
         2d:17:56:13:55:61:cb:44:7b:b7:58:af:68:3d:b4:71:1f:ae:
         49:94:8c:b1:39:83:4b:39:fb:45:3f:b0:49:67:7d:e0:d3:c0:
         eb:e4:0a:9f:31:1c:04:7a:6f:57:de:24:1a:fc:06:33:0f:2f:
         ca:83:31:59:db:33:3e:8d:3a:0a:bc:13:65:f3:97:d3:00:ca:
         26:dc:c7:51:9f:d1:53:ec:36:d9:e7:bd:e8:30:c1:9d:d6:21:
         6a:5d:f9:c4
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE3yEKz0f1Adg+G60AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDk3NmQ4MDMtOTAwNi00YjM3LTlkMTItMjNlNTEwOGQw
ZTk0MB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk
ZmZkODRiNDktZGQwOC00YzBjLWI2M2YtMDA5NmVmOTcwOWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/wKxws9zrRuyccUPKCH4mhJUXMuKfEiZ2vW
uN3h7ttzj9971jB5XJsZRXDS6Q+du0B8OmVIzsJ3UGCaal8I2kOP8ezmf4h2HkUE
qIoaBX20J56lBwhOgZQxke5tQyUS1VwxnpxV2d1zbyuv574UITA/XbPS0BKaFuMr
wTU2x7UvqLbFIvov8l+3F7iYqcg8m6sm/3mV7/7OmOK/wydylJMqV3f5rFUPHbIn
mQoEnQPuuPk/S5gG2HoSNtml1XST36NoWrN3tIN31CMoG1Etqx/2KFF2Boas9gqT
TQz2TF7H0GHYPTy124Lh23jenQlCkSUfDKdNO/wcS7/57pvRmQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFM6ADnt4gvzebJd5605oMXXtNjTkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kOTc2
ZDgwMy05MDA2LTRiMzctOWQxMi0yM2U1MTA4ZDBlOTQvNGZiMTA1ZWYtN2UzZi0z
MDFmLWIwMzAtZTE2MWQyMzMwZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDk3NmQ4MDMtOTAwNi00YjM3LTlk
MTItMjNlNTEwOGQwZTk0L2Q5NzZkODAzLTkwMDYtNGIzNy05ZDEyLTIzZTUxMDhk
MGU5NC5jcmwwHwYDVR0jBBgwFoAUeOEHa/Nh4n4O0Ahcf2PkR1yM2TswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kOTc2ZDgwMy05MDA2LTRiMzctOWQxMi0yM2U1
MTA4ZDBlOTQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDYC1IMA0E
AgACMAcDBQAmBB9gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAHYWf+xJOy9/i+15XIvuOkZwBCDqDToQlxxk
fsuqxGD9fDEaBCvOwc/xBC3gWWS7a0wHHeIrvKZTm6fCyemHLnA61Bz7oKkllJ5t
IXGrjJpxLUbq7hqU53HNK60Jye1BJiV6aG1vExu4JHdND5FKVVD363A7HNK+wDC2
UQBST8NkGHVXwJKggk+ZO8wpqKk2n+U1F6S8Gs+r5Pv3R9h/XTkVqS0XVhNVYctE
e7dYr2g9tHEfrkmUjLE5g0s5+0U/sElnfeDTwOvkCp8xHAR6b1feJBr8BjMPL8qD
MVnbMz6NOgq8E2Xzl9MAyibcx1Gf0VPsNtnnvegwwZ3WIWpd+cQ=
-----END CERTIFICATE-----
Generated at Mon Jun 1 22:03:50 2026 by rpki-client