Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/6dd2edb6-d2bf-3928-96d5-5d669e7b5706.roa
File:                     6dd2edb6-d2bf-3928-96d5-5d669e7b5706.roa (raw, json)
Hash identifier:          dsWzzdLe8OV5npecQ0g6r5x83SV4Y12tQSoSco0wRyc=
Subject key identifier:   AE:E6:A1:F5:2A:1C:7C:3C:CE:CD:14:B0:4B:3A:C9:47:D0:7A:34:50
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F4328584F6F2304CE3D3FA95D282EA6A8
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/6dd2edb6-d2bf-3928-96d5-5d669e7b5706.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     3807
IP address blocks:        150.131.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:04:ce:3d:3f:a9:5d:28:2e:a6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=7fca3192-643e-4496-8c9f-93140a2dd686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f8:6a:58:dd:71:d8:c4:bf:a5:fd:63:ab:b8:
                    63:70:f5:90:8d:dc:7f:6a:bc:9b:86:b5:34:db:1b:
                    71:7c:4b:ef:58:a2:d7:90:a7:f9:a7:f5:d7:60:6c:
                    ec:68:1a:b6:10:8b:3e:82:55:67:1e:be:fc:0e:8b:
                    8a:c8:02:2b:43:06:8d:9d:a7:bc:4d:d8:6a:00:01:
                    3a:63:ca:86:75:79:d6:cb:ce:dd:91:60:68:6b:16:
                    2f:f6:e4:b2:e5:50:fc:78:cb:63:c0:fe:f5:27:b3:
                    ca:3c:81:58:1f:51:46:58:e2:bb:2b:06:97:63:72:
                    34:30:0b:4d:63:3f:25:68:d2:2c:0e:6d:24:42:f8:
                    01:ea:71:2c:27:9a:87:52:ee:50:5b:ee:f4:14:43:
                    bf:a7:cc:09:82:ff:77:8a:4c:26:9b:13:43:74:d8:
                    9a:cc:18:2f:e9:45:6e:56:dc:83:63:14:d5:d5:7a:
                    7e:6b:72:d7:49:8e:fc:0c:38:37:fd:a8:a8:68:1b:
                    a1:2e:4f:fb:db:7d:36:dc:d5:ca:6e:14:4f:4a:af:
                    85:7b:e7:9d:a0:1e:7d:df:cf:3e:77:f8:2e:e4:ca:
                    ce:18:a2:39:02:da:a3:15:e4:33:9c:82:ee:d5:bc:
                    f0:f2:7f:e1:9f:d9:4c:65:c0:ea:d1:7e:b9:cb:38:
                    2d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E6:A1:F5:2A:1C:7C:3C:CE:CD:14:B0:4B:3A:C9:47:D0:7A:34:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/6dd2edb6-d2bf-3928-96d5-5d669e7b5706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.131.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f6:8d:bd:f7:88:fb:8e:ce:0d:df:58:ac:5a:a6:51:0f:d6:
         ce:61:65:6b:dc:49:a3:1f:7b:bf:9e:df:de:cd:94:30:4f:ab:
         26:5a:d9:f4:62:0f:b4:71:f0:d5:6d:f7:8f:69:bb:61:08:53:
         c9:99:e2:25:24:6e:9a:17:d7:73:10:e5:62:19:52:1c:3a:ac:
         51:42:02:87:63:41:2c:5b:20:c6:9a:44:12:3f:e8:3b:60:69:
         77:cd:f9:1e:2a:08:19:78:ad:f9:aa:ae:10:82:97:8a:48:93:
         c0:55:3f:61:05:02:ee:d1:28:29:9e:da:19:3c:ab:4e:d8:50:
         3a:f6:12:d9:8c:3a:2c:c9:6e:b6:48:72:7f:2c:2a:1e:b5:90:
         d1:bf:d1:2b:a5:61:bd:de:cb:e4:a4:e2:1e:04:6f:cd:a9:e7:
         09:45:bc:ce:a0:df:bc:23:df:90:e9:18:02:b6:8a:aa:07:cb:
         93:da:9e:30:8a:57:5f:4e:73:ab:b3:e4:ee:20:be:f9:b1:5d:
         3f:0a:09:b9:a8:03:64:b4:3c:58:1d:7d:02:0f:fb:cb:a3:27:
         02:e3:03:35:96:01:b6:06:6a:f7:25:1d:a2:cb:9d:31:7a:41:
         25:73:63:3e:b1:9a:74:17:3d:a1:02:4b:6b:d1:3d:a9:c4:f4:
         71:fe:7a:5b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9vIwTOPT+pXSgupqgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0
MTA3MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
N2ZjYTMxOTItNjQzZS00NDk2LThjOWYtOTMxNDBhMmRkNjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfhqWN1x2MS/pf1jq7hjcPWQjdx/arybhrU0
2xtxfEvvWKLXkKf5p/XXYGzsaBq2EIs+glVnHr78DouKyAIrQwaNnae8TdhqAAE6
Y8qGdXnWy87dkWBoaxYv9uSy5VD8eMtjwP71J7PKPIFYH1FGWOK7KwaXY3I0MAtN
Yz8laNIsDm0kQvgB6nEsJ5qHUu5QW+70FEO/p8wJgv93ikwmmxNDdNiazBgv6UVu
VtyDYxTV1Xp+a3LXSY78DDg3/aioaBuhLk/723023NXKbhRPSq+Fe+edoB59388+
d/gu5MrOGKI5AtqjFeQznILu1bzw8n/hn9lMZcDq0X65yzgtiwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK7mofUqHHw8zs0UsEs6yUfQejRQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj
N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvNmRkMmVkYjYtZDJiZi0z
OTI4LTk2ZDUtNWQ2NjllN2I1NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0
MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz
NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3
ZTI1MzQxMDcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAloMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUfaNvfeI+47ODd9YrFqmUQ/WzmFla9xJox97v57f3s2UME+rJlrZ9GIP
tHHw1W33j2m7YQhTyZniJSRumhfXcxDlYhlSHDqsUUICh2NBLFsgxppEEj/oO2Bp
d835HioIGXit+aquEIKXikiTwFU/YQUC7tEoKZ7aGTyrTthQOvYS2Yw6LMlutkhy
fywqHrWQ0b/RK6Vhvd7L5KTiHgRvzannCUW8zqDfvCPfkOkYAraKqgfLk9qeMIpX
X05zq7Pk7iC++bFdPwoJuagDZLQ8WB19Ag/7y6MnAuMDNZYBtgZq9yUdosudMXpB
JXNjPrGadBc9oQJLa9E9qcT0cf56Ww==
-----END CERTIFICATE-----
Generated at Wed Oct 14 07:54:27 2026 by rpki-client