Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/f643a4f8-97c9-3b20-8e64-ac228ee56d4e.roa
File:                     f643a4f8-97c9-3b20-8e64-ac228ee56d4e.roa (raw, json)
Hash identifier:          CvNUrliTSxZnj6FjFB/Vmat4x8O2snYnZGr2vArwxro=
Subject key identifier:   E3:2A:F0:9B:4E:3B:1C:CB:7C:79:A7:66:E7:C5:41:EB:FD:CC:A3:EE
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F4328584E2AD450EF775B8C9F4F81DE00
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/f643a4f8-97c9-3b20-8e64-ac228ee56d4e.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     3807
IP address blocks:        207.196.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:50:ef:77:5b:8c:9f:4f:81:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=d394dbd2-33a0-4dc5-ba3f-9800ea395168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:21:c8:00:9e:a8:f3:e7:d2:61:a4:da:42:
                    54:e7:d5:06:2b:52:09:e6:ca:e4:a0:e0:2b:6b:c7:
                    c4:87:5c:04:83:94:4f:f6:75:9c:76:86:8d:5a:a9:
                    66:fd:aa:fe:b3:9f:c6:55:d3:d7:5b:a9:fc:ce:53:
                    0d:36:e6:a9:2a:4e:e7:8a:ad:aa:5e:52:53:d7:63:
                    c3:73:85:9f:91:10:ad:eb:3d:e6:83:c9:cc:90:80:
                    e9:16:d7:cf:c6:67:f8:a8:2c:32:c6:e1:38:36:b6:
                    3c:ea:97:9b:45:4d:4b:a4:67:d9:ca:28:1c:5d:0d:
                    2c:a9:42:72:88:11:62:05:a2:51:13:e3:5e:ae:d3:
                    88:5e:93:78:8e:da:03:c3:ad:36:98:48:33:3c:19:
                    6f:1e:6b:11:93:16:ce:52:12:42:2e:bc:d4:9e:82:
                    19:6e:e6:c0:92:55:d3:f9:4e:fc:63:6a:20:b7:12:
                    30:ba:13:10:73:2c:ea:f6:05:1c:d3:e3:bd:1b:0a:
                    0e:ae:26:d0:20:e9:e3:43:2e:02:40:ee:c5:9d:96:
                    91:5b:77:5c:c2:7f:72:4b:dc:e0:a7:cb:16:db:a7:
                    32:ce:82:e7:2e:53:e4:2b:bd:41:51:2c:1f:03:38:
                    f6:ff:a5:61:a0:a8:d9:c1:4d:14:99:5a:76:76:09:
                    ac:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2A:F0:9B:4E:3B:1C:CB:7C:79:A7:66:E7:C5:41:EB:FD:CC:A3:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/f643a4f8-97c9-3b20-8e64-ac228ee56d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:73:ad:96:d2:1e:9c:6f:2e:66:f6:76:86:c6:45:87:21:89:
         cf:c2:7d:16:7f:b5:ea:1e:80:7f:1e:3d:f2:2b:06:3b:f5:63:
         1c:6b:12:7a:6b:1e:d4:54:e7:8d:71:e7:94:c2:ba:c7:b7:cd:
         7f:63:f5:25:2d:cd:d9:1f:8e:ff:af:5b:66:3b:68:0f:80:8f:
         1a:f5:e0:fe:46:74:fc:36:f1:b2:60:bb:35:38:ba:c0:b8:3a:
         6f:2e:71:ae:f2:d8:a1:6d:33:49:f1:c3:f9:bf:7b:53:ab:6d:
         3f:0b:8a:56:78:34:c9:bb:d2:c6:2a:89:e1:f6:57:a5:b8:71:
         36:4d:0a:63:2f:c7:58:de:c8:56:57:43:07:24:0c:2f:6c:2c:
         f6:ab:53:b3:95:32:90:b5:97:73:3a:06:49:96:00:68:41:8f:
         95:9a:18:e4:9b:9c:a4:e1:37:05:ba:e5:f6:74:a6:9b:12:bc:
         ff:06:a2:aa:92:4f:d3:0f:af:7f:7b:01:3d:9f:6e:48:d7:d5:
         ce:0f:36:22:9d:af:f9:ec:30:73:6f:36:3f:77:0f:7d:1f:17:
         05:35:55:5d:f7:bc:49:f3:f1:a0:82:e7:85:03:48:10:49:63:
         df:bd:d4:fc:eb:69:82:da:8b:b7:c2:3c:c5:22:3a:33:3d:ee:
         53:40:f9:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1FDvd1uMn0+B3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0
MTA3MB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk
ZDM5NGRiZDItMzNhMC00ZGM1LWJhM2YtOTgwMGVhMzk1MTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifkhyACeqPPn0mGk2kJU59UGK1IJ5srkoOAr
a8fEh1wEg5RP9nWcdoaNWqlm/ar+s5/GVdPXW6n8zlMNNuapKk7niq2qXlJT12PD
c4WfkRCt6z3mg8nMkIDpFtfPxmf4qCwyxuE4NrY86pebRU1LpGfZyigcXQ0sqUJy
iBFiBaJRE+NertOIXpN4jtoDw602mEgzPBlvHmsRkxbOUhJCLrzUnoIZbubAklXT
+U78Y2ogtxIwuhMQcyzq9gUc0+O9GwoOribQIOnjQy4CQO7FnZaRW3dcwn9yS9zg
p8sW26cyzoLnLlPkK71BUSwfAzj2/6VhoKjZwU0UmVp2dgmsBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOMq8JtOOxzLfHmnZufFQev9zKPuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj
N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvZjY0M2E0ZjgtOTdjOS0z
YjIwLThlNjQtYWMyMjhlZTU2ZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0
MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz
NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3
ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8S4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKBzrZbSHpxvLmb2dobGRYchic/CfRZ/teoegH8ePfIrBjv1YxxrEnpr
HtRU541x55TCuse3zX9j9SUtzdkfjv+vW2Y7aA+Ajxr14P5GdPw28bJguzU4usC4
Om8uca7y2KFtM0nxw/m/e1OrbT8LilZ4NMm70sYqieH2V6W4cTZNCmMvx1jeyFZX
QwckDC9sLParU7OVMpC1l3M6BkmWAGhBj5WaGOSbnKThNwW65fZ0ppsSvP8GoqqS
T9MPr397AT2fbkjX1c4PNiKdr/nsMHNvNj93D30fFwU1VV33vEnz8aCC54UDSBBJ
Y9+91PzraYLai7fCPMUiOjM97lNA+YI=
-----END CERTIFICATE-----
Generated at Tue Jun 16 11:12:39 2026 by rpki-client