Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45727758-d36f-3a6f-9fa5-7d673c087a7a.roa
File:                     45727758-d36f-3a6f-9fa5-7d673c087a7a.roa (raw, json)
Hash identifier:          2cz8lTYXRbCok895ko0GqmjCPp6KyCCaQ05q0AJz2ak=
Subject key identifier:   E4:BC:C3:02:B9:DC:65:95:B5:71:F5:E5:BD:1A:88:EA:9F:E8:5E:C9
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584CC777478865A3E6059337E500
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45727758-d36f-3a6f-9fa5-7d673c087a7a.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     45102
IP address blocks:        206.54.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:47:88:65:a3:e6:05:93:37:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=d96b3ded-4141-4b61-92ab-889dd83ffdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:f7:2a:1f:d5:15:b6:ec:06:fc:f9:8d:e9:
                    8d:a9:54:2e:50:b4:e6:c8:b6:c3:37:3f:3f:eb:00:
                    c0:8e:9b:3a:3c:0e:a4:b3:8a:5c:42:95:56:73:43:
                    86:4c:19:af:05:92:b0:f1:f3:9e:b9:b9:8d:29:ca:
                    24:50:d3:04:23:7f:e2:f2:97:84:2e:94:9e:e6:fc:
                    bb:0b:65:ac:e9:b1:d5:8f:62:0b:1f:e8:1d:82:83:
                    b1:e8:ab:ef:83:2e:15:10:5a:08:34:9d:82:f4:28:
                    a3:91:17:79:e2:1e:85:89:03:90:ae:92:45:b7:de:
                    98:22:55:eb:98:1a:86:1f:ad:21:92:2e:45:41:50:
                    9b:42:36:09:f8:c9:73:ed:a8:51:25:a2:3e:b0:6e:
                    ed:45:6d:3e:18:19:67:a9:53:c5:08:2f:a6:40:e9:
                    6a:b9:ee:41:1d:6b:8e:39:71:3a:10:41:32:c1:f2:
                    e5:2c:ed:8b:2e:b8:58:51:02:ae:01:c2:76:3c:11:
                    24:78:2c:19:2c:b5:3e:b5:d5:32:d5:be:f9:af:76:
                    74:78:c0:70:1e:3c:b7:41:7a:56:b6:88:91:1d:aa:
                    af:2f:d5:42:e4:90:1b:b8:f2:10:28:26:e3:81:08:
                    84:a4:6a:e2:4f:d3:a3:2d:24:01:95:6d:f0:dc:95:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BC:C3:02:B9:DC:65:95:B5:71:F5:E5:BD:1A:88:EA:9F:E8:5E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45727758-d36f-3a6f-9fa5-7d673c087a7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:1c:68:74:41:15:ed:5d:94:e4:cb:b8:e4:ec:2e:d9:15:f4:
         f8:61:67:17:7e:75:04:cb:e8:b1:a4:7d:15:17:88:e5:c4:6b:
         28:ac:e2:22:14:16:ca:45:8b:13:55:b5:42:30:5c:a6:a3:bc:
         d4:94:0e:c9:4a:fe:93:47:e1:da:0f:0d:66:4a:52:91:49:17:
         40:5f:de:30:42:e8:49:dc:88:84:f0:4b:bc:10:8d:80:61:e7:
         c7:37:33:f9:65:0c:e8:b3:55:be:de:20:bd:31:31:ab:62:63:
         ee:0c:d6:82:b1:2d:f0:56:79:e2:64:19:de:2d:9e:e8:62:eb:
         c3:60:b6:42:70:4f:3e:e1:53:fa:ea:b2:5f:a9:eb:4e:31:35:
         be:42:81:82:b7:f2:9e:ef:a8:b4:f8:6c:2b:45:bc:68:3e:a8:
         bb:f4:b2:19:e2:22:17:ce:18:4f:39:15:89:c4:95:18:96:e6:
         08:20:5e:aa:b4:a2:c4:89:de:af:32:b0:8a:ae:8c:d8:c1:00:
         07:70:9c:d5:75:48:02:eb:c8:ba:13:bb:29:42:f1:46:54:f9:
         0b:1f:80:e7:2e:e9:db:5f:73:65:ec:bc:1e:df:ae:46:01:b9:
         fb:36:a6:a3:15:26:0d:7a:2a:f9:66:bc:a0:26:02:3f:c7:c0:
         29:8c:78:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd0eIZaPmBZM35QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk
ZDk2YjNkZWQtNDE0MS00YjYxLTkyYWItODg5ZGQ4M2ZmZGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO33Kh/VFbbsBvz5jemNqVQuULTmyLbDNz8/
6wDAjps6PA6ks4pcQpVWc0OGTBmvBZKw8fOeubmNKcokUNMEI3/i8peELpSe5vy7
C2Ws6bHVj2ILH+gdgoOx6Kvvgy4VEFoINJ2C9CijkRd54h6FiQOQrpJFt96YIlXr
mBqGH60hki5FQVCbQjYJ+Mlz7ahRJaI+sG7tRW0+GBlnqVPFCC+mQOlque5BHWuO
OXE6EEEywfLlLO2LLrhYUQKuAcJ2PBEkeCwZLLU+tdUy1b75r3Z0eMBwHjy3QXpW
toiRHaqvL9VC5JAbuPIQKCbjgQiEpGriT9OjLSQBlW3w3JUn8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOS8wwK53GWVtXH15b0aiOqf6F7JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDU3Mjc3NTgtZDM2Zi0z
YTZmLTlmYTUtN2Q2NzNjMDg3YTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzjYgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMkcaHRBFe1dlOTLuOTsLtkV9PhhZxd+dQTL6LGkfRUXiOXEayis4iIU
FspFixNVtUIwXKajvNSUDslK/pNH4doPDWZKUpFJF0Bf3jBC6EnciITwS7wQjYBh
58c3M/llDOizVb7eIL0xMatiY+4M1oKxLfBWeeJkGd4tnuhi68NgtkJwTz7hU/rq
sl+p604xNb5CgYK38p7vqLT4bCtFvGg+qLv0shniIhfOGE85FYnElRiW5gggXqq0
osSJ3q8ysIqujNjBAAdwnNV1SALryLoTuylC8UZU+QsfgOcu6dtfc2XsvB7frkYB
ufs2pqMVJg16KvlmvKAmAj/HwCmMeL0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:13 2026 by rpki-client