Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa
File:                     01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa (raw, json)
Hash identifier:          7yT9f2iy5rcNsAvTW3YbG0rTC7/86QEMlwLsl74ufKA=
Subject key identifier:   C3:9A:04:99:9A:DE:E7:EE:67:63:F5:B1:D1:30:C9:97:EF:0D:A9:94
Certificate issuer:       /CN=6540401b-bc62-439f-9a85-287ef16081ad
Certificate serial:       010D0C9F4328584DEDE09D8A6D4E489FA8164700
Authority key identifier: A2:7C:FE:71:E6:65:08:81:9E:CA:16:C7:7B:98:38:5A:8A:0F:F1:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     46656
IP address blocks:        204.145.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:9d:8a:6d:4e:48:9f:a8:16:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6540401b-bc62-439f-9a85-287ef16081ad
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=f715925d-dbbc-4413-83a6-6c9393fb675e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2b:d1:6c:d5:3a:60:90:81:91:37:e4:28:88:
                    f9:d0:64:33:6e:dc:c9:8a:8c:2a:4e:da:38:f6:b1:
                    d2:ab:95:a4:37:9c:4a:57:c7:33:91:77:38:10:ef:
                    a4:f5:c0:b7:54:75:26:41:76:98:93:f4:c5:25:f0:
                    d9:33:c5:1f:69:88:95:61:5a:cc:ca:3b:88:e6:90:
                    f2:7b:d2:1c:50:c0:cb:a8:12:f5:24:dd:e2:9b:14:
                    f4:0a:92:b8:74:f9:20:45:e1:7c:46:01:4a:99:66:
                    fb:b6:e2:cd:fe:79:5e:4c:5c:a5:9f:71:13:e3:7f:
                    b7:4f:3d:40:c7:ba:4e:9c:b4:ed:f6:1f:e8:21:23:
                    8f:a9:40:09:02:99:ea:c2:ba:7d:1c:fc:c4:cf:d0:
                    0b:eb:e0:e7:bc:fb:3d:99:26:a9:66:d2:bc:b0:35:
                    f3:b0:09:a7:27:52:18:df:05:3b:0c:38:c1:8d:66:
                    cc:03:fb:b3:16:1d:7b:83:70:f5:b5:3c:8a:18:bc:
                    5d:cf:86:39:1d:68:c5:3f:a9:52:39:b9:0f:b9:c8:
                    bc:9d:7a:4a:f9:f6:44:e3:7f:5d:8d:66:0a:a3:50:
                    25:c7:6f:1b:1a:a9:9c:d5:c4:30:1b:e1:df:6d:2a:
                    e3:28:83:27:2a:25:8d:ae:e0:f1:e5:e2:62:e4:36:
                    50:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9A:04:99:9A:DE:E7:EE:67:63:F5:B1:D1:30:C9:97:EF:0D:A9:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.crl

            X509v3 Authority Key Identifier:
                keyid:A2:7C:FE:71:E6:65:08:81:9E:CA:16:C7:7B:98:38:5A:8A:0F:F1:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.145.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:04:b0:8d:54:84:70:c7:3d:0d:3f:3d:1b:55:ed:b2:88:21:
         71:72:89:68:f0:5f:95:f8:2f:9d:48:e4:92:ad:0c:49:4a:b7:
         f0:25:93:08:64:92:b5:e3:81:46:89:3a:8f:c2:c8:a4:c1:c3:
         14:cf:49:fe:f3:f9:8d:e4:3c:d2:f3:4b:12:d3:46:a1:64:c9:
         03:0f:16:f3:15:be:b2:5d:84:b9:7d:6c:8e:94:07:47:e6:12:
         33:07:d5:95:59:9c:62:93:4c:dc:40:f4:34:cc:06:c5:f7:ab:
         fc:97:aa:0f:03:14:34:65:92:5e:16:ff:7f:07:dd:5c:22:7f:
         e7:27:c2:5f:70:60:ee:63:21:e7:39:57:80:36:4d:1e:de:99:
         37:6a:23:cc:2f:57:77:b8:90:ec:7d:53:5c:6f:b7:a3:24:57:
         82:b2:e7:90:8d:bb:7b:4e:9d:b9:27:1b:8b:9d:d8:4e:5c:82:
         05:c1:b8:7f:1d:66:01:6d:5b:54:98:95:a1:c0:54:bf:b5:32:
         66:00:5c:35:20:17:0b:49:6f:13:85:80:77:4b:78:ab:82:36:
         23:dc:a9:87:64:a7:ee:1d:4c:e4:20:cf:73:3d:a3:9e:f3:09:
         b5:3f:b1:a4:ce:21:35:ff:af:1b:ae:12:c9:9e:21:07:49:4f:
         02:60:2c:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4J2KbU5In6gWRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU0MDQwMWItYmM2Mi00MzlmLTlhODUtMjg3ZWYxNjA4
MWFkMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk
ZjcxNTkyNWQtZGJiYy00NDEzLTgzYTYtNmM5MzkzZmI2NzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmivRbNU6YJCBkTfkKIj50GQzbtzJiowqTto4
9rHSq5WkN5xKV8czkXc4EO+k9cC3VHUmQXaYk/TFJfDZM8UfaYiVYVrMyjuI5pDy
e9IcUMDLqBL1JN3imxT0CpK4dPkgReF8RgFKmWb7tuLN/nleTFyln3ET43+3Tz1A
x7pOnLTt9h/oISOPqUAJApnqwrp9HPzEz9AL6+DnvPs9mSapZtK8sDXzsAmnJ1IY
3wU7DDjBjWbMA/uzFh17g3D1tTyKGLxdz4Y5HWjFP6lSObkPuci8nXpK+fZE439d
jWYKo1Alx28bGqmc1cQwG+HfbSrjKIMnKiWNruDx5eJi5DZQiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMOaBJma3ufuZ2P1sdEwyZfvDamUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NTQw
NDAxYi1iYzYyLTQzOWYtOWE4NS0yODdlZjE2MDgxYWQvMDFkYjhjODQtY2YwZC0z
YTkwLTg3MzItYjNmYjQyMWUwMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjU0MDQwMWItYmM2Mi00MzlmLTlh
ODUtMjg3ZWYxNjA4MWFkLzY1NDA0MDFiLWJjNjItNDM5Zi05YTg1LTI4N2VmMTYw
ODFhZC5jcmwwHwYDVR0jBBgwFoAUonz+ceZlCIGeyhbHe5g4WooP8RkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NTQwNDAxYi1iYzYyLTQzOWYtOWE4NS0yODdl
ZjE2MDgxYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJF4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgEsI1UhHDHPQ0/PRtV7bKIIXFyiWjwX5X4L51I5JKtDElKt/Alkwhk
krXjgUaJOo/CyKTBwxTPSf7z+Y3kPNLzSxLTRqFkyQMPFvMVvrJdhLl9bI6UB0fm
EjMH1ZVZnGKTTNxA9DTMBsX3q/yXqg8DFDRlkl4W/38H3Vwif+cnwl9wYO5jIec5
V4A2TR7emTdqI8wvV3e4kOx9U1xvt6MkV4Ky55CNu3tOnbknG4ud2E5cggXBuH8d
ZgFtW1SYlaHAVL+1MmYAXDUgFwtJbxOFgHdLeKuCNiPcqYdkp+4dTOQgz3M9o57z
CbU/saTOITX/rxuuEsmeIQdJTwJgLN8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:23:26 2026 by rpki-client