Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465f8fa0-4a09-3a52-b1b6-58503b12f44f.roa
File:                     465f8fa0-4a09-3a52-b1b6-58503b12f44f.roa (raw, json)
Hash identifier:          HysHZgRhSHDDe3o63xuCkv6/+YZT8CkJkBWITHwEXII=
Subject key identifier:   E3:71:9F:AB:B0:46:EA:4A:35:41:0B:8A:A9:99:E2:4E:C8:7F:51:F5
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E1FA9B107539B17CFA5453FB0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465f8fa0-4a09-3a52-b1b6-58503b12f44f.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     396586
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:b1:07:53:9b:17:cf:a5:45:3f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=c5f4c1f0-81cc-4e6b-b5b2-17186a8d185d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:af:2c:b6:bc:e4:f6:2e:06:35:c6:4b:34:
                    bb:db:1d:74:97:9c:fe:2d:b2:b0:9b:ae:12:77:75:
                    f6:79:c0:f4:77:da:37:43:9f:fb:a4:2c:78:7d:b4:
                    71:20:a6:d3:5a:56:77:3d:a9:70:9d:e4:39:11:aa:
                    07:3d:41:61:f9:53:4f:33:73:77:31:31:69:42:7c:
                    9e:98:50:e1:c7:36:06:2f:f1:3b:5c:86:25:ef:1e:
                    52:78:6f:f4:89:f9:a1:d5:b8:d1:22:3a:d6:7c:1f:
                    67:84:19:4c:28:2b:60:c6:26:e3:2d:a4:36:fa:cd:
                    ac:58:f0:e7:55:06:d2:fe:20:72:c4:37:d2:c9:26:
                    da:e3:17:0c:02:75:78:5e:d4:ce:4c:10:1e:28:6d:
                    22:5c:6b:74:b9:8f:93:aa:f1:90:73:c7:c9:3f:df:
                    66:45:17:6c:50:ae:8f:0e:89:e4:4a:50:79:c7:fa:
                    a3:fa:6c:90:0a:b8:53:e8:2c:81:1f:00:63:1c:8a:
                    2a:4c:67:eb:c2:17:42:07:41:1f:2b:bc:cf:56:db:
                    16:a8:41:d9:80:c8:59:2c:f4:7b:f1:2d:d6:e2:a3:
                    0a:36:bd:5d:5a:4a:27:01:78:4d:74:7a:46:92:11:
                    e6:62:30:4f:90:5b:9b:9e:76:6e:e0:8c:94:4d:0e:
                    ed:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:71:9F:AB:B0:46:EA:4A:35:41:0B:8A:A9:99:E2:4E:C8:7F:51:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465f8fa0-4a09-3a52-b1b6-58503b12f44f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4c:dd:13:d2:8f:b7:ed:05:32:79:fa:17:4c:d1:23:e3:56:
         73:00:62:a2:4b:7f:8e:d9:b7:98:88:17:82:a1:f9:ed:22:85:
         13:27:66:4c:56:85:a7:8f:5c:bf:51:6f:7b:6f:a5:7e:39:de:
         9b:02:2b:31:69:d3:33:1e:cf:f5:d4:a8:8a:2c:84:f5:c0:db:
         74:da:bc:5f:d8:c1:72:c1:a0:f9:b1:7d:1d:ca:f0:9f:6c:b0:
         e1:ca:20:b5:3a:ba:0f:a9:ca:83:4d:44:da:68:5b:2b:44:09:
         23:fc:d4:19:e6:5c:c0:b7:07:ae:9d:80:9e:15:c9:86:fd:3e:
         4c:12:4e:c0:12:61:e2:63:3c:73:b8:1c:65:a7:78:ec:e1:7e:
         84:a6:87:16:14:34:d5:61:0e:3c:52:61:51:9b:14:19:ef:b9:
         f5:2d:6a:a8:c2:21:64:10:d1:72:4f:64:34:8d:31:49:d7:90:
         54:1d:9c:6a:23:e5:55:5d:e0:f0:67:ce:ff:68:88:86:ba:5c:
         65:d1:e8:ab:95:9d:4c:a7:70:7e:5b:4b:f4:e6:08:60:ae:7a:
         8b:85:e0:32:4c:28:b8:3a:14:36:4b:e9:99:60:63:7e:02:6d:
         66:3e:74:be:b8:e2:88:5a:61:e0:69:58:80:ba:1f:9d:4a:08:
         8f:d7:da:08
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4fqbEHU5sXz6VFP7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk
YzVmNGMxZjAtODFjYy00ZTZiLWI1YjItMTcxODZhOGQxODVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq++vLLa85PYuBjXGSzS72x10l5z+LbKwm64S
d3X2ecD0d9o3Q5/7pCx4fbRxIKbTWlZ3PalwneQ5EaoHPUFh+VNPM3N3MTFpQnye
mFDhxzYGL/E7XIYl7x5SeG/0ifmh1bjRIjrWfB9nhBlMKCtgxibjLaQ2+s2sWPDn
VQbS/iByxDfSySba4xcMAnV4XtTOTBAeKG0iXGt0uY+TqvGQc8fJP99mRRdsUK6P
DonkSlB5x/qj+myQCrhT6CyBHwBjHIoqTGfrwhdCB0EfK7zPVtsWqEHZgMhZLPR7
8S3W4qMKNr1dWkonAXhNdHpGkhHmYjBPkFubnnZu4IyUTQ7tzQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFONxn6uwRupKNUELiqmZ4k7If1H1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDY1ZjhmYTAtNGEwOS0z
YTUyLWIxYjYtNTg1MDNiMTJmNDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBrTN0T0o+37QUyefoXTNEj41ZzAGKiS3+O2beYiBeCofntIoUTJ2ZM
VoWnj1y/UW97b6V+Od6bAisxadMzHs/11KiKLIT1wNt02rxf2MFywaD5sX0dyvCf
bLDhyiC1OroPqcqDTUTaaFsrRAkj/NQZ5lzAtweunYCeFcmG/T5MEk7AEmHiYzxz
uBxlp3js4X6EpocWFDTVYQ48UmFRmxQZ77n1LWqowiFkENFyT2Q0jTFJ15BUHZxq
I+VVXeDwZ87/aIiGulxl0eirlZ1Mp3B+W0v05ghgrnqLheAyTCi4OhQ2S+mZYGN+
Am1mPnS+uOKIWmHgaViAuh+dSgiP19oI
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:59:34 2026 by rpki-client