Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/b12cfdaa-6423-367c-9b22-98354d5a010c.roa
File:                     b12cfdaa-6423-367c-9b22-98354d5a010c.roa (raw, json)
Hash identifier:          4pREW2Lt5ABvVKhMFstQQ3HRnDRJDdpJJJSF7ISmhbM=
Subject key identifier:   73:DD:30:4A:6C:DD:F7:47:50:85:8A:25:66:DC:76:A4:AB:F8:58:E7
Certificate issuer:       /CN=1c636f45-fa6a-4556-b6ee-5189124d0893
Certificate serial:       010D0C9F4328584F1B6241C6E893D44FAD72C300
Authority key identifier: 72:7A:DF:9D:2F:2B:D4:50:C1:A9:64:C3:11:0E:90:14:88:71:B8:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/b12cfdaa-6423-367c-9b22-98354d5a010c.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     13327
IP address blocks:        2605:aa00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:41:c6:e8:93:d4:4f:ad:72:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c636f45-fa6a-4556-b6ee-5189124d0893
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=bc837980-5591-4d8a-bfd9-fddb7dadb153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a4:80:08:2c:76:1b:a7:30:3d:96:c2:2b:86:
                    fe:d4:14:ec:d2:8b:3b:fa:33:a5:05:2f:67:b3:ef:
                    fe:3d:79:85:52:81:a5:80:6f:71:83:8b:46:5e:e9:
                    38:23:ef:c7:35:9a:b9:5e:83:df:29:b8:7a:e5:dd:
                    0a:58:16:4e:7f:82:cb:cd:a7:d4:33:42:5c:97:3c:
                    60:32:be:4e:77:cb:72:09:ca:6d:19:7e:1b:95:4f:
                    2d:5f:6f:ae:9d:c4:10:f7:7e:2d:9f:51:db:9f:28:
                    4e:69:fe:fb:d5:96:79:e9:a1:76:1f:f7:4a:10:df:
                    01:ea:30:5a:b3:32:32:10:47:fe:4c:0f:c2:de:af:
                    77:45:23:d6:a2:53:47:3f:84:a6:24:76:30:e2:31:
                    3d:2b:7a:96:53:4e:cc:3d:83:4a:1f:75:e2:30:27:
                    0c:32:f6:f8:3b:a7:f6:b7:f7:ec:b3:66:db:22:ef:
                    dd:ee:11:64:c5:16:95:5b:5d:16:54:07:d7:37:39:
                    bc:70:93:d4:b5:f9:51:00:32:c8:e2:fd:bd:ac:a2:
                    4c:ba:20:a6:7a:20:63:9a:28:79:d0:3e:60:ee:24:
                    5a:b9:57:c3:73:73:e0:56:3c:a9:ff:dd:2f:37:bb:
                    22:1b:2b:b6:7b:6b:d4:05:b9:97:b2:bf:ad:db:55:
                    d9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DD:30:4A:6C:DD:F7:47:50:85:8A:25:66:DC:76:A4:AB:F8:58:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/b12cfdaa-6423-367c-9b22-98354d5a010c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.crl

            X509v3 Authority Key Identifier:
                keyid:72:7A:DF:9D:2F:2B:D4:50:C1:A9:64:C3:11:0E:90:14:88:71:B8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:aa00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:12:35:0f:d3:50:78:ee:b9:d7:42:9f:6e:08:0c:6e:07:80:
         dd:4c:23:ce:f3:b6:55:c8:fe:bd:8f:7b:a1:ca:db:70:70:92:
         42:ba:0b:09:96:05:26:5d:53:93:98:72:9a:e5:6c:ed:b2:a0:
         86:86:fd:88:7f:30:e2:47:7d:c3:3f:bf:f0:c1:3b:2c:b4:89:
         14:0e:59:eb:fa:50:62:e5:f9:26:e2:3d:c0:6e:0d:54:e4:b8:
         53:b5:c2:e7:8a:1b:7c:3b:70:59:dd:13:01:91:31:39:57:d0:
         d0:f5:ee:52:e8:43:d1:7c:e0:2f:e7:5d:c9:26:53:fc:98:7c:
         be:7c:3e:e0:69:51:9a:4c:a3:7c:7b:af:87:46:c2:1f:31:39:
         15:81:cf:7e:70:cf:cf:f3:04:6e:de:61:19:32:d4:40:6d:7b:
         48:68:18:f2:3d:13:5e:19:85:94:c3:37:d2:0c:53:f8:30:f1:
         12:4e:24:9b:f2:04:27:2c:72:e5:ea:27:55:c5:d2:03:ad:4e:
         4e:e3:27:af:c7:79:4e:e9:cf:72:e3:4c:86:ba:e8:94:c1:b9:
         c5:e3:47:ea:e1:b7:2c:ca:7d:53:c2:c6:89:4f:62:c6:95:cf:
         d0:db:0b:69:f8:2e:f0:4f:01:79:72:29:cc:7d:db:5b:2d:ae:
         0c:a4:04:d3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8bYkHG6JPUT61ywwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM2MzZmNDUtZmE2YS00NTU2LWI2ZWUtNTE4OTEyNGQw
ODkzMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk
YmM4Mzc5ODAtNTU5MS00ZDhhLWJmZDktZmRkYjdkYWRiMTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6SACCx2G6cwPZbCK4b+1BTs0os7+jOlBS9n
s+/+PXmFUoGlgG9xg4tGXuk4I+/HNZq5XoPfKbh65d0KWBZOf4LLzafUM0Jclzxg
Mr5Od8tyCcptGX4blU8tX2+uncQQ934tn1HbnyhOaf771ZZ56aF2H/dKEN8B6jBa
szIyEEf+TA/C3q93RSPWolNHP4SmJHYw4jE9K3qWU07MPYNKH3XiMCcMMvb4O6f2
t/fss2bbIu/d7hFkxRaVW10WVAfXNzm8cJPUtflRADLI4v29rKJMuiCmeiBjmih5
0D5g7iRauVfDc3PgVjyp/90vN7siGyu2e2vUBbmXsr+t21XZDQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHPdMEps3fdHUIWKJWbcdqSr+FjnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xYzYz
NmY0NS1mYTZhLTQ1NTYtYjZlZS01MTg5MTI0ZDA4OTMvYjEyY2ZkYWEtNjQyMy0z
NjdjLTliMjItOTgzNTRkNWEwMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWM2MzZmNDUtZmE2YS00NTU2LWI2
ZWUtNTE4OTEyNGQwODkzLzFjNjM2ZjQ1LWZhNmEtNDU1Ni1iNmVlLTUxODkxMjRk
MDg5My5jcmwwHwYDVR0jBBgwFoAUcnrfnS8r1FDBqWTDEQ6QFIhxuP8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8xYzYzNmY0NS1mYTZhLTQ1NTYtYjZlZS01MTg5
MTI0ZDA4OTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWqADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBWEjUP01B47rnXQp9uCAxuB4DdTCPO87ZVyP69j3uhyttwcJJCugsJ
lgUmXVOTmHKa5WztsqCGhv2IfzDiR33DP7/wwTsstIkUDlnr+lBi5fkm4j3Abg1U
5LhTtcLniht8O3BZ3RMBkTE5V9DQ9e5S6EPRfOAv513JJlP8mHy+fD7gaVGaTKN8
e6+HRsIfMTkVgc9+cM/P8wRu3mEZMtRAbXtIaBjyPRNeGYWUwzfSDFP4MPESTiSb
8gQnLHLl6idVxdIDrU5O4yevx3lO6c9y40yGuuiUwbnF40fq4bcsyn1TwsaJT2LG
lc/Q2wtp+C7wTwF5cinMfdtbLa4MpATT
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:54:55 2026 by rpki-client