Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa
File:                     afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa (raw, json)
Hash identifier:          E5sWktMmd/GNtVCHDb9XD/ZSNQc7TxzJJScathdU9pE=
Subject key identifier:   FB:B4:CB:8E:18:AC:EE:B0:B1:8D:48:7E:9C:4E:66:EB:20:D6:B2:32
Certificate issuer:       /CN=3cd40041-6571-4f30-b76a-4746a4c2d957
Certificate serial:       010D0C9F4328584E253F0050ED9FBFDCDDDCB080
Authority key identifier: 0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     11051
IP address blocks:        205.207.255.0/24 maxlen: 24
                          2620:13e:500a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:00:50:ed:9f:bf:dc:dd:dc:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd40041-6571-4f30-b76a-4746a4c2d957
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=e33b9b72-77fc-408b-b67c-3af12a8c2933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:7d:bd:25:68:73:37:cf:1b:b9:64:bb:cb:
                    f9:0e:d0:d3:31:7d:b7:a3:24:76:88:09:79:45:45:
                    f5:2d:7f:42:ef:05:70:d8:c7:4b:51:90:f7:c6:22:
                    21:c4:0a:dd:ff:38:78:6b:a2:a7:bf:e4:24:d0:1b:
                    b1:bd:79:43:f4:b7:db:5c:77:d1:72:04:e4:ef:58:
                    fa:ed:75:26:fe:fa:a8:03:f3:43:f7:13:33:74:7e:
                    72:22:2f:63:92:6b:be:8b:25:3f:dd:4d:b3:02:d0:
                    66:ea:ee:08:ad:1c:b8:e0:56:55:d2:a1:72:e1:96:
                    a3:e8:3f:57:ce:22:b0:62:dd:c8:de:70:fb:4b:a8:
                    57:f9:1c:93:78:6b:86:6c:e4:7d:7b:bf:ae:1e:d7:
                    81:b1:5b:91:be:b6:d3:ea:a1:8d:74:c6:f6:a6:17:
                    ee:23:be:71:bf:32:60:9f:92:24:8a:3a:d7:d3:90:
                    48:fa:f9:e2:23:09:99:32:c0:9a:bf:93:7e:76:5f:
                    a7:9e:37:c2:79:b3:32:ea:36:67:35:af:e1:49:99:
                    5a:cd:3c:11:3e:60:7a:c1:bb:d0:12:f0:a0:aa:85:
                    89:91:bb:82:82:37:53:3c:02:64:98:88:86:57:75:
                    5b:1e:2f:70:f1:99:13:fc:92:8c:83:a8:94:ec:88:
                    e3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B4:CB:8E:18:AC:EE:B0:B1:8D:48:7E:9C:4E:66:EB:20:D6:B2:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl

            X509v3 Authority Key Identifier:
                keyid:0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.255.0/24
                IPv6:
                  2620:13e:500a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f8:06:b2:cb:b7:61:c4:84:bd:a7:d7:89:d5:80:1f:bd:c7:
         8f:97:34:a6:23:1e:43:12:27:28:b3:b8:f4:35:0d:47:28:e2:
         16:ff:0e:c3:3f:c4:38:af:94:6e:21:67:f5:38:76:55:2b:ef:
         17:44:30:b7:67:27:2b:36:fa:ef:af:0e:9e:b7:35:a0:c2:2a:
         da:fc:ff:e1:7a:2c:4c:31:9c:c9:18:27:a7:3a:87:5e:08:24:
         2c:17:de:f3:1d:93:22:dc:fb:94:8a:5c:d5:28:30:7d:c0:31:
         17:25:49:16:a7:72:18:fd:0c:aa:e4:0b:de:1b:47:30:cd:43:
         70:9f:63:4c:7c:30:b8:0a:23:c6:1a:8a:ae:43:f9:b7:f8:91:
         9c:02:e1:b9:0c:2a:3e:29:b6:c2:b9:52:a4:f9:e5:1c:60:d9:
         65:06:ec:02:40:3d:e3:87:0a:f7:a8:38:d9:2c:ac:11:ec:85:
         8f:de:37:cc:d5:b0:58:e6:b9:eb:a7:4c:87:21:27:aa:71:fc:
         fe:eb:f8:6b:37:13:c9:79:84:4b:9e:81:2b:28:02:56:fd:a5:
         5b:98:f9:bc:21:36:15:c8:72:1c:76:1a:79:19:63:04:9a:3a:
         a0:e7:69:d5:6f:e7:bb:11:5c:1f:66:83:58:07:94:13:a9:0a:
         ac:75:b1:bd
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE4lPwBQ7Z+/3N3csIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2NkNDAwNDEtNjU3MS00ZjMwLWI3NmEtNDc0NmE0YzJk
OTU3MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
ZTMzYjliNzItNzdmYy00MDhiLWI2N2MtM2FmMTJhOGMyOTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDV9vSVoczfPG7lku8v5DtDTMX23oyR2iAl5
RUX1LX9C7wVw2MdLUZD3xiIhxArd/zh4a6Knv+Qk0BuxvXlD9LfbXHfRcgTk71j6
7XUm/vqoA/ND9xMzdH5yIi9jkmu+iyU/3U2zAtBm6u4IrRy44FZV0qFy4Zaj6D9X
ziKwYt3I3nD7S6hX+RyTeGuGbOR9e7+uHteBsVuRvrbT6qGNdMb2phfuI75xvzJg
n5IkijrX05BI+vniIwmZMsCav5N+dl+nnjfCebMy6jZnNa/hSZlazTwRPmB6wbvQ
EvCgqoWJkbuCgjdTPAJkmIiGV3VbHi9w8ZkT/JKMg6iU7IjjHQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFPu0y44YrO6wsY1IfpxOZusg1rIyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zY2Q0
MDA0MS02NTcxLTRmMzAtYjc2YS00NzQ2YTRjMmQ5NTcvYWZkOTVhM2EtYzhjZC0z
ZWU0LTlmZWItYmMzMzZlYTQ5ZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2NkNDAwNDEtNjU3MS00ZjMwLWI3
NmEtNDc0NmE0YzJkOTU3LzNjZDQwMDQxLTY1NzEtNGYzMC1iNzZhLTQ3NDZhNGMy
ZDk1Ny5jcmwwHwYDVR0jBBgwFoAUC3dIwZueWstRL5acM8C2yILbDiEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zY2Q0MDA0MS02NTcxLTRmMzAtYjc2YS00NzQ2
YTRjMmQ5NTcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzc//MA8E
AgACMAkDBwAmIAE+UAowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEfgGssu3YcSEvafXidWAH73Hj5c0piMe
QxInKLO49DUNRyjiFv8Owz/EOK+UbiFn9Th2VSvvF0Qwt2cnKzb6768Onrc1oMIq
2vz/4XosTDGcyRgnpzqHXggkLBfe8x2TItz7lIpc1SgwfcAxFyVJFqdyGP0MquQL
3htHMM1DcJ9jTHwwuAojxhqKrkP5t/iRnALhuQwqPim2wrlSpPnlHGDZZQbsAkA9
44cK96g42SysEeyFj943zNWwWOa566dMhyEnqnH8/uv4azcTyXmES56BKygCVv2l
W5j5vCE2FchyHHYaeRljBJo6oOdp1W/nuxFcH2aDWAeUE6kKrHWxvQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:39 2026 by rpki-client