Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/3dba0dbe-b7ed-3076-baf8-e4bc7c8a9b0f.roa
File:                     3dba0dbe-b7ed-3076-baf8-e4bc7c8a9b0f.roa (raw, json)
Hash identifier:          axgpxF9Z5FALkw6cm/hH2hG3Y90JOwyI9dG97mL8O6E=
Subject key identifier:   44:E5:12:FB:36:BA:97:99:B0:C3:83:AE:FE:E5:F3:16:FB:2F:FA:A5
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328584E18AEF44F8060F573D3BA4300
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/3dba0dbe-b7ed-3076-baf8-e4bc7c8a9b0f.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     5645
IP address blocks:        2607:c000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:f4:4f:80:60:f5:73:d3:ba:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=00475365-9424-4973-93c6-deb3a0391f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fd:9d:ca:4b:80:d5:28:9a:31:62:db:57:e3:
                    b6:73:4e:b4:9c:0e:34:4f:fa:42:4b:c7:b5:90:ef:
                    17:fc:42:6e:63:06:83:e9:9d:13:65:d4:b3:db:f8:
                    c2:85:30:3c:fe:a3:e6:48:ee:c6:e7:cf:4b:96:1d:
                    91:31:a2:22:fa:e9:9c:bd:e4:a3:c9:bf:a7:1a:d3:
                    ea:b4:94:72:06:d3:7a:7a:b5:5e:c7:8d:96:0f:c0:
                    a0:86:2c:b2:86:59:9b:0b:c5:d4:44:88:8b:79:e3:
                    bb:87:48:4c:a6:a6:6a:f2:5f:96:65:aa:d1:d2:c5:
                    a8:d4:86:6f:4f:2c:0a:da:29:ef:63:10:d2:40:af:
                    86:c5:f9:c4:65:e7:00:39:6f:c2:dc:ea:d3:8e:55:
                    ad:31:cd:e0:ec:83:cd:73:9d:7d:18:3c:b8:2c:94:
                    a7:31:b3:ee:8c:77:8d:51:b2:ca:10:6f:d2:8f:d2:
                    a9:2a:94:fd:f1:0f:98:30:33:80:97:2f:32:a6:35:
                    36:aa:45:f0:bc:61:84:58:21:fa:9d:b7:c1:de:f8:
                    be:9b:f2:98:f1:f1:ce:b4:82:b0:a4:62:f3:7a:1e:
                    4d:e0:47:e1:67:ea:7a:84:ea:96:cd:75:dd:fc:97:
                    b8:05:56:9b:2c:9d:eb:3b:05:3e:e1:b4:b4:19:8c:
                    73:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E5:12:FB:36:BA:97:99:B0:C3:83:AE:FE:E5:F3:16:FB:2F:FA:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/3dba0dbe-b7ed-3076-baf8-e4bc7c8a9b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:54:00:ab:2d:77:5f:d8:a9:6d:70:6c:28:07:0c:83:22:14:
         17:f6:fd:96:32:f6:05:e2:85:b8:90:85:23:49:66:7f:40:19:
         6d:ad:dd:c3:b2:a0:d7:08:51:51:1f:fa:80:2b:dd:5c:7b:68:
         a8:85:32:bc:be:2c:af:49:60:1a:0a:ff:30:7c:62:11:7f:78:
         11:33:3f:2a:83:84:31:cd:46:3a:8a:b8:3a:09:37:99:78:99:
         db:dc:bb:a7:0d:e0:e9:b7:ba:01:23:bc:b4:e9:2f:71:fd:9b:
         59:b8:ee:22:fe:63:a9:3a:be:41:e8:92:7a:03:fe:62:10:37:
         d3:bc:2b:30:d6:fe:be:18:2a:e2:79:86:50:05:4d:a0:20:41:
         4f:7d:74:b6:e2:f3:0a:ed:f0:cd:fb:0d:74:4e:55:b9:bb:d6:
         03:4a:7b:8e:4b:be:1b:af:d0:b9:22:5a:b3:da:08:d4:7b:13:
         ba:d1:c3:16:ba:ae:80:28:88:47:07:70:d6:5b:3b:a7:fc:b3:
         25:eb:ae:2a:b8:20:8b:d6:a0:6f:03:dd:6b:0e:e7:b5:10:b8:
         47:6b:56:a5:04:15:86:f3:14:a9:8b:70:95:65:b4:90:26:f3:
         e2:48:55:97:32:dd:db:0d:05:92:c3:76:95:47:ba:da:5b:1d:
         11:a1:92:aa
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4YrvRPgGD1c9O6QwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx
MTkyMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
MDA0NzUzNjUtOTQyNC00OTczLTkzYzYtZGViM2EwMzkxZjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv2dykuA1SiaMWLbV+O2c060nA40T/pCS8e1
kO8X/EJuYwaD6Z0TZdSz2/jChTA8/qPmSO7G589Llh2RMaIi+umcveSjyb+nGtPq
tJRyBtN6erVex42WD8CghiyyhlmbC8XURIiLeeO7h0hMpqZq8l+WZarR0sWo1IZv
TywK2invYxDSQK+GxfnEZecAOW/C3OrTjlWtMc3g7IPNc519GDy4LJSnMbPujHeN
UbLKEG/Sj9KpKpT98Q+YMDOAly8ypjU2qkXwvGGEWCH6nbfB3vi+m/KY8fHOtIKw
pGLzeh5N4EfhZ+p6hOqWzXXd/Je4BVabLJ3rOwU+4bS0GYxzEwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFETlEvs2upeZsMODrv7l8xb7L/qlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl
NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvM2RiYTBkYmUtYjdlZC0z
MDc2LWJhZjgtZTRiYzdjOGE5YjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm
MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3
MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk
OGE2NzExOTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfAADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB6VACrLXdf2KltcGwoBwyDIhQX9v2WMvYF4oW4kIUjSWZ/QBltrd3D
sqDXCFFRH/qAK91ce2iohTK8viyvSWAaCv8wfGIRf3gRMz8qg4QxzUY6irg6CTeZ
eJnb3LunDeDpt7oBI7y06S9x/ZtZuO4i/mOpOr5B6JJ6A/5iEDfTvCsw1v6+GCri
eYZQBU2gIEFPfXS24vMK7fDN+w10TlW5u9YDSnuOS74br9C5Ilqz2gjUexO60cMW
uq6AKIhHB3DWWzun/LMl664quCCL1qBvA91rDue1ELhHa1alBBWG8xSpi3CVZbSQ
JvPiSFWXMt3bDQWSw3aVR7raWx0RoZKq
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:07:10 2026 by rpki-client