Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/a184a1f1-421b-3061-806a-41fc012b52ca.roa
File:                     a184a1f1-421b-3061-806a-41fc012b52ca.roa (raw, json)
Hash identifier:          mPvk8e41iwUHzLjcv0A2J5ED6aXEMr3tXa2lDczBn8s=
Subject key identifier:   50:78:2F:60:3B:43:9B:03:EF:D4:EB:BD:97:3C:C3:FC:CB:07:05:46
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584E4AEF46632EA303DAC99C3380
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/a184a1f1-421b-3061-806a-41fc012b52ca.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     32133
IP address blocks:        2606:8e80:7800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:46:63:2e:a3:03:da:c9:9c:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=f89f4945-15e0-41f0-a230-6bb1ddff1b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:55:f5:3c:62:de:f1:08:d5:fb:15:8b:b4:
                    0d:5e:ef:48:f5:00:37:4a:26:47:6a:bd:f6:ca:86:
                    ef:8c:61:ad:b4:78:a4:be:e9:44:78:58:6d:45:f5:
                    ca:c0:80:5a:b1:a2:e1:26:f5:63:8c:88:5f:d0:29:
                    64:07:32:bc:21:8a:2e:69:a6:72:14:62:4e:c0:06:
                    46:c5:a1:63:ee:e4:31:6a:8e:61:e1:46:8c:27:ab:
                    87:ef:bd:37:96:81:5b:32:86:b8:73:e5:96:69:69:
                    6f:24:b7:46:45:f1:69:a8:49:42:1c:ea:17:db:a7:
                    f6:14:fa:ee:f6:84:c8:cc:cf:7f:6f:a2:c6:cf:6d:
                    b3:34:c1:ca:ee:d8:f6:1c:82:20:9c:1c:ae:b5:fa:
                    b0:1c:d5:a9:7c:87:48:5e:8e:89:8e:34:fc:af:b2:
                    b8:51:d1:0c:96:2b:d0:e8:90:e2:f4:89:1f:31:a7:
                    a3:a0:92:70:e1:cf:cc:fd:46:17:d4:6d:26:1b:f5:
                    b9:86:3e:c6:fb:5e:e0:92:2b:57:0e:e5:d6:62:2d:
                    c2:d6:03:12:ea:a7:a0:af:31:7f:23:18:04:58:37:
                    a4:76:00:86:f6:d3:2f:0a:c5:92:8b:db:80:4a:2c:
                    e9:29:01:0f:c9:34:6b:50:bf:99:da:0c:d8:f3:db:
                    b7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:78:2F:60:3B:43:9B:03:EF:D4:EB:BD:97:3C:C3:FC:CB:07:05:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/a184a1f1-421b-3061-806a-41fc012b52ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:7800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f6:8a:81:c7:63:18:39:1b:1d:eb:03:15:2a:03:71:ad:46:
         92:98:64:15:16:81:59:e8:b0:e2:7f:50:bc:0b:81:22:2f:23:
         92:cc:c5:17:69:30:6b:b1:0c:45:87:bd:8f:54:cf:22:39:8b:
         f4:2a:ae:5a:fe:a7:10:de:c3:45:82:99:88:40:69:a7:7a:56:
         7f:93:30:00:85:5c:0e:3b:88:46:df:ac:5d:a1:88:13:23:d1:
         7e:79:6e:f6:a3:64:dc:26:0b:3f:29:71:14:11:0e:54:10:4a:
         fc:07:b9:bc:c7:25:4a:5f:f0:f4:e6:50:43:e0:cd:a6:0a:a2:
         68:c1:34:80:af:25:15:85:68:f4:b4:5c:26:dc:79:13:07:db:
         c1:e0:ca:fb:a9:75:03:65:d5:24:20:5d:ca:4a:9a:99:6f:23:
         97:aa:85:55:a2:46:7b:8c:fd:7a:a9:a9:55:c8:09:a2:08:86:
         fa:ea:83:1d:3d:11:b2:3e:26:1c:b8:d3:c1:d0:7d:54:a7:c2:
         81:88:69:84:ef:cc:9c:8f:4d:4c:5d:ab:b1:0c:91:61:ec:9e:
         dd:f9:12:8e:0e:c4:7d:1a:35:e3:60:c0:44:e2:3b:95:8f:71:
         53:9c:b1:02:8c:fd:b0:c1:c9:93:f4:5d:a9:b4:bd:12:d2:e0:
         f0:32:3d:e7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5K70ZjLqMD2smcM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
Zjg5ZjQ5NDUtMTVlMC00MWYwLWEyMzAtNmJiMWRkZmYxYjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl65V9Txi3vEI1fsVi7QNXu9I9QA3SiZHar32
yobvjGGttHikvulEeFhtRfXKwIBasaLhJvVjjIhf0ClkBzK8IYouaaZyFGJOwAZG
xaFj7uQxao5h4UaMJ6uH7703loFbMoa4c+WWaWlvJLdGRfFpqElCHOoX26f2FPru
9oTIzM9/b6LGz22zNMHK7tj2HIIgnByutfqwHNWpfIdIXo6JjjT8r7K4UdEMlivQ
6JDi9IkfMaejoJJw4c/M/UYX1G0mG/W5hj7G+17gkitXDuXWYi3C1gMS6qegrzF/
IxgEWDekdgCG9tMvCsWSi9uASizpKQEPyTRrUL+Z2gzY89u3uwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFB4L2A7Q5sD79TrvZc8w/zLBwVGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvYTE4NGExZjEtNDIxYi0z
MDYxLTgwNmEtNDFmYzAxMmI1MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgaOgHgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAg/aKgcdjGDkbHesDFSoDca1GkphkFRaBWeiw4n9QvAuBIi8jkszF
F2kwa7EMRYe9j1TPIjmL9CquWv6nEN7DRYKZiEBpp3pWf5MwAIVcDjuIRt+sXaGI
EyPRfnlu9qNk3CYLPylxFBEOVBBK/Ae5vMclSl/w9OZQQ+DNpgqiaME0gK8lFYVo
9LRcJtx5EwfbweDK+6l1A2XVJCBdykqamW8jl6qFVaJGe4z9eqmpVcgJogiG+uqD
HT0Rsj4mHLjTwdB9VKfCgYhphO/MnI9NTF2rsQyRYeye3fkSjg7EfRo142DAROI7
lY9xU5yxAoz9sMHJk/RdqbS9EtLg8DI95w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:04:21 2026 by rpki-client