Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9/cf365945-ea59-3d3d-a23f-e33d9abb48a4.roa
File:                     cf365945-ea59-3d3d-a23f-e33d9abb48a4.roa (raw, json)
Hash identifier:          bpd7SlLRgJEAlHAavROng7MWfm7IRij2WVQJOA2ynic=
Subject key identifier:   44:0C:8E:EE:3A:00:69:41:2E:ED:3B:51:BF:C8:47:F4:EA:53:39:28
Certificate issuer:       /CN=4dfb5f55-075f-43ce-963e-556b818f36b9
Certificate serial:       010D0C9F4328584E4522F11353AFD6610A95E6C0
Authority key identifier: 45:6C:9B:F0:49:63:EC:46:48:DE:07:6B:12:CE:37:8F:A7:25:CB:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9/cf365945-ea59-3d3d-a23f-e33d9abb48a4.roa
Signing time:             Tue 23 Jun 2026 19:09:41 +0000
ROA not before:           Tue 23 Jun 2026 19:09:41 +0000
ROA not after:            Mon 21 Sep 2026 19:09:41 +0000
asID:                     36689
IP address blocks:        96.46.48.0/20 maxlen: 20
                          208.66.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9/4dfb5f55-075f-43ce-963e-556b818f36b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9/4dfb5f55-075f-43ce-963e-556b818f36b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:22:f1:13:53:af:d6:61:0a:95:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dfb5f55-075f-43ce-963e-556b818f36b9
        Validity
            Not Before: Jun 23 19:09:41 2026 GMT
            Not After : Sep 21 19:09:41 2026 GMT
        Subject: CN=47f19bed-c292-4fc1-98a0-f3f750e12568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6e:99:5a:13:ee:78:85:a3:3e:95:e3:c4:9b:
                    e0:25:aa:b2:b7:4c:d4:1d:7c:3d:90:e9:91:3e:e7:
                    58:5d:01:bb:5f:fd:3b:5c:b3:5e:52:15:19:d9:79:
                    c8:ee:51:85:37:cf:03:9d:c3:2f:d6:db:7d:ca:67:
                    fb:6c:76:7c:0e:8a:fd:06:91:f1:e6:40:0e:8f:5d:
                    39:5d:09:a8:d0:cf:8a:09:1c:f3:3b:c9:6c:5d:d3:
                    89:93:05:5d:98:3e:86:6e:64:2f:71:37:fa:f9:e0:
                    88:57:cd:64:ad:8b:72:88:1d:ac:07:00:1f:88:2b:
                    1a:fc:07:bf:0e:45:c5:03:a5:85:c6:89:aa:05:2b:
                    76:19:ee:a7:c7:16:f8:1a:49:57:25:f3:27:28:2d:
                    8d:97:fa:e7:3f:fb:cb:cc:e9:45:d9:c2:d6:0f:9a:
                    bf:9c:f8:12:67:46:5b:90:b3:36:e5:a4:56:7f:14:
                    92:45:88:a2:39:5e:c8:98:62:19:fb:e2:93:46:34:
                    3d:6a:c1:1d:15:43:02:bf:6a:ed:e8:d0:75:cb:11:
                    c9:07:3b:80:fd:d1:70:00:e6:30:05:dc:e1:1c:eb:
                    2c:84:6c:b2:02:4e:bb:52:85:52:4e:2c:19:ce:d7:
                    96:21:5f:36:f8:bd:ab:c2:11:99:01:9a:d5:23:60:
                    34:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0C:8E:EE:3A:00:69:41:2E:ED:3B:51:BF:C8:47:F4:EA:53:39:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9/cf365945-ea59-3d3d-a23f-e33d9abb48a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9/4dfb5f55-075f-43ce-963e-556b818f36b9.crl

            X509v3 Authority Key Identifier:
                keyid:45:6C:9B:F0:49:63:EC:46:48:DE:07:6B:12:CE:37:8F:A7:25:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dfb5f55-075f-43ce-963e-556b818f36b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.46.48.0/20
                  208.66.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:db:a2:2a:fd:16:17:ef:f2:0e:f3:2a:bc:2a:87:e8:b1:
         cc:77:4a:ee:8a:6c:a8:e2:86:6f:20:57:ea:f0:b0:45:45:b3:
         11:a2:96:bf:e5:a6:25:3b:11:3f:f1:c4:ac:80:16:f3:ae:e1:
         0b:bd:74:39:62:b7:29:3e:1c:31:dc:68:66:47:e6:68:3e:f5:
         7c:2d:da:b7:68:e8:c8:7f:0f:bf:4b:61:ff:09:3f:4d:68:54:
         7c:4e:97:37:b5:73:6c:ec:98:28:13:72:9e:5a:ea:82:15:19:
         35:9b:01:40:90:72:de:40:2b:66:2f:78:e9:08:5c:95:07:7a:
         16:13:71:24:a4:71:41:81:40:38:13:3b:49:01:8a:8d:74:50:
         7f:34:e6:12:65:30:af:f8:d1:ae:cc:51:5a:8d:c4:07:ec:87:
         ca:51:3e:97:e4:4e:73:e7:0a:d8:d0:7f:cd:b4:cf:0f:ac:f7:
         c3:65:3f:c3:a1:90:b7:aa:cb:51:9e:5c:e5:85:f6:2c:17:20:
         bc:61:01:5a:87:06:63:90:6f:69:6a:cb:63:91:1e:1a:30:c7:
         4a:89:48:69:a8:e0:08:86:f9:bb:cf:67:d0:72:16:d5:90:59:
         4f:eb:01:f6:82:a2:c9:94:2b:4f:33:6a:3a:af:d3:c2:31:07:
         b8:80:58:3b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5FIvETU6/WYQqV5sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGRmYjVmNTUtMDc1Zi00M2NlLTk2M2UtNTU2YjgxOGYz
NmI5MB4XDTI2MDYyMzE5MDk0MVoXDTI2MDkyMTE5MDk0MVowLzEtMCsGA1UEAxMk
NDdmMTliZWQtYzI5Mi00ZmMxLTk4YTAtZjNmNzUwZTEyNTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG6ZWhPueIWjPpXjxJvgJaqyt0zUHXw9kOmR
PudYXQG7X/07XLNeUhUZ2XnI7lGFN88DncMv1tt9ymf7bHZ8Dor9BpHx5kAOj105
XQmo0M+KCRzzO8lsXdOJkwVdmD6GbmQvcTf6+eCIV81krYtyiB2sBwAfiCsa/Ae/
DkXFA6WFxomqBSt2Ge6nxxb4GklXJfMnKC2Nl/rnP/vLzOlF2cLWD5q/nPgSZ0Zb
kLM25aRWfxSSRYiiOV7ImGIZ++KTRjQ9asEdFUMCv2rt6NB1yxHJBzuA/dFwAOYw
BdzhHOsshGyyAk67UoVSTiwZzteWIV82+L2rwhGZAZrVI2A03QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEQMju46AGlBLu07Ub/IR/TqUzkoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZGZi
NWY1NS0wNzVmLTQzY2UtOTYzZS01NTZiODE4ZjM2YjkvY2YzNjU5NDUtZWE1OS0z
ZDNkLWEyM2YtZTMzZDlhYmI0OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGRmYjVmNTUtMDc1Zi00M2NlLTk2
M2UtNTU2YjgxOGYzNmI5LzRkZmI1ZjU1LTA3NWYtNDNjZS05NjNlLTU1NmI4MThm
MzZiOS5jcmwwHwYDVR0jBBgwFoAURWyb8Elj7EZI3gdrEs43j6clyz0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZGZiNWY1NS0wNzVmLTQzY2UtOTYzZS01NTZi
ODE4ZjM2YjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEYC4wAwQC
0EIQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIP626Iq/RYX7/IO8yq8Kofoscx3Su6KbKjihm8gV+rwsEVF
sxGilr/lpiU7ET/xxKyAFvOu4Qu9dDlityk+HDHcaGZH5mg+9Xwt2rdo6Mh/D79L
Yf8JP01oVHxOlze1c2zsmCgTcp5a6oIVGTWbAUCQct5AK2YveOkIXJUHehYTcSSk
cUGBQDgTO0kBio10UH805hJlMK/40a7MUVqNxAfsh8pRPpfkTnPnCtjQf820zw+s
98NlP8OhkLeqy1GeXOWF9iwXILxhAVqHBmOQb2lqy2ORHhowx0qJSGmo4AiG+bvP
Z9ByFtWQWU/rAfaCosmUK08zajqv08IxB7iAWDs=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:27:10 2026 by rpki-client