Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/b12cfdaa-6423-367c-9b22-98354d5a010c.roa
File:                     b12cfdaa-6423-367c-9b22-98354d5a010c.roa (raw, json)
Hash identifier:          +3/Gix/GyderFwDR72ZSvDgvTJPLyzseccfYjzOgpwk=
Subject key identifier:   47:71:9D:5E:E5:25:9A:4D:71:A8:69:BA:02:80:73:2B:CD:8A:52:F4
Certificate issuer:       /CN=1c636f45-fa6a-4556-b6ee-5189124d0893
Certificate serial:       010D0C9F4328584E78FF7717355AED404BD591C0
Authority key identifier: 72:7A:DF:9D:2F:2B:D4:50:C1:A9:64:C3:11:0E:90:14:88:71:B8:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/b12cfdaa-6423-367c-9b22-98354d5a010c.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     13327
IP address blocks:        2605:aa00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:77:17:35:5a:ed:40:4b:d5:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c636f45-fa6a-4556-b6ee-5189124d0893
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=36d91ae4-8eff-4c95-b2c7-d8155c978625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:28:62:6c:2e:ac:67:4b:67:5d:b7:b0:4b:
                    58:4b:58:b3:44:cb:17:04:1d:5b:30:b9:7f:79:7a:
                    32:be:1e:99:6f:28:ff:87:c9:11:71:ff:90:cb:36:
                    e8:48:89:a6:e5:21:74:6f:69:93:fe:28:79:d1:2c:
                    e6:37:33:38:a6:73:8e:79:f3:69:65:01:5e:f7:09:
                    3c:5c:2f:03:37:39:a5:d5:84:5a:2d:a6:44:19:fd:
                    49:57:21:48:bc:6d:88:96:d7:3a:25:3d:8f:a0:5a:
                    6f:18:db:60:56:73:96:bd:16:77:04:41:c1:77:ba:
                    ec:6a:9a:89:44:4a:e8:34:4d:84:63:d0:00:a2:e6:
                    f1:16:49:e5:cc:54:e4:1a:de:9c:17:a9:05:7d:3e:
                    28:8f:8d:51:e2:c1:04:76:bf:67:19:c9:9e:2f:d0:
                    fe:6d:52:8e:ed:8d:a5:04:23:ec:6d:8a:13:e3:96:
                    ab:25:ce:69:e0:33:3d:9b:27:4b:94:14:55:e2:f9:
                    19:1c:a9:7e:6b:61:c3:59:d3:6c:5d:ad:e7:de:bb:
                    6b:04:c2:28:56:ae:51:5c:46:10:b1:26:6a:56:c7:
                    a2:a0:78:23:fb:c1:41:79:01:c3:39:f3:0e:63:31:
                    71:31:42:dd:cb:6d:14:29:5c:6b:30:0d:dc:69:f3:
                    82:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:71:9D:5E:E5:25:9A:4D:71:A8:69:BA:02:80:73:2B:CD:8A:52:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/b12cfdaa-6423-367c-9b22-98354d5a010c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.crl

            X509v3 Authority Key Identifier:
                keyid:72:7A:DF:9D:2F:2B:D4:50:C1:A9:64:C3:11:0E:90:14:88:71:B8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:aa00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f2:cf:c7:7a:84:9c:5e:4f:0d:91:5a:90:47:ee:26:95:b2:
         da:e6:ad:ed:8a:65:0b:7c:3d:88:0a:26:8a:22:b7:09:43:0a:
         ce:31:b1:51:5c:b0:d8:96:fb:83:61:1d:18:0d:84:0b:cd:03:
         0d:e3:13:c5:95:53:8c:95:7a:75:b2:94:5f:5e:ed:5d:c9:8f:
         e8:43:27:28:6e:93:e3:07:b6:1d:0d:2d:71:c9:18:2f:03:46:
         ba:ae:62:31:ad:71:70:8e:55:1c:d5:7c:25:55:69:18:e3:2e:
         7d:ad:b3:e5:06:28:b9:2a:de:cf:fe:b7:a3:f8:14:2f:62:41:
         10:0b:84:41:f7:3c:e1:09:33:66:45:9e:74:18:ed:5a:45:02:
         04:70:41:dc:8e:b8:06:e9:80:d7:89:fe:3b:1d:d5:2f:81:a1:
         a1:6d:38:e1:83:55:a2:58:13:85:76:e7:52:c0:f9:03:6a:29:
         05:52:58:cd:eb:b4:b6:52:5b:b3:82:a4:6a:d4:55:04:d7:34:
         43:bb:d8:ba:90:bf:91:e2:e8:d1:10:71:ec:68:89:80:fb:a0:
         f9:48:d5:a7:ff:a4:43:16:59:15:d6:95:3f:d0:cf:58:2f:66:
         1f:aa:13:be:2a:38:1a:cf:a5:7c:ed:3a:2a:90:8a:2f:76:e5:
         04:a3:73:22
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE54/3cXNVrtQEvVkcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM2MzZmNDUtZmE2YS00NTU2LWI2ZWUtNTE4OTEyNGQw
ODkzMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk
MzZkOTFhZTQtOGVmZi00Yzk1LWIyYzctZDgxNTVjOTc4NjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyogoYmwurGdLZ123sEtYS1izRMsXBB1bMLl/
eXoyvh6Zbyj/h8kRcf+QyzboSImm5SF0b2mT/ih50SzmNzM4pnOOefNpZQFe9wk8
XC8DNzml1YRaLaZEGf1JVyFIvG2Iltc6JT2PoFpvGNtgVnOWvRZ3BEHBd7rsapqJ
REroNE2EY9AAoubxFknlzFTkGt6cF6kFfT4oj41R4sEEdr9nGcmeL9D+bVKO7Y2l
BCPsbYoT45arJc5p4DM9mydLlBRV4vkZHKl+a2HDWdNsXa3n3rtrBMIoVq5RXEYQ
sSZqVseioHgj+8FBeQHDOfMOYzFxMULdy20UKVxrMA3cafOCUwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEdxnV7lJZpNcahpugKAcyvNilL0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xYzYz
NmY0NS1mYTZhLTQ1NTYtYjZlZS01MTg5MTI0ZDA4OTMvYjEyY2ZkYWEtNjQyMy0z
NjdjLTliMjItOTgzNTRkNWEwMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWM2MzZmNDUtZmE2YS00NTU2LWI2
ZWUtNTE4OTEyNGQwODkzLzFjNjM2ZjQ1LWZhNmEtNDU1Ni1iNmVlLTUxODkxMjRk
MDg5My5jcmwwHwYDVR0jBBgwFoAUcnrfnS8r1FDBqWTDEQ6QFIhxuP8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8xYzYzNmY0NS1mYTZhLTQ1NTYtYjZlZS01MTg5
MTI0ZDA4OTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWqADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA98s/HeoScXk8NkVqQR+4mlbLa5q3timULfD2ICiaKIrcJQwrOMbFR
XLDYlvuDYR0YDYQLzQMN4xPFlVOMlXp1spRfXu1dyY/oQycobpPjB7YdDS1xyRgv
A0a6rmIxrXFwjlUc1XwlVWkY4y59rbPlBii5Kt7P/rej+BQvYkEQC4RB9zzhCTNm
RZ50GO1aRQIEcEHcjrgG6YDXif47HdUvgaGhbTjhg1WiWBOFdudSwPkDaikFUljN
67S2UluzgqRq1FUE1zRDu9i6kL+R4ujREHHsaImA+6D5SNWn/6RDFlkV1pU/0M9Y
L2YfqhO+Kjgaz6V87ToqkIovduUEo3Mi
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:40:55 2026 by rpki-client