Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/e1063d92-eaab-35be-96af-b9b1f9ff538b.roa
File:                     e1063d92-eaab-35be-96af-b9b1f9ff538b.roa (raw, json)
Hash identifier:          sLXkhiruyYqWdlWlFotR0e4tsdHGftB0fgIVGTgtWkc=
Subject key identifier:   96:B2:FB:67:1E:FA:4D:0F:56:9F:E3:42:8C:D0:31:62:CD:27:61:67
Certificate issuer:       /CN=3db33a74-4bfb-4717-906c-95b172456bd9
Certificate serial:       010D0C9F4328584E97B4FB92CA42682BE4AE9E00
Authority key identifier: 69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/e1063d92-eaab-35be-96af-b9b1f9ff538b.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     401671
IP address blocks:        2604:c20:2e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b4:fb:92:ca:42:68:2b:e4:ae:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db33a74-4bfb-4717-906c-95b172456bd9
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=0d456452-26ce-46ed-9a9c-dcfa497475bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:77:8a:6f:9a:b9:0d:cf:ae:9a:d6:aa:13:
                    9a:fa:cf:cf:cf:ab:14:42:2c:e1:67:f4:89:d6:3a:
                    ed:0c:a2:c5:db:51:b0:58:ef:0f:81:7d:26:6d:84:
                    2d:96:76:3e:8b:3c:94:35:8d:bf:f0:2b:72:e6:cc:
                    b0:af:dc:ed:05:61:58:10:96:fc:e8:07:2c:87:fe:
                    df:b4:21:e6:56:3b:89:06:37:ca:46:d8:30:51:21:
                    98:d5:36:28:9d:f0:4c:fb:cf:0b:1b:87:79:5e:e0:
                    b5:ed:c6:10:bd:f3:ef:2b:14:19:82:02:9b:cf:41:
                    bf:1b:46:d0:8d:76:3e:05:d1:25:0b:ac:19:b0:b8:
                    8b:75:cb:62:ce:4f:18:4b:ed:92:b8:25:6d:bc:b2:
                    76:23:7d:40:6c:ff:c8:84:71:88:f5:8f:9a:40:25:
                    f6:46:cd:00:73:e3:f6:79:ca:dd:ac:ae:40:db:80:
                    ec:c3:60:d3:6e:ad:87:2e:11:c0:36:35:b6:4d:72:
                    73:68:1e:00:1c:70:b8:01:0c:05:c1:b0:0f:c3:02:
                    91:91:83:84:ea:68:39:df:c5:36:19:cc:71:79:1f:
                    d3:90:2b:c4:57:cf:fb:16:08:4e:62:d1:5c:29:c6:
                    0e:8e:b0:ce:18:0a:06:c3:8c:2f:da:61:34:3c:4b:
                    02:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B2:FB:67:1E:FA:4D:0F:56:9F:E3:42:8C:D0:31:62:CD:27:61:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/e1063d92-eaab-35be-96af-b9b1f9ff538b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl

            X509v3 Authority Key Identifier:
                keyid:69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c20:2e::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ac:5f:2a:4d:f5:a7:87:71:72:42:d4:00:06:36:d8:bc:b5:
         ab:aa:25:28:74:be:c4:68:ce:e2:28:51:0f:7f:f2:d9:5d:71:
         d6:1a:de:ff:46:1a:21:c4:7c:33:e6:b0:aa:26:b7:a7:2e:5d:
         39:f2:cb:0a:f8:3f:7a:08:f3:dd:96:50:ea:05:d8:65:35:ce:
         10:93:c6:91:8b:09:9f:31:f4:6e:b4:cf:5e:11:83:69:41:64:
         8f:7d:7f:e6:43:8e:cd:b9:07:a9:8e:2a:ac:48:d4:6b:21:03:
         f9:30:28:d3:18:6e:e5:1c:b5:cf:78:63:3e:75:f7:cd:4f:9f:
         d5:f8:2b:a7:74:25:4b:a9:6d:af:27:bb:06:04:0d:64:2d:ec:
         7b:51:02:f5:83:cb:c9:28:1c:d1:9c:cc:0e:59:c8:7f:1a:de:
         79:83:81:15:c5:73:0f:4e:05:c8:8f:54:da:7e:e0:e7:23:db:
         47:a4:6f:5c:d2:ac:3c:6d:e3:0d:bc:27:27:3e:1b:cd:30:cc:
         65:14:09:c4:e6:85:e2:2e:83:f9:20:86:c9:81:f7:db:46:33:
         ee:0d:17:e2:0b:f3:99:39:16:8d:df:59:5d:d9:89:b3:66:6e:
         c6:53:cd:c3:a4:25:2c:08:5c:d4:e3:a2:36:50:15:8b:07:da:
         45:bc:32:52
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6XtPuSykJoK+SungAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2RiMzNhNzQtNGJmYi00NzE3LTkwNmMtOTViMTcyNDU2
YmQ5MB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk
MGQ0NTY0NTItMjZjZS00NmVkLTlhOWMtZGNmYTQ5NzQ3NWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Tl3im+auQ3PrprWqhOa+s/Pz6sUQizhZ/SJ
1jrtDKLF21GwWO8PgX0mbYQtlnY+izyUNY2/8Cty5sywr9ztBWFYEJb86Acsh/7f
tCHmVjuJBjfKRtgwUSGY1TYonfBM+88LG4d5XuC17cYQvfPvKxQZggKbz0G/G0bQ
jXY+BdElC6wZsLiLdctizk8YS+2SuCVtvLJ2I31AbP/IhHGI9Y+aQCX2Rs0Ac+P2
ecrdrK5A24Dsw2DTbq2HLhHANjW2TXJzaB4AHHC4AQwFwbAPwwKRkYOE6mg538U2
GcxxeR/TkCvEV8/7FghOYtFcKcYOjrDOGAoGw4wv2mE0PEsC1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJay+2ce+k0PVp/jQozQMWLNJ2FnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZGIz
M2E3NC00YmZiLTQ3MTctOTA2Yy05NWIxNzI0NTZiZDkvZTEwNjNkOTItZWFhYi0z
NWJlLTk2YWYtYjliMWY5ZmY1MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2RiMzNhNzQtNGJmYi00NzE3LTkw
NmMtOTViMTcyNDU2YmQ5LzNkYjMzYTc0LTRiZmItNDcxNy05MDZjLTk1YjE3MjQ1
NmJkOS5jcmwwHwYDVR0jBBgwFoAUaS7LdUXu10Kxl1GH6BSi2INLiHUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZGIzM2E3NC00YmZiLTQ3MTctOTA2Yy05NWIx
NzI0NTZiZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgQMIAAu
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABasXypN9aeHcXJC1AAGNti8tauqJSh0vsRozuIoUQ9/8tldcdYa
3v9GGiHEfDPmsKomt6cuXTnyywr4P3oI892WUOoF2GU1zhCTxpGLCZ8x9G60z14R
g2lBZI99f+ZDjs25B6mOKqxI1GshA/kwKNMYbuUctc94Yz51981Pn9X4K6d0JUup
ba8nuwYEDWQt7HtRAvWDy8koHNGczA5ZyH8a3nmDgRXFcw9OBciPVNp+4Ocj20ek
b1zSrDxt4w28Jyc+G80wzGUUCcTmheIug/kghsmB99tGM+4NF+IL85k5Fo3fWV3Z
ibNmbsZTzcOkJSwIXNTjojZQFYsH2kW8MlI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:42:36 2026 by rpki-client