Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/4fb105ef-7e3f-301f-b030-e161d2330d74.roa
File:                     4fb105ef-7e3f-301f-b030-e161d2330d74.roa (raw, json)
Hash identifier:          47vN5Iu8WrkNYpnK0prCmpQxm0IJTZLc7E2nuqWbT5A=
Subject key identifier:   97:5F:C1:F6:C7:C8:0C:F2:13:2C:82:5D:B3:B0:36:BB:0D:E3:02:1A
Certificate issuer:       /CN=d976d803-9006-4b37-9d12-23e5108d0e94
Certificate serial:       010D0C9F4328584D11949ECD2DFD01C5F90CCA80
Authority key identifier: 78:E1:07:6B:F3:61:E2:7E:0E:D0:08:5C:7F:63:E4:47:5C:8C:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/4fb105ef-7e3f-301f-b030-e161d2330d74.roa
Signing time:             Thu 05 Mar 2026 15:09:46 +0000
ROA not before:           Thu 05 Mar 2026 15:09:46 +0000
ROA not after:            Wed 03 Jun 2026 14:09:46 +0000
asID:                     401918
IP address blocks:        96.45.72.0/21 maxlen: 24
                          2604:1f60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/d976d803-9006-4b37-9d12-23e5108d0e94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/d976d803-9006-4b37-9d12-23e5108d0e94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:94:9e:cd:2d:fd:01:c5:f9:0c:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d976d803-9006-4b37-9d12-23e5108d0e94
        Validity
            Not Before: Mar  5 15:09:46 2026 GMT
            Not After : Jun  3 14:09:46 2026 GMT
        Subject: CN=2eb93192-b885-492f-80df-d5cb97566905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7c:9b:9c:5c:1e:49:57:0e:b1:8b:24:65:26:
                    2f:52:d9:0c:77:b9:07:78:d9:c1:f5:81:6c:d8:ca:
                    e7:63:e0:c7:6c:85:02:d0:2a:b0:51:9b:de:c3:f8:
                    28:96:e9:64:9c:ce:72:f8:5c:70:e1:fc:6b:36:d5:
                    73:41:00:73:4b:d4:61:9a:2e:1c:35:a8:31:6e:6a:
                    1a:ba:93:4c:38:a7:be:52:4f:b1:cf:95:9f:3d:79:
                    5a:fd:3e:bd:2f:ed:91:09:3a:6f:5e:17:5c:f0:11:
                    23:8b:38:f7:ba:6c:ae:14:30:8a:98:b2:c1:22:9e:
                    80:b6:c1:b6:db:58:fb:20:0d:7a:ab:f3:a8:ba:55:
                    22:56:21:db:c9:b1:ed:81:c6:a6:eb:08:20:4c:8a:
                    53:70:0f:79:ab:bb:87:30:0e:2b:f0:02:da:55:b4:
                    1e:b0:81:22:b4:11:7f:45:80:47:14:51:38:5f:72:
                    19:86:3e:bc:25:08:75:9d:16:8a:65:c1:d1:89:c5:
                    09:6a:ed:7b:86:3b:93:c6:7f:d0:52:14:56:d7:b5:
                    81:c6:57:01:7f:61:de:54:28:51:9d:ca:0a:16:86:
                    90:de:91:a0:58:5b:db:bd:21:fe:af:54:8b:47:69:
                    81:a8:3f:47:3a:03:80:a1:5d:f9:32:e6:84:40:3d:
                    de:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5F:C1:F6:C7:C8:0C:F2:13:2C:82:5D:B3:B0:36:BB:0D:E3:02:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/4fb105ef-7e3f-301f-b030-e161d2330d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/d976d803-9006-4b37-9d12-23e5108d0e94.crl

            X509v3 Authority Key Identifier:
                keyid:78:E1:07:6B:F3:61:E2:7E:0E:D0:08:5C:7F:63:E4:47:5C:8C:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.72.0/21
                IPv6:
                  2604:1f60::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:00:67:67:cb:d1:ff:9f:84:0c:be:03:27:ce:d0:95:f2:db:
         d9:9f:f4:c2:90:51:6c:bf:8e:d5:99:5b:f6:87:12:c3:fd:9d:
         95:bf:33:34:c7:57:e9:60:3c:72:72:c6:2b:87:c4:5b:0e:eb:
         0a:ae:f4:b3:1a:c9:f3:45:8f:c0:ac:58:97:31:d6:07:ce:e8:
         44:20:b5:39:00:ec:7e:ad:8b:ba:f8:b8:da:e8:5c:89:5b:77:
         ea:7e:99:9e:a1:5b:c3:61:f1:be:6a:af:1c:ee:3d:81:32:c4:
         59:af:24:53:f6:b7:7c:0b:b0:88:4b:07:12:4d:98:5d:a7:95:
         3a:a2:28:7e:56:f8:7f:a9:21:61:1e:65:b2:09:78:1e:5b:95:
         86:f9:81:00:97:25:5c:d7:13:1f:77:82:d5:33:b5:96:7f:be:
         f7:cd:05:8e:c7:05:93:c9:57:91:8b:9f:ec:df:8c:04:ea:d1:
         1d:33:14:6b:89:5f:db:71:ad:46:94:10:3e:ad:26:71:20:5e:
         67:b1:62:6e:7b:34:66:1a:60:04:68:d4:5c:43:c5:71:62:f4:
         84:4c:d8:68:0d:1b:5f:1b:12:57:92:aa:e0:18:48:06:c9:1a:
         02:79:61:cf:00:86:8c:08:fd:82:f5:ed:b2:82:7b:ca:b8:df:
         f2:3a:12:6f
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE0RlJ7NLf0BxfkMyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDk3NmQ4MDMtOTAwNi00YjM3LTlkMTItMjNlNTEwOGQw
ZTk0MB4XDTI2MDMwNTE1MDk0NloXDTI2MDYwMzE0MDk0NlowLzEtMCsGA1UEAxMk
MmViOTMxOTItYjg4NS00OTJmLTgwZGYtZDVjYjk3NTY2OTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHybnFweSVcOsYskZSYvUtkMd7kHeNnB9YFs
2MrnY+DHbIUC0CqwUZvew/golulknM5y+Fxw4fxrNtVzQQBzS9Rhmi4cNagxbmoa
upNMOKe+Uk+xz5WfPXla/T69L+2RCTpvXhdc8BEjizj3umyuFDCKmLLBIp6AtsG2
21j7IA16q/OoulUiViHbybHtgcam6wggTIpTcA95q7uHMA4r8ALaVbQesIEitBF/
RYBHFFE4X3IZhj68JQh1nRaKZcHRicUJau17hjuTxn/QUhRW17WBxlcBf2HeVChR
ncoKFoaQ3pGgWFvbvSH+r1SLR2mBqD9HOgOAoV35MuaEQD3ePwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFJdfwfbHyAzyEyyCXbOwNrsN4wIaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kOTc2
ZDgwMy05MDA2LTRiMzctOWQxMi0yM2U1MTA4ZDBlOTQvNGZiMTA1ZWYtN2UzZi0z
MDFmLWIwMzAtZTE2MWQyMzMwZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDk3NmQ4MDMtOTAwNi00YjM3LTlk
MTItMjNlNTEwOGQwZTk0L2Q5NzZkODAzLTkwMDYtNGIzNy05ZDEyLTIzZTUxMDhk
MGU5NC5jcmwwHwYDVR0jBBgwFoAUeOEHa/Nh4n4O0Ahcf2PkR1yM2TswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kOTc2ZDgwMy05MDA2LTRiMzctOWQxMi0yM2U1
MTA4ZDBlOTQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDYC1IMA0E
AgACMAcDBQAmBB9gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAEUAZ2fL0f+fhAy+AyfO0JXy29mf9MKQUWy/
jtWZW/aHEsP9nZW/MzTHV+lgPHJyxiuHxFsO6wqu9LMayfNFj8CsWJcx1gfO6EQg
tTkA7H6ti7r4uNroXIlbd+p+mZ6hW8Nh8b5qrxzuPYEyxFmvJFP2t3wLsIhLBxJN
mF2nlTqiKH5W+H+pIWEeZbIJeB5blYb5gQCXJVzXEx93gtUztZZ/vvfNBY7HBZPJ
V5GLn+zfjATq0R0zFGuJX9txrUaUED6tJnEgXmexYm57NGYaYARo1FxDxXFi9IRM
2GgNG18bEleSquAYSAbJGgJ5Yc8AhowI/YL17bKCe8q43/I6Em8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:23:02 2026 by rpki-client