Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/364a4557-478a-493c-ba9f-dc6284f0f5c9/d918d101-d972-33ce-a4fa-c10627eb9073.roa
File:                     d918d101-d972-33ce-a4fa-c10627eb9073.roa (raw, json)
Hash identifier:          ViJK8B6L0f0Bqq9qnzTee4cdiG2xyqdNNl8S/GnFI8w=
Subject key identifier:   70:86:AF:A6:C4:EC:8F:52:C0:80:8F:4C:A7:5B:44:21:DA:01:A4:2B
Certificate issuer:       /CN=364a4557-478a-493c-ba9f-dc6284f0f5c9
Certificate serial:       010D0C9F4328584F90F2187D23A2C82FE0F77FB0
Authority key identifier: 6C:ED:2A:E4:45:E9:4E:79:18:97:6F:7C:A9:28:C0:61:85:28:09:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/364a4557-478a-493c-ba9f-dc6284f0f5c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/364a4557-478a-493c-ba9f-dc6284f0f5c9/d918d101-d972-33ce-a4fa-c10627eb9073.roa
Signing time:             Tue 20 Oct 2026 15:39:39 +0000
ROA not before:           Tue 20 Oct 2026 15:39:39 +0000
ROA not after:            Mon 18 Jan 2027 16:39:39 +0000
asID:                     15108
IP address blocks:        2605:d000::/32 maxlen: 32
                          2605:d001::/32 maxlen: 32
                          2605:d002::/32 maxlen: 32
                          2605:d003::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/364a4557-478a-493c-ba9f-dc6284f0f5c9/364a4557-478a-493c-ba9f-dc6284f0f5c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/364a4557-478a-493c-ba9f-dc6284f0f5c9/364a4557-478a-493c-ba9f-dc6284f0f5c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/364a4557-478a-493c-ba9f-dc6284f0f5c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:f2:18:7d:23:a2:c8:2f:e0:f7:7f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=364a4557-478a-493c-ba9f-dc6284f0f5c9
        Validity
            Not Before: Oct 20 15:39:39 2026 GMT
            Not After : Jan 18 16:39:39 2027 GMT
        Subject: CN=9f98ec59-4002-480f-b0ee-baab8c7ee3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:ee:9b:5f:45:cf:60:e0:73:08:81:e6:c9:
                    22:ed:c8:f8:2d:e8:c7:1b:59:ba:e2:eb:c4:93:3e:
                    46:c7:0e:f7:87:29:28:c7:d9:85:f3:9b:fe:e4:5f:
                    0a:95:14:ba:14:c7:46:bc:f5:8b:46:cc:57:17:30:
                    47:d9:62:75:11:a6:e0:64:21:60:05:8b:d5:49:21:
                    a9:d9:c0:bf:35:7c:4a:49:a7:e6:76:c8:2b:e9:8f:
                    42:b0:6a:fb:2c:f7:fa:58:ad:c7:4e:f8:9c:36:ca:
                    41:a8:09:35:57:77:ed:2f:a3:cc:5b:f5:96:a2:e8:
                    18:18:93:68:4e:fe:15:81:46:36:82:92:16:96:75:
                    d0:50:a7:c6:ef:c4:37:40:5e:3c:4c:1c:fe:c6:e9:
                    57:1d:fc:24:30:f0:a2:1a:7d:2f:fb:2d:a5:8d:c7:
                    8b:f4:05:0e:76:ba:be:a2:b3:01:95:b5:e1:53:16:
                    53:51:8c:51:89:a2:c3:9f:c6:a1:ca:ba:4f:7e:9a:
                    6c:1e:9f:79:fb:2b:29:9b:cc:24:8f:09:2a:95:80:
                    20:05:1b:3b:4a:00:84:e2:52:a0:a1:09:52:2e:de:
                    56:5b:98:18:49:2d:4d:59:ba:11:c2:b1:d9:ed:d2:
                    46:36:f7:34:21:74:77:0e:58:f2:60:03:c3:72:7e:
                    3f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:86:AF:A6:C4:EC:8F:52:C0:80:8F:4C:A7:5B:44:21:DA:01:A4:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/364a4557-478a-493c-ba9f-dc6284f0f5c9/d918d101-d972-33ce-a4fa-c10627eb9073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/364a4557-478a-493c-ba9f-dc6284f0f5c9/364a4557-478a-493c-ba9f-dc6284f0f5c9.crl

            X509v3 Authority Key Identifier:
                keyid:6C:ED:2A:E4:45:E9:4E:79:18:97:6F:7C:A9:28:C0:61:85:28:09:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/364a4557-478a-493c-ba9f-dc6284f0f5c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:d000::/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:bc:ab:71:4f:56:2d:07:21:eb:47:ab:c9:1d:0d:be:f2:42:
         fc:e6:11:f1:49:c9:55:38:5b:5e:cf:76:01:95:4c:a9:2c:a5:
         e6:16:15:e4:b3:2e:c8:3a:a6:a5:f7:b8:8a:c9:49:87:d2:9b:
         4e:e2:41:0d:9f:91:a5:66:1d:68:4a:49:e7:67:f0:bc:e6:28:
         61:1c:24:b1:ac:88:92:c0:c2:0c:bd:61:14:ec:39:24:82:7b:
         8e:02:08:40:e4:8c:13:a2:93:eb:8f:33:22:f3:b3:bc:0d:2a:
         cd:36:92:38:28:6d:fb:c2:10:43:46:bd:7d:cd:8b:90:86:b8:
         72:75:72:e5:03:b1:e1:2f:25:6b:a0:22:3a:92:5a:75:60:16:
         f4:a4:81:a0:5c:cf:ba:0b:4c:0d:66:d7:4c:7d:2b:98:1a:34:
         cc:45:c1:91:e9:a6:06:98:4a:37:79:83:4d:74:b0:26:50:14:
         fc:1d:a0:24:28:98:7d:71:da:8b:1f:cf:e4:2f:2c:fb:e2:68:
         a9:a9:40:8d:76:e4:60:1f:a3:6e:d4:be:39:12:b5:85:43:f4:
         dd:4a:99:2d:ce:7f:f4:4b:79:cd:fb:25:b4:91:31:cf:ed:81:
         d6:c6:a0:cd:6c:d4:69:d6:26:b4:6a:b6:b1:ea:1f:9f:ea:80:
         ef:4b:ae:7f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+Q8hh9I6LIL+D3f7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY0YTQ1NTctNDc4YS00OTNjLWJhOWYtZGM2Mjg0ZjBm
NWM5MB4XDTI2MTAyMDE1MzkzOVoXDTI3MDExODE2MzkzOVowLzEtMCsGA1UEAxMk
OWY5OGVjNTktNDAwMi00ODBmLWIwZWUtYmFhYjhjN2VlM2Y2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJLum19Fz2DgcwiB5ski7cj4LejHG1m64uvE
kz5Gxw73hykox9mF85v+5F8KlRS6FMdGvPWLRsxXFzBH2WJ1EabgZCFgBYvVSSGp
2cC/NXxKSafmdsgr6Y9CsGr7LPf6WK3HTvicNspBqAk1V3ftL6PMW/WWougYGJNo
Tv4VgUY2gpIWlnXQUKfG78Q3QF48TBz+xulXHfwkMPCiGn0v+y2ljceL9AUOdrq+
orMBlbXhUxZTUYxRiaLDn8ahyrpPfppsHp95+yspm8wkjwkqlYAgBRs7SgCE4lKg
oQlSLt5WW5gYSS1NWboRwrHZ7dJGNvc0IXR3DljyYAPDcn4/2QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHCGr6bE7I9SwICPTKdbRCHaAaQrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjRh
NDU1Ny00NzhhLTQ5M2MtYmE5Zi1kYzYyODRmMGY1YzkvZDkxOGQxMDEtZDk3Mi0z
M2NlLWE0ZmEtYzEwNjI3ZWI5MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY0YTQ1NTctNDc4YS00OTNjLWJh
OWYtZGM2Mjg0ZjBmNWM5LzM2NGE0NTU3LTQ3OGEtNDkzYy1iYTlmLWRjNjI4NGYw
ZjVjOS5jcmwwHwYDVR0jBBgwFoAUbO0q5EXpTnkYl298qSjAYYUoCbYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjRhNDU1Ny00NzhhLTQ5M2MtYmE5Zi1kYzYy
ODRmMGY1YzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJgXQADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDEvKtxT1YtByHrR6vJHQ2+8kL85hHxSclVOFtez3YBlUypLKXmFhXk
sy7IOqal97iKyUmH0ptO4kENn5GlZh1oSknnZ/C85ihhHCSxrIiSwMIMvWEU7Dkk
gnuOAghA5IwTopPrjzMi87O8DSrNNpI4KG37whBDRr19zYuQhrhydXLlA7HhLyVr
oCI6klp1YBb0pIGgXM+6C0wNZtdMfSuYGjTMRcGR6aYGmEo3eYNNdLAmUBT8HaAk
KJh9cdqLH8/kLyz74mipqUCNduRgH6Nu1L45ErWFQ/TdSpktzn/0S3nN+yW0kTHP
7YHWxqDNbNRp1ia0arax6h+f6oDvS65/
-----END CERTIFICATE-----
Generated at Wed Nov 4 15:31:17 2026 by rpki-client