Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b6d35574-1958-37f0-bb82-f770b4dfbdcc.roa
File:                     b6d35574-1958-37f0-bb82-f770b4dfbdcc.roa (raw, json)
Hash identifier:          rI5ApkIM24HxTMEh8KCirtWzJnJf2M7DqtB+LGB35IE=
Subject key identifier:   18:05:42:1C:30:AF:D8:AC:18:1D:DF:C3:9E:6D:00:9D:74:61:8B:F4
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4233A7A18ADB465B8FF0880
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b6d35574-1958-37f0-bb82-f770b4dfbdcc.roa
Signing time:             Wed 19 Aug 2026 18:03:48 +0000
ROA not before:           Wed 19 Aug 2026 18:03:48 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     3130
IP address blocks:        2001:418:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:3a:7a:18:ad:b4:65:b8:ff:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:48 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=34831ede-6ba8-4744-88bb-0e89d1653b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:28:a0:53:19:3e:18:7c:77:26:76:13:80:
                    39:5b:d4:4d:bc:e6:94:cf:df:58:7d:3a:ba:93:24:
                    7c:07:1d:43:63:1a:7b:64:8d:58:f0:cf:45:81:94:
                    84:14:dc:bc:26:1f:52:43:35:41:58:e5:80:83:b7:
                    46:a4:7e:17:18:5c:f7:d2:c4:32:4d:6a:a8:c2:b1:
                    96:3c:9c:14:99:79:50:74:dc:cc:7b:a9:49:c6:18:
                    7b:f0:48:2c:36:81:62:e8:1c:d6:80:c8:27:86:a1:
                    4d:0e:13:50:3c:a6:6c:f8:c5:ab:e0:9a:e8:cc:57:
                    ad:a6:88:c1:90:e2:7c:36:8b:f5:4e:ae:f8:40:0d:
                    8a:9d:89:b0:71:0b:f4:c6:8c:b5:2e:b2:43:c3:ca:
                    6f:a9:01:94:e2:a1:86:34:2a:14:3b:13:ff:08:34:
                    57:bc:d0:c3:bb:7e:11:54:aa:7a:61:84:0f:f7:3d:
                    b4:c2:b5:3b:1e:ee:da:59:aa:e8:45:e0:85:60:f6:
                    c0:0a:58:af:30:3b:8d:5e:47:b6:db:04:60:4f:b2:
                    84:86:8a:13:10:56:4d:26:e8:14:81:8d:3a:ff:05:
                    a6:82:01:11:38:a5:8e:52:0d:34:23:a8:c1:e1:ce:
                    0c:e4:5f:40:f3:cb:38:ee:ac:84:d7:94:36:bd:a2:
                    4a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:05:42:1C:30:AF:D8:AC:18:1D:DF:C3:9E:6D:00:9D:74:61:8B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b6d35574-1958-37f0-bb82-f770b4dfbdcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:2c:50:65:88:9b:26:9a:f0:38:57:8a:b4:37:e0:f4:5d:43:
         dd:0d:82:b8:39:99:df:f9:6e:c6:23:63:ba:57:8b:c5:7c:ab:
         59:ef:31:43:27:61:49:05:72:91:fd:fd:d8:16:30:bd:d7:6a:
         28:0b:3b:fe:1c:57:89:46:83:66:89:b7:f6:9f:a0:14:62:f2:
         d8:73:35:9d:23:d2:af:93:b5:13:08:c4:26:a7:ac:a1:da:94:
         a6:43:44:b7:a6:bd:ef:b8:3b:7b:d0:d8:37:2e:9f:4a:50:d0:
         27:da:51:f4:d8:da:f7:6c:f5:1d:63:77:d6:e0:09:32:5c:98:
         c6:fc:1d:bb:7b:f0:6f:77:3d:15:aa:59:83:1e:61:a0:3e:55:
         5f:36:64:8a:10:f3:d9:6b:19:04:88:52:eb:1a:7b:a4:25:2f:
         13:cf:9b:31:a4:79:2d:e7:35:23:a9:24:95:5d:a5:78:1e:76:
         d1:48:41:3e:38:a9:e5:a0:5f:7e:6e:c2:6c:38:e1:ee:30:d0:
         76:82:e9:d9:82:5a:15:38:b4:eb:d6:a8:fe:f3:40:fc:68:a9:
         97:a9:17:7a:bc:0f:00:dc:04:0a:d0:24:01:e2:d9:28:f6:f2:
         db:db:aa:59:41:7b:d0:cc:ca:a7:76:ae:4e:5f:ca:ea:c2:ee:
         5e:70:db:69
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7kIzp6GK20Zbj/CIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDgxOTE4MDM0OFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk
MzQ4MzFlZGUtNmJhOC00NzQ0LTg4YmItMGU4OWQxNjUzYjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsisooFMZPhh8dyZ2E4A5W9RNvOaUz99YfTq6
kyR8Bx1DYxp7ZI1Y8M9FgZSEFNy8Jh9SQzVBWOWAg7dGpH4XGFz30sQyTWqowrGW
PJwUmXlQdNzMe6lJxhh78EgsNoFi6BzWgMgnhqFNDhNQPKZs+MWr4JrozFetpojB
kOJ8Nov1Tq74QA2KnYmwcQv0xoy1LrJDw8pvqQGU4qGGNCoUOxP/CDRXvNDDu34R
VKp6YYQP9z20wrU7Hu7aWaroReCFYPbAClivMDuNXke22wRgT7KEhooTEFZNJugU
gY06/wWmggEROKWOUg00I6jB4c4M5F9A88s47qyE15Q2vaJKcwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBgFQhwwr9isGB3fw55tAJ10YYv0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjZkMzU1NzQtMTk1OC0z
N2YwLWJiODItZjc3MGI0ZGZiZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEGAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJosUGWImyaa8DhXirQ34PRdQ90Ngrg5md/5bsYjY7pXi8V8q1nv
MUMnYUkFcpH9/dgWML3XaigLO/4cV4lGg2aJt/afoBRi8thzNZ0j0q+TtRMIxCan
rKHalKZDRLemve+4O3vQ2Dcun0pQ0CfaUfTY2vds9R1jd9bgCTJcmMb8Hbt78G93
PRWqWYMeYaA+VV82ZIoQ89lrGQSIUusae6QlLxPPmzGkeS3nNSOpJJVdpXgedtFI
QT44qeWgX35uwmw44e4w0HaC6dmCWhU4tOvWqP7zQPxoqZepF3q8DwDcBArQJAHi
2Sj28tvbqllBe9DMyqd2rk5fyurC7l5w22k=
-----END CERTIFICATE-----
Generated at Thu Sep 17 21:33:59 2026 by rpki-client