Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/80691033-d2ac-30a6-b14b-7e3d2d14a10e.roa
File:                     80691033-d2ac-30a6-b14b-7e3d2d14a10e.roa (raw, json)
Hash identifier:          LsOBxLfdV8fG8fHWVeUgGeDbInaFj7xoUR2tbWyozIw=
Subject key identifier:   55:58:CC:57:51:82:BF:F1:31:EC:A1:4F:E9:14:38:E2:B1:07:9F:A7
Certificate issuer:       /CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
Certificate serial:       010D0C9F4328584D8EF5600E98DBDE08B73C2A00
Authority key identifier: E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/80691033-d2ac-30a6-b14b-7e3d2d14a10e.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     397709
IP address blocks:        2602:fdca::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:60:0e:98:db:de:08:b7:3c:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=2e935c30-4a27-421f-b6b1-2cbd2ff2acb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:f3:be:5c:83:33:20:b9:66:a4:a3:0d:86:
                    57:c8:a6:62:8a:dc:e3:4c:1f:32:85:81:c3:1c:c3:
                    71:fd:b6:6f:54:43:2c:5c:fe:b7:6f:5c:d9:6f:64:
                    52:e0:d3:ef:11:84:97:44:f2:0d:4a:f5:30:fb:51:
                    57:be:02:ee:62:ce:58:1b:ab:fe:f2:1e:43:f6:cb:
                    b0:4f:b5:53:7a:7e:22:4f:d7:cc:8a:3a:fb:eb:69:
                    41:fc:6e:f1:2e:10:33:5f:9f:d4:f7:87:bb:fe:df:
                    1f:02:f1:2e:09:f9:0f:d4:b8:4a:9b:4c:3a:92:cd:
                    fe:60:fc:41:a7:3e:60:9d:e6:09:da:b0:f7:dd:19:
                    71:09:64:37:e4:96:bf:d0:58:18:2f:ee:4a:94:1e:
                    03:4f:ea:a5:89:8d:c4:d6:26:9b:4f:62:bf:18:a5:
                    02:cf:dc:98:11:5b:ca:66:9e:00:25:6f:79:16:74:
                    a4:95:d6:41:ca:5a:44:c4:6d:e2:a9:51:d8:3f:3c:
                    e7:05:67:d7:5c:ca:5f:db:4e:0a:c9:cf:a8:a4:6c:
                    c9:64:8b:66:8d:95:82:c9:a5:06:15:92:6d:24:d8:
                    ba:5a:42:e4:12:22:b6:87:4d:30:ac:fc:f6:4c:da:
                    b5:89:ff:f0:02:fd:8e:08:42:06:cf:2c:f0:d3:12:
                    bf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:58:CC:57:51:82:BF:F1:31:EC:A1:4F:E9:14:38:E2:B1:07:9F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/80691033-d2ac-30a6-b14b-7e3d2d14a10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl

            X509v3 Authority Key Identifier:
                keyid:E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdca::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:18:5f:80:d5:19:3e:c2:3e:e6:48:76:f6:4c:c1:be:01:5f:
         da:06:2b:e9:9a:16:72:31:95:9c:2d:96:02:14:23:ec:ea:cb:
         82:20:de:fc:51:8f:76:5d:32:ec:f9:9c:29:b5:e4:62:9f:53:
         78:c4:3c:56:1e:eb:68:1b:98:97:2f:5d:f7:1e:ba:48:1e:a5:
         e8:09:50:ee:f8:d2:c3:1c:a2:98:e5:98:ba:f2:96:b8:c2:32:
         1e:b7:f2:c7:ee:bc:63:f5:61:ac:37:02:55:a6:5b:a1:12:04:
         36:f8:17:fe:a5:99:75:0e:61:4b:11:a1:64:1d:11:2f:81:a4:
         9b:6e:38:1c:5a:ba:79:41:f1:c1:44:8e:85:8e:b1:b8:55:50:
         67:45:44:a5:68:7c:f1:77:41:10:6c:dd:16:04:c1:54:b4:bc:
         ab:aa:78:63:fd:28:10:b4:0a:9b:5f:12:80:c0:66:68:f2:56:
         21:64:0c:81:02:56:45:5e:cb:81:13:9f:fe:13:8d:27:04:f6:
         59:35:eb:95:db:ce:73:51:f2:23:2b:93:da:9f:2c:46:5d:26:
         f5:22:5d:2e:bd:05:24:f2:eb:02:12:60:0e:ea:e0:67:98:40:
         d1:2c:89:5a:11:3e:c2:7f:2f:d4:29:5e:16:e6:35:52:25:dd:
         75:13:0e:f0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2O9WAOmNveCLc8KgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFlNTAzZmQtMmI2Yi00M2JhLWFjMmUtNGZkNDY5N2Fj
NDUyMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
MmU5MzVjMzAtNGEyNy00MjFmLWI2YjEtMmNiZDJmZjJhY2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstbzvlyDMyC5ZqSjDYZXyKZiitzjTB8yhYHD
HMNx/bZvVEMsXP63b1zZb2RS4NPvEYSXRPINSvUw+1FXvgLuYs5YG6v+8h5D9suw
T7VTen4iT9fMijr762lB/G7xLhAzX5/U94e7/t8fAvEuCfkP1LhKm0w6ks3+YPxB
pz5gneYJ2rD33RlxCWQ35Ja/0FgYL+5KlB4DT+qliY3E1iabT2K/GKUCz9yYEVvK
Zp4AJW95FnSkldZBylpExG3iqVHYPzznBWfXXMpf204Kyc+opGzJZItmjZWCyaUG
FZJtJNi6WkLkEiK2h00wrPz2TNq1if/wAv2OCEIGzyzw0xK/PwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFVYzFdRgr/xMeyhT+kUOOKxB5+nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWU1
MDNmZC0yYjZiLTQzYmEtYWMyZS00ZmQ0Njk3YWM0NTIvODA2OTEwMzMtZDJhYy0z
MGE2LWIxNGItN2UzZDJkMTRhMTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFlNTAzZmQtMmI2Yi00M2JhLWFj
MmUtNGZkNDY5N2FjNDUyLzRhZTUwM2ZkLTJiNmItNDNiYS1hYzJlLTRmZDQ2OTdh
YzQ1Mi5jcmwwHwYDVR0jBBgwFoAU6TxgaZlr8Ypxvn55tq8B+oqhO1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80YWU1MDNmZC0yYjZiLTQzYmEtYWMyZS00ZmQ0
Njk3YWM0NTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9ygAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAGxhfgNUZPsI+5kh29kzBvgFf2gYr6ZoWcjGVnC2WAhQj7OrLgiDe
/FGPdl0y7PmcKbXkYp9TeMQ8Vh7raBuYly9d9x66SB6l6AlQ7vjSwxyimOWYuvKW
uMIyHrfyx+68Y/VhrDcCVaZboRIENvgX/qWZdQ5hSxGhZB0RL4Gkm244HFq6eUHx
wUSOhY6xuFVQZ0VEpWh88XdBEGzdFgTBVLS8q6p4Y/0oELQKm18SgMBmaPJWIWQM
gQJWRV7LgROf/hONJwT2WTXrldvOc1HyIyuT2p8sRl0m9SJdLr0FJPLrAhJgDurg
Z5hA0SyJWhE+wn8v1CleFuY1UiXddRMO8A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:20:11 2026 by rpki-client