Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa
File:                     4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa (raw, json)
Hash identifier:          EgQBk92fiJG1O3a0vD5OY2RAW4Zy0u+Hi0K1k+1Ei5M=
Subject key identifier:   2B:7D:FE:B2:21:A5:C2:7D:6D:BE:A0:9E:A5:9B:E3:57:0B:1F:35:D7
Certificate issuer:       /CN=d4cafeea-cee5-442f-9f6c-530abebc6186
Certificate serial:       010D0C9F4328584D67DFD035F22C76B75E1F9D80
Authority key identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     396328
IP address blocks:        2607:c0c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:d0:35:f2:2c:76:b7:5e:1f:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4cafeea-cee5-442f-9f6c-530abebc6186
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=ce108f8d-7f0c-4a50-8e40-7b7e959966e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b8:a9:67:7c:dc:69:f6:22:a7:29:55:eb:bb:
                    3f:22:f7:a9:99:f5:e3:7c:43:18:f4:ec:df:e2:f0:
                    98:99:87:53:cf:9a:e5:27:f9:2d:46:d7:15:ea:c6:
                    c7:3a:e7:59:50:07:b8:ad:29:b8:89:ad:72:c5:07:
                    e8:11:92:a1:6b:fd:b3:3a:df:04:51:d5:9a:83:1b:
                    7b:b5:0e:83:3e:02:e5:40:d0:9c:08:8a:52:07:d8:
                    97:fd:32:17:a5:ce:04:9f:a2:8b:05:34:db:32:4e:
                    51:a9:85:82:6a:5e:cc:5d:27:c6:1f:c4:27:7e:1b:
                    78:3e:28:6a:de:1b:11:fa:5a:41:71:8c:af:34:c9:
                    5a:84:4a:fc:2d:a6:59:81:c5:3e:fd:29:0c:34:37:
                    74:7a:27:63:22:b3:84:5b:25:97:82:e7:d0:d0:60:
                    13:35:e7:69:f1:db:45:65:9a:e7:1d:39:c8:56:dd:
                    ec:cc:db:49:ce:20:82:f1:82:1e:87:b3:1f:87:ed:
                    31:98:03:9e:ab:c3:ee:76:ed:fa:44:10:ab:52:35:
                    0d:23:ed:1e:c6:fc:03:3b:d5:f0:84:01:92:a5:d0:
                    55:d8:e3:54:d1:05:7c:2a:9e:1e:9f:d7:a0:8d:a4:
                    19:8f:fc:9c:8f:41:eb:e0:4f:0c:e8:ea:ca:cd:75:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7D:FE:B2:21:A5:C2:7D:6D:BE:A0:9E:A5:9B:E3:57:0B:1F:35:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl

            X509v3 Authority Key Identifier:
                keyid:59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c0c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:57:1e:86:39:d5:b8:31:7d:e1:19:07:98:b5:a7:55:2c:fb:
         6e:3e:65:27:e9:d9:81:cd:cb:91:6e:b1:f3:77:c8:33:d7:d6:
         b4:d3:34:64:d4:f6:2b:67:10:5a:b2:8b:f9:f5:31:9f:dc:16:
         f4:94:c6:20:92:68:9c:c7:09:f5:17:9b:5f:4a:53:7e:f3:9a:
         ac:a0:39:e2:1f:41:0e:70:88:f5:fb:51:79:5f:3e:40:52:54:
         2e:a9:20:ff:bb:f9:0a:15:46:21:eb:e2:32:5e:81:78:3e:a8:
         d6:4a:c2:a5:d1:b8:e7:97:f0:89:39:e0:e3:be:60:93:25:e0:
         7f:3c:98:94:44:92:a9:dd:99:5a:18:0f:2b:17:a5:4e:0a:ac:
         94:99:ee:92:7a:73:43:b9:5f:7f:9a:de:18:6c:0f:1f:ef:f9:
         b7:77:18:55:d1:40:03:d5:99:6b:d3:b3:4f:9d:f0:cb:67:ee:
         90:ee:df:1f:d1:32:b7:49:9b:02:67:df:4e:56:ae:2f:fa:ac:
         ac:fc:8d:7d:5c:42:d3:62:0e:46:cb:44:d3:39:18:81:04:82:
         31:ff:50:30:ad:2e:12:ef:9a:c7:74:fb:82:71:99:2f:9d:a5:
         48:7d:29:1c:b0:01:99:11:36:8c:c0:80:16:5f:1e:21:3b:1c:
         1d:61:ed:96
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1n39A18ix2t14fnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDRjYWZlZWEtY2VlNS00NDJmLTlmNmMtNTMwYWJlYmM2
MTg2MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
Y2UxMDhmOGQtN2YwYy00YTUwLThlNDAtN2I3ZTk1OTk2NmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbipZ3zcafYipylV67s/IvepmfXjfEMY9Ozf
4vCYmYdTz5rlJ/ktRtcV6sbHOudZUAe4rSm4ia1yxQfoEZKha/2zOt8EUdWagxt7
tQ6DPgLlQNCcCIpSB9iX/TIXpc4En6KLBTTbMk5RqYWCal7MXSfGH8Qnfht4Pihq
3hsR+lpBcYyvNMlahEr8LaZZgcU+/SkMNDd0eidjIrOEWyWXgufQ0GATNedp8dtF
ZZrnHTnIVt3szNtJziCC8YIeh7Mfh+0xmAOeq8Pudu36RBCrUjUNI+0exvwDO9Xw
hAGSpdBV2ONU0QV8Kp4en9egjaQZj/ycj0Hr4E8M6OrKzXX91QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCt9/rIhpcJ9bb6gnqWb41cLHzXXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNh
ZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBhYmViYzYxODYvNGFjYjU0ZjAtNDQyYS0z
NjIwLWIyM2YtY2QxZmQ5NjMwZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDRjYWZlZWEtY2VlNS00NDJmLTlm
NmMtNTMwYWJlYmM2MTg2L2Q0Y2FmZWVhLWNlZTUtNDQyZi05ZjZjLTUzMGFiZWJj
NjE4Ni5jcmwwHwYDVR0jBBgwFoAUWV9X8eTPjzE2ogtDdn5KrdeOieIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNhZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBh
YmViYzYxODYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfAwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBUVx6GOdW4MX3hGQeYtadVLPtuPmUn6dmBzcuRbrHzd8gz19a00zRk
1PYrZxBasov59TGf3Bb0lMYgkmicxwn1F5tfSlN+85qsoDniH0EOcIj1+1F5Xz5A
UlQuqSD/u/kKFUYh6+IyXoF4PqjWSsKl0bjnl/CJOeDjvmCTJeB/PJiURJKp3Zla
GA8rF6VOCqyUme6SenNDuV9/mt4YbA8f7/m3dxhV0UAD1Zlr07NPnfDLZ+6Q7t8f
0TK3SZsCZ99OVq4v+qys/I19XELTYg5Gy0TTORiBBIIx/1AwrS4S75rHdPuCcZkv
naVIfSkcsAGZETaMwIAWXx4hOxwdYe2W
-----END CERTIFICATE-----
Generated at Wed Apr 8 21:44:24 2026 by rpki-client