Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df11e95b-7ae5-3c1f-b363-d45109ce3ca1.roa
File:                     df11e95b-7ae5-3c1f-b363-d45109ce3ca1.roa (raw, json)
Hash identifier:          kAAITYfj4QIqzAhXrZHLGdoZiUKU3VYA8k0soFpbtzE=
Subject key identifier:   61:95:D4:20:B5:A5:C6:90:58:F2:79:30:62:EB:83:D1:51:BE:11:03
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E296EF78F5F5DA0FDE8D6B430
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df11e95b-7ae5-3c1f-b363-d45109ce3ca1.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     19527
IP address blocks:        2600:1902:2d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6e:f7:8f:5f:5d:a0:fd:e8:d6:b4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=9456f372-bef0-4e56-bcde-90094bfa249e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:97:28:aa:75:c3:03:d8:91:4e:50:2b:20:
                    98:b7:b1:84:8f:55:c3:97:97:e5:ad:fc:10:c5:f1:
                    f3:61:1c:c4:c7:6c:7c:c6:3d:59:75:39:d3:0c:bc:
                    a4:f4:80:aa:67:6e:61:e3:35:2d:0b:87:d8:1b:f6:
                    4a:ad:36:58:89:a9:00:90:ce:04:6c:57:b1:22:1f:
                    c5:5f:cd:1b:2e:8a:27:33:64:f2:6d:d5:e3:29:cc:
                    91:9d:18:01:88:9b:f5:5c:c9:32:f4:83:55:50:87:
                    2b:b2:cf:f7:ee:74:1a:cc:e9:c5:e2:a6:39:fb:0b:
                    84:9b:10:e5:8a:02:8e:44:cd:ce:cf:04:0e:54:7e:
                    c0:21:5f:05:a8:9f:af:8a:55:e4:c9:66:d6:b2:4d:
                    fd:aa:b9:a9:00:7d:2b:af:8d:7e:90:ec:e8:e0:2b:
                    55:bd:fe:f4:9c:e4:f7:13:eb:da:e1:6b:88:d2:d3:
                    6e:d7:69:78:8a:af:72:6e:9a:18:dd:86:f8:b5:a3:
                    93:65:8c:41:52:9f:9c:a4:53:00:d7:5a:ee:a1:05:
                    d1:3a:6d:06:52:ee:89:e9:36:9b:a2:7c:af:99:ee:
                    24:b6:06:c3:0c:c2:37:2b:e7:23:04:a9:a7:4e:9f:
                    a0:9b:34:e2:27:f8:0e:cf:7e:78:85:61:9d:04:ec:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:95:D4:20:B5:A5:C6:90:58:F2:79:30:62:EB:83:D1:51:BE:11:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df11e95b-7ae5-3c1f-b363-d45109ce3ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:2d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:bf:63:fa:dc:a1:fb:59:d1:8a:73:9e:4e:ab:74:d7:33:7b:
         65:83:af:22:2b:72:ee:81:15:cb:22:95:12:69:ce:57:e9:b4:
         18:40:58:68:a2:9d:fa:3f:45:db:cb:f3:48:05:ef:b8:4f:df:
         f0:e9:3a:d1:c9:16:7e:49:50:59:88:59:25:eb:d9:c1:8f:27:
         9a:b5:67:dd:30:1c:de:c9:54:de:c7:88:ee:20:29:2f:5f:e2:
         ff:55:53:d3:12:98:6c:31:1c:b3:e8:92:9a:4a:a7:7a:73:04:
         fc:0a:a2:f0:ca:d8:0c:ac:8d:2d:d2:24:39:53:0b:5d:90:2e:
         07:c9:31:89:24:fb:a4:02:d4:1b:59:4e:1d:b4:e2:f0:d1:a0:
         94:71:64:e7:55:5e:f9:46:ea:fc:bd:02:bd:c1:e2:c0:81:27:
         71:ba:39:b0:3e:9a:c2:92:d7:b2:e3:8a:db:59:11:4b:53:c8:
         a2:d2:1b:86:b2:70:ac:fa:a4:99:67:e7:39:fd:7c:a8:07:41:
         2f:80:03:f3:87:48:98:d2:3c:01:4a:2b:d4:c7:10:2b:c6:b3:
         00:c2:a7:d9:17:c4:72:eb:a7:8a:85:29:91:0e:c2:8c:b5:aa:
         29:3f:20:cc:60:bf:f8:63:77:d5:58:2c:c6:33:5d:a3:43:dc:
         8f:43:be:7c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4pbvePX12g/ejWtDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk
OTQ1NmYzNzItYmVmMC00ZTU2LWJjZGUtOTAwOTRiZmEyNDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXCXKKp1wwPYkU5QKyCYt7GEj1XDl5flrfwQ
xfHzYRzEx2x8xj1ZdTnTDLyk9ICqZ25h4zUtC4fYG/ZKrTZYiakAkM4EbFexIh/F
X80bLoonM2TybdXjKcyRnRgBiJv1XMky9INVUIcrss/37nQazOnF4qY5+wuEmxDl
igKORM3OzwQOVH7AIV8FqJ+vilXkyWbWsk39qrmpAH0rr41+kOzo4CtVvf70nOT3
E+va4WuI0tNu12l4iq9ybpoY3Yb4taOTZYxBUp+cpFMA11ruoQXROm0GUu6J6Tab
onyvme4ktgbDDMI3K+cjBKmnTp+gmzTiJ/gOz354hWGdBOzmBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGGV1CC1pcaQWPJ5MGLrg9FRvhEDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGYxMWU5NWItN2FlNS0z
YzFmLWIzNjMtZDQ1MTA5Y2UzY2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgLQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADm/Y/rcoftZ0Ypznk6rdNcze2WDryIrcu6BFcsilRJpzlfptBhA
WGiinfo/RdvL80gF77hP3/DpOtHJFn5JUFmIWSXr2cGPJ5q1Z90wHN7JVN7HiO4g
KS9f4v9VU9MSmGwxHLPokppKp3pzBPwKovDK2AysjS3SJDlTC12QLgfJMYkk+6QC
1BtZTh204vDRoJRxZOdVXvlG6vy9Ar3B4sCBJ3G6ObA+msKS17LjittZEUtTyKLS
G4aycKz6pJln5zn9fKgHQS+AA/OHSJjSPAFKK9THECvGswDCp9kXxHLrp4qFKZEO
woy1qik/IMxgv/hjd9VYLMYzXaND3I9Dvnw=
-----END CERTIFICATE-----
Generated at Sun Jun 21 13:30:42 2026 by rpki-client