Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa
File:                     d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa (raw, json)
Hash identifier:          sq5oBJW1i9nkUSVfjbnOGs/Z+sGDuCmu21Lcwo+f4Gs=
Subject key identifier:   94:30:1A:55:B1:ED:01:42:64:35:F9:59:A3:AF:89:61:B2:F9:64:C5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F7782F41D8DD29DCCABD3D2E0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     33363
IP address blocks:        2605:a40c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:f4:1d:8d:d2:9d:cc:ab:d3:d2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=99ef0381-a01a-48ef-80d5-efc5614fb83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a0:04:da:9f:66:01:3d:4e:30:2f:44:68:f4:
                    68:7e:86:31:49:6f:cf:2b:c2:78:f0:30:a7:fa:1a:
                    92:05:60:8a:92:d8:4b:97:a4:2a:35:b8:14:fd:3c:
                    bd:28:98:d6:ce:93:3d:f1:ce:9d:21:56:e9:5f:a8:
                    30:e9:57:68:a4:c5:0c:b3:62:c9:bd:3b:f7:a4:be:
                    ed:83:04:a3:55:60:f7:2e:93:29:e4:b9:db:c7:d8:
                    b9:fd:21:49:b3:10:92:e7:57:29:00:3a:19:89:8c:
                    f4:bf:ce:99:63:25:11:f0:f4:6d:bd:ba:22:e3:be:
                    06:53:76:05:08:ac:91:aa:75:79:c2:6c:0e:c6:72:
                    ae:01:0f:c7:82:fc:17:b4:1f:47:fd:d0:85:fb:72:
                    3e:d5:2b:e8:8c:91:d0:88:79:9f:98:6a:c0:5b:1a:
                    4a:6a:b3:f0:47:81:52:fa:9d:25:3b:fe:bf:c4:2b:
                    66:3a:ee:7f:74:e1:20:a0:26:96:07:e3:f4:fe:90:
                    cf:1b:58:1e:db:c4:6b:f5:48:ef:de:92:4c:ec:9d:
                    5f:70:4d:5d:80:96:59:4e:e8:42:72:ef:c6:4d:14:
                    76:1e:de:dd:a4:6a:5c:0a:31:d7:0f:90:a9:1d:68:
                    0c:12:2e:e2:f4:c6:ea:33:bd:ed:cd:07:5c:5e:44:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:30:1A:55:B1:ED:01:42:64:35:F9:59:A3:AF:89:61:B2:F9:64:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a40c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:33:21:92:9d:e7:c1:3e:25:f0:7b:ed:a2:a7:11:a3:e9:24:
         f0:26:88:1f:8a:51:fd:d0:3d:df:2e:ee:66:ac:24:9a:67:65:
         36:45:c6:a3:5a:44:b6:78:7e:96:f8:c6:2f:94:33:9c:d3:11:
         f7:75:8e:c1:68:09:0d:77:d1:c6:df:7b:59:72:e5:1c:40:4d:
         59:c7:16:78:2a:38:51:50:ba:81:1c:9c:43:8b:16:88:49:b4:
         ff:91:be:dd:74:34:de:89:56:5c:7b:49:9f:89:25:3e:8c:d9:
         21:aa:39:dc:83:08:96:5f:45:6f:d8:89:8b:ba:22:15:fa:72:
         07:dd:be:40:30:d6:15:91:50:32:a7:83:68:6d:d8:bd:80:fd:
         e6:20:69:4f:30:56:cd:ec:f6:cb:56:48:32:b0:31:ca:83:57:
         fa:08:c3:7f:aa:ca:bd:c2:ea:fe:3e:62:7f:64:32:e1:30:f8:
         e4:14:ce:73:66:81:12:93:46:c7:34:3e:24:98:ea:40:c1:3a:
         09:e9:f2:78:7d:64:0e:ef:ef:56:3d:10:3f:d0:38:78:98:9b:
         b3:02:db:69:57:f2:c5:dd:5f:ef:62:b6:7b:fc:af:fd:b6:a8:
         14:b6:35:51:9e:1b:d4:f8:01:2a:01:92:49:77:f1:a5:56:87:
         51:6d:e3:7a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE93gvQdjdKdzKvT0uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk
OTllZjAzODEtYTAxYS00OGVmLTgwZDUtZWZjNTYxNGZiODNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qAE2p9mAT1OMC9EaPRofoYxSW/PK8J48DCn
+hqSBWCKkthLl6QqNbgU/Ty9KJjWzpM98c6dIVbpX6gw6VdopMUMs2LJvTv3pL7t
gwSjVWD3LpMp5Lnbx9i5/SFJsxCS51cpADoZiYz0v86ZYyUR8PRtvboi474GU3YF
CKyRqnV5wmwOxnKuAQ/HgvwXtB9H/dCF+3I+1SvojJHQiHmfmGrAWxpKarPwR4FS
+p0lO/6/xCtmOu5/dOEgoCaWB+P0/pDPG1ge28Rr9Ujv3pJM7J1fcE1dgJZZTuhC
cu/GTRR2Ht7dpGpcCjHXD5CpHWgMEi7i9MbqM73tzQdcXkQd6QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJQwGlWx7QFCZDX5WaOviWGy+WTFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZDNjZWVkYjctOWFmZi0z
NDNmLTliODQtY2ZiMTQxZjI2NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWkDDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBeMyGSnefBPiXwe+2ipxGj6STwJogfilH90D3fLu5mrCSaZ2U2Rcaj
WkS2eH6W+MYvlDOc0xH3dY7BaAkNd9HG33tZcuUcQE1ZxxZ4KjhRULqBHJxDixaI
SbT/kb7ddDTeiVZce0mfiSU+jNkhqjncgwiWX0Vv2ImLuiIV+nIH3b5AMNYVkVAy
p4Nobdi9gP3mIGlPMFbN7PbLVkgysDHKg1f6CMN/qsq9wur+PmJ/ZDLhMPjkFM5z
ZoESk0bHND4kmOpAwToJ6fJ4fWQO7+9WPRA/0Dh4mJuzAttpV/LF3V/vYrZ7/K/9
tqgUtjVRnhvU+AEqAZJJd/GlVodRbeN6
-----END CERTIFICATE-----
Generated at Wed Oct 21 17:08:29 2026 by rpki-client