Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da6ea97d-77d2-343a-b71e-6bcb14b808dd.roa
File:                     da6ea97d-77d2-343a-b71e-6bcb14b808dd.roa (raw, json)
Hash identifier:          nXHUrsM90/uxrGbuwK2vgUnMl4fix+iTdJaJMM4jlBM=
Subject key identifier:   56:CD:37:26:51:54:CA:7E:0B:35:95:E4:F2:A3:9D:33:E8:35:0B:E8
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F0D6CEB2052633C50E0D08F80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da6ea97d-77d2-343a-b71e-6bcb14b808dd.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     33363
IP address blocks:        2603:900c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:eb:20:52:63:3c:50:e0:d0:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=b781328e-5140-4af8-bfda-ae4fdda4c266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:8d:77:ef:82:e5:e7:4e:1e:c5:b5:78:07:
                    29:df:fc:49:f3:e2:01:4f:4d:e8:cb:fd:81:bb:d9:
                    ea:68:f4:cf:39:d6:bc:66:8d:50:37:20:d6:c2:e4:
                    1f:26:46:e5:8a:d3:28:1d:e6:dd:9a:38:48:3f:a0:
                    57:c4:16:0f:5c:3f:6f:cb:07:ac:e8:e8:88:42:87:
                    cc:40:2b:42:cc:8b:fa:28:ea:51:59:63:bd:a1:0e:
                    17:a7:75:d9:a4:bc:ad:32:12:da:ed:cc:c6:96:a2:
                    f9:87:8d:d1:44:3e:45:d6:10:47:b1:a3:1b:f9:6d:
                    a9:f0:11:0a:81:e5:c3:ef:e8:6e:bb:c3:07:d7:12:
                    69:f2:d6:47:cd:52:85:48:2a:37:ea:2d:61:02:99:
                    9a:02:59:45:4c:f7:2c:cb:cd:8e:7e:7e:66:27:6f:
                    ba:6f:43:3f:76:40:24:df:70:f1:09:eb:f0:d9:6c:
                    33:b1:2c:67:70:2b:5c:82:a9:45:57:a7:0f:9e:d5:
                    77:17:6a:ea:52:7f:af:a6:ca:7e:ea:d0:db:57:2a:
                    5b:3e:eb:42:94:35:ca:43:cb:0a:26:cf:89:fc:e1:
                    ac:34:5b:07:c4:4d:1c:c7:f6:4d:e3:17:45:96:ea:
                    e0:5f:41:ed:10:b3:da:53:54:0a:43:4b:8a:7f:f3:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CD:37:26:51:54:CA:7E:0B:35:95:E4:F2:A3:9D:33:E8:35:0B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/da6ea97d-77d2-343a-b71e-6bcb14b808dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:900c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b7:3f:51:82:d5:bc:f4:3f:38:20:d0:90:46:97:82:f5:c2:
         1c:1e:59:a5:2b:61:36:f5:da:85:ea:49:ef:21:c1:dc:54:70:
         b1:24:eb:b6:f9:dc:f3:bd:04:21:bf:0f:2f:b1:5b:9c:47:e4:
         75:fe:0f:cb:89:13:0f:6f:27:0d:41:d6:db:28:34:6d:f3:03:
         d5:a5:fc:4b:7f:e7:84:08:73:3d:a5:f0:1b:2d:4a:2e:43:b3:
         fd:80:75:8e:ae:41:1f:cd:c9:51:05:a1:a2:5c:df:89:fe:3e:
         cb:b4:c2:80:a5:87:3a:9c:ca:9d:d3:91:67:fc:27:cf:fd:0d:
         51:65:26:1e:99:c8:48:58:a1:53:63:30:18:3f:39:04:01:7e:
         26:af:ea:ef:cb:a2:66:1e:c0:d6:4f:7a:f7:e2:52:c5:63:c7:
         ef:25:4f:61:0f:fa:f6:81:f6:61:9c:c3:4e:64:a2:05:9d:67:
         34:28:58:2d:d9:90:6c:08:a7:2e:cc:5a:30:56:86:94:d2:d6:
         5d:0a:1a:6e:42:92:67:0a:09:d4:21:cd:39:a1:af:8e:87:c3:
         be:5f:2e:a7:1c:5d:e1:b5:e1:ef:1b:b0:56:bf:cd:7e:71:86:
         32:61:97:7e:0b:20:05:cf:df:b0:32:9c:f0:27:34:f2:27:bd:
         78:5a:97:bc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8NbOsgUmM8UODQj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
Yjc4MTMyOGUtNTE0MC00YWY4LWJmZGEtYWU0ZmRkYTRjMjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxONd++C5edOHsW1eAcp3/xJ8+IBT03oy/2B
u9nqaPTPOda8Zo1QNyDWwuQfJkblitMoHebdmjhIP6BXxBYPXD9vywes6OiIQofM
QCtCzIv6KOpRWWO9oQ4Xp3XZpLytMhLa7czGlqL5h43RRD5F1hBHsaMb+W2p8BEK
geXD7+huu8MH1xJp8tZHzVKFSCo36i1hApmaAllFTPcsy82Ofn5mJ2+6b0M/dkAk
33DxCevw2WwzsSxncCtcgqlFV6cPntV3F2rqUn+vpsp+6tDbVypbPutClDXKQ8sK
Js+J/OGsNFsHxE0cx/ZN4xdFlurgX0HtELPaU1QKQ0uKf/ND4QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFbNNyZRVMp+CzWV5PKjnTPoNQvoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZGE2ZWE5N2QtNzdkMi0z
NDNhLWI3MWUtNmJjYjE0YjgwOGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgOQDDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB2tz9RgtW89D84INCQRpeC9cIcHlmlK2E29dqF6knvIcHcVHCxJOu2
+dzzvQQhvw8vsVucR+R1/g/LiRMPbycNQdbbKDRt8wPVpfxLf+eECHM9pfAbLUou
Q7P9gHWOrkEfzclRBaGiXN+J/j7LtMKApYc6nMqd05Fn/CfP/Q1RZSYemchIWKFT
YzAYPzkEAX4mr+rvy6JmHsDWT3r34lLFY8fvJU9hD/r2gfZhnMNOZKIFnWc0KFgt
2ZBsCKcuzFowVoaU0tZdChpuQpJnCgnUIc05oa+Oh8O+Xy6nHF3hteHvG7BWv81+
cYYyYZd+CyAFz9+wMpzwJzTyJ714Wpe8
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:11:45 2026 by rpki-client