Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/1df1c32d-3d78-3f3a-8911-3c0ae30de6c5.roa
File:                     1df1c32d-3d78-3f3a-8911-3c0ae30de6c5.roa (raw, json)
Hash identifier:          Cx7QvgZGdEYnrGvw68VaaQ+Ceicf6GVi0nApmqy81PQ=
Subject key identifier:   14:3F:2A:29:52:EF:78:10:EA:4C:5C:C6:E6:62:50:A9:D9:32:EB:98
Certificate issuer:       /CN=94cfb244-34f1-4c74-919b-4784f0348dd1
Certificate serial:       010D0C9F4328584DF90B274B0E0C60D5CF61FEB0
Authority key identifier: BA:81:2A:A8:CA:E1:A0:4F:3D:80:1A:27:F3:CB:05:6A:4F:23:4A:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/1df1c32d-3d78-3f3a-8911-3c0ae30de6c5.roa
Signing time:             Wed 27 May 2026 13:00:16 +0000
ROA not before:           Wed 27 May 2026 13:00:16 +0000
ROA not after:            Tue 25 Aug 2026 13:00:16 +0000
asID:                     401908
IP address blocks:        2620:da:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/94cfb244-34f1-4c74-919b-4784f0348dd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/94cfb244-34f1-4c74-919b-4784f0348dd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f9:0b:27:4b:0e:0c:60:d5:cf:61:fe:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94cfb244-34f1-4c74-919b-4784f0348dd1
        Validity
            Not Before: May 27 13:00:16 2026 GMT
            Not After : Aug 25 13:00:16 2026 GMT
        Subject: CN=e0eb38bf-7e2a-4934-9792-a9481f70209f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:ae:5c:82:b5:e3:de:18:91:99:99:12:ab:
                    ef:f7:aa:ad:e1:2b:4e:c9:5d:43:f2:83:75:f5:7a:
                    31:fd:17:4a:9c:b6:a1:27:eb:e5:5b:b8:f9:47:69:
                    72:b1:47:26:22:da:44:78:2a:c3:08:40:91:0f:bd:
                    b6:63:53:1c:85:79:79:0d:16:20:e6:9e:9c:88:24:
                    8e:2c:74:6a:86:4d:00:02:05:39:f4:73:b7:87:49:
                    1c:17:df:83:04:90:9d:a4:2c:e2:59:6b:3b:a9:ea:
                    73:69:26:83:46:e5:53:e2:79:5c:5f:ef:7a:45:44:
                    74:d1:d7:04:4f:9c:7b:7f:a9:f2:f4:0b:73:09:09:
                    cd:45:28:09:c9:c4:a3:a7:10:63:bc:2a:c0:68:83:
                    1a:55:a2:8d:84:ba:99:75:fc:65:7a:07:67:0a:5a:
                    be:0d:2f:92:a3:8a:97:95:ac:13:c6:e3:d4:af:4f:
                    55:5c:8d:96:26:2e:81:b0:ca:6d:ae:ef:8b:97:44:
                    16:c2:d5:e7:57:df:49:0a:6d:94:33:7f:19:3f:b7:
                    ba:1a:4f:95:80:0b:60:ed:c6:ca:86:5f:d2:39:79:
                    32:bb:3e:22:7f:10:74:b5:9c:cd:de:26:30:ff:2c:
                    51:38:7b:36:ea:ec:9e:98:2b:93:92:a2:2a:20:7c:
                    2c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3F:2A:29:52:EF:78:10:EA:4C:5C:C6:E6:62:50:A9:D9:32:EB:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/1df1c32d-3d78-3f3a-8911-3c0ae30de6c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/94cfb244-34f1-4c74-919b-4784f0348dd1.crl

            X509v3 Authority Key Identifier:
                keyid:BA:81:2A:A8:CA:E1:A0:4F:3D:80:1A:27:F3:CB:05:6A:4F:23:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:da:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:c4:36:9e:f5:d1:0f:7f:ef:13:29:6c:76:cd:e9:c0:fa:71:
         30:ad:1d:99:e0:0b:57:5d:d1:8c:cd:1e:ca:50:ca:a2:a4:5a:
         72:d4:7f:2a:9c:72:3a:3c:d0:76:9c:38:d2:4e:4e:4f:87:00:
         0a:ad:68:5b:58:7f:1b:ba:bf:52:08:dd:90:d2:7e:3c:db:37:
         63:ba:57:ab:4d:ca:37:d6:ba:16:84:97:d4:98:6a:1c:15:0f:
         14:6d:80:2a:da:fd:1f:08:b7:70:6c:cd:66:de:d0:97:cd:85:
         9d:64:b0:a0:5f:f1:aa:cf:24:ef:19:14:17:2e:71:cd:0d:de:
         1b:5e:87:4b:e3:d7:fa:9b:72:e5:67:ce:54:74:2b:16:0b:3b:
         30:63:6d:87:5d:1b:d1:e6:e7:f5:c2:35:5f:a2:67:07:4a:c3:
         c6:a5:1c:7e:4d:00:67:65:9e:86:dc:64:2d:ab:18:b5:ac:b9:
         8c:a8:97:b8:11:26:64:b4:b5:8d:94:2e:58:29:e0:72:d9:51:
         63:bc:fe:42:8a:4d:43:dd:cc:ef:72:3f:f4:fd:a5:0c:db:59:
         61:51:bc:28:b5:8d:c8:fb:32:47:43:ee:50:f1:fa:f1:f3:c4:
         15:e8:46:07:a8:1f:a8:90:9f:6f:4d:d1:34:da:1a:5c:bb:55:
         a3:91:2e:53
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE35CydLDgxg1c9h/rAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTRjZmIyNDQtMzRmMS00Yzc0LTkxOWItNDc4NGYwMzQ4
ZGQxMB4XDTI2MDUyNzEzMDAxNloXDTI2MDgyNTEzMDAxNlowLzEtMCsGA1UEAxMk
ZTBlYjM4YmYtN2UyYS00OTM0LTk3OTItYTk0ODFmNzAyMDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGOuXIK1494YkZmZEqvv96qt4StOyV1D8oN1
9Xox/RdKnLahJ+vlW7j5R2lysUcmItpEeCrDCECRD722Y1MchXl5DRYg5p6ciCSO
LHRqhk0AAgU59HO3h0kcF9+DBJCdpCziWWs7qepzaSaDRuVT4nlcX+96RUR00dcE
T5x7f6ny9AtzCQnNRSgJycSjpxBjvCrAaIMaVaKNhLqZdfxlegdnClq+DS+So4qX
lawTxuPUr09VXI2WJi6BsMptru+Ll0QWwtXnV99JCm2UM38ZP7e6Gk+VgAtg7cbK
hl/SOXkyuz4ifxB0tZzN3iYw/yxROHs26uyemCuTkqIqIHwsDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBQ/KilS73gQ6kxcxuZiUKnZMuuYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NGNm
YjI0NC0zNGYxLTRjNzQtOTE5Yi00Nzg0ZjAzNDhkZDEvMWRmMWMzMmQtM2Q3OC0z
ZjNhLTg5MTEtM2MwYWUzMGRlNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTRjZmIyNDQtMzRmMS00Yzc0LTkx
OWItNDc4NGYwMzQ4ZGQxLzk0Y2ZiMjQ0LTM0ZjEtNGM3NC05MTliLTQ3ODRmMDM0
OGRkMS5jcmwwHwYDVR0jBBgwFoAUuoEqqMrhoE89gBon88sFak8jStAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi85NGNmYjI0NC0zNGYxLTRjNzQtOTE5Yi00Nzg0
ZjAzNDhkZDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA2qAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMTENp710Q9/7xMpbHbN6cD6cTCtHZngC1dd0YzNHspQyqKkWnLU
fyqccjo80HacONJOTk+HAAqtaFtYfxu6v1II3ZDSfjzbN2O6V6tNyjfWuhaEl9SY
ahwVDxRtgCra/R8It3BszWbe0JfNhZ1ksKBf8arPJO8ZFBcucc0N3hteh0vj1/qb
cuVnzlR0KxYLOzBjbYddG9Hm5/XCNV+iZwdKw8alHH5NAGdlnobcZC2rGLWsuYyo
l7gRJmS0tY2ULlgp4HLZUWO8/kKKTUPdzO9yP/T9pQzbWWFRvCi1jcj7MkdD7lDx
+vHzxBXoRgeoH6iQn29N0TTaGly7VaORLlM=
-----END CERTIFICATE-----
Generated at Thu May 28 13:41:32 2026 by rpki-client