Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/308356cd-b273-3d75-8f50-3ab39d90ff7e.roa
File:                     308356cd-b273-3d75-8f50-3ab39d90ff7e.roa (raw, json)
Hash identifier:          9CHD7S31i+4B36DfEoxGY04fqOdKOxKE+3pkS1JtJJM=
Subject key identifier:   43:80:3D:17:91:5F:76:AF:68:BD:34:23:1A:3C:69:23:FD:E0:6A:3A
Certificate issuer:       /CN=dda1859b-9b6c-47e8-8de0-488bb1a65637
Certificate serial:       010D0C9F4328584E2AD44CC26AD603C87FDC5AC0
Authority key identifier: D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/308356cd-b273-3d75-8f50-3ab39d90ff7e.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     214848
IP address blocks:        2602:f486:fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:4c:c2:6a:d6:03:c8:7f:dc:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dda1859b-9b6c-47e8-8de0-488bb1a65637
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=e2a22e5e-8955-436d-8907-d5b77ed50b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:b9:0a:4b:db:b7:76:34:6a:33:ec:90:61:
                    be:b8:60:a5:25:48:c4:2e:14:ac:39:79:52:53:9a:
                    6c:3f:68:dd:72:23:94:0f:75:4d:46:eb:83:98:f5:
                    39:33:6f:db:50:01:d7:89:d5:34:43:f1:a9:e8:f0:
                    d8:d7:2a:78:98:0d:45:df:25:9c:36:36:f3:f3:0f:
                    5b:41:85:51:d3:1c:86:4f:b3:86:7b:f9:18:63:0f:
                    f7:42:a4:0f:ac:82:d9:35:1a:ad:dd:57:ef:cf:b0:
                    63:d7:f6:3c:c0:46:ad:97:c6:77:f3:b7:03:25:73:
                    c0:cf:3e:ba:2d:c2:e9:34:2a:78:e8:b2:ca:80:67:
                    fa:25:69:37:4d:a2:32:cc:58:61:e2:9d:1c:5f:de:
                    a6:83:78:5b:8c:fd:86:c4:a3:a3:01:94:89:56:f4:
                    d1:e6:ed:78:5c:ba:a9:b4:03:04:a2:78:f9:68:b5:
                    0f:89:7f:95:68:e9:8f:10:da:4e:16:52:28:16:b6:
                    99:cd:7f:bb:bc:88:43:2a:20:26:5f:2b:7b:cd:68:
                    ef:11:1d:9b:29:ec:95:80:b6:42:2e:e2:59:85:ee:
                    e8:3f:50:ed:61:29:a1:58:d6:12:71:1f:0c:48:03:
                    66:5f:bb:f3:79:71:2e:f6:82:fb:da:ed:3f:64:98:
                    67:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:80:3D:17:91:5F:76:AF:68:BD:34:23:1A:3C:69:23:FD:E0:6A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/308356cd-b273-3d75-8f50-3ab39d90ff7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl

            X509v3 Authority Key Identifier:
                keyid:D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f486:fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:6c:1b:a9:1b:14:46:45:d1:85:34:f4:12:bc:f3:c1:23:73:
         f2:f2:ce:2e:b9:1d:25:c9:fe:9c:8d:ed:10:d3:8e:7b:dc:68:
         db:71:e5:3d:89:83:4c:6b:f5:e7:13:f9:f9:e0:36:90:4c:f4:
         44:54:88:9a:9e:5c:68:b1:c6:37:48:33:69:06:0c:74:d8:9b:
         29:7d:11:72:7e:6a:71:89:74:bb:15:b6:4d:3d:1e:0b:18:11:
         2f:c6:92:37:a6:90:ba:c9:f4:5c:65:28:ef:0f:d1:13:1c:c3:
         63:ed:e4:f6:a2:c7:eb:96:ba:1f:a4:0a:0e:33:b1:e3:cb:2a:
         75:68:5b:0b:f0:2a:7d:86:57:c9:9d:e2:41:8a:47:2a:6c:0e:
         d1:79:ea:62:d3:3b:76:77:07:c0:59:68:ab:07:52:0c:0b:dc:
         e9:b9:a4:7e:13:23:54:be:67:28:c7:9b:46:23:77:82:8b:17:
         bb:ea:9e:81:6d:f3:bd:5a:47:09:40:15:9c:27:45:60:e7:4d:
         85:2b:6b:82:1e:7d:49:7b:e6:8e:4d:82:d7:87:2d:38:f8:d0:
         6e:31:ad:06:20:6f:66:f0:29:ef:99:ce:40:8e:2a:5a:21:c8:
         3d:40:3c:5a:43:ef:5e:01:cb:5f:75:4e:d1:8f:54:96:31:d3:
         c4:39:d2:81
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4q1EzCatYDyH/cWsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRhMTg1OWItOWI2Yy00N2U4LThkZTAtNDg4YmIxYTY1
NjM3MB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk
ZTJhMjJlNWUtODk1NS00MzZkLTg5MDctZDViNzdlZDUwYjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojG5Ckvbt3Y0ajPskGG+uGClJUjELhSsOXlS
U5psP2jdciOUD3VNRuuDmPU5M2/bUAHXidU0Q/Gp6PDY1yp4mA1F3yWcNjbz8w9b
QYVR0xyGT7OGe/kYYw/3QqQPrILZNRqt3Vfvz7Bj1/Y8wEatl8Z387cDJXPAzz66
LcLpNCp46LLKgGf6JWk3TaIyzFhh4p0cX96mg3hbjP2GxKOjAZSJVvTR5u14XLqp
tAMEonj5aLUPiX+VaOmPENpOFlIoFraZzX+7vIhDKiAmXyt7zWjvER2bKeyVgLZC
LuJZhe7oP1DtYSmhWNYScR8MSANmX7vzeXEu9oL72u0/ZJhnIQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEOAPReRX3avaL00Ixo8aSP94Go6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZGEx
ODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhiYjFhNjU2MzcvMzA4MzU2Y2QtYjI3My0z
ZDc1LThmNTAtM2FiMzlkOTBmZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGRhMTg1OWItOWI2Yy00N2U4LThk
ZTAtNDg4YmIxYTY1NjM3L2RkYTE4NTliLTliNmMtNDdlOC04ZGUwLTQ4OGJiMWE2
NTYzNy5jcmwwHwYDVR0jBBgwFoAU0rRS4atE9KjQ2if6ETpX26OVzHMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZGExODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhi
YjFhNjU2MzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL0hgD+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAABsG6kbFEZF0YU09BK888Ejc/Lyzi65HSXJ/pyN7RDTjnvcaNtx
5T2Jg0xr9ecT+fngNpBM9ERUiJqeXGixxjdIM2kGDHTYmyl9EXJ+anGJdLsVtk09
HgsYES/GkjemkLrJ9FxlKO8P0RMcw2Pt5Paix+uWuh+kCg4zsePLKnVoWwvwKn2G
V8md4kGKRypsDtF56mLTO3Z3B8BZaKsHUgwL3Om5pH4TI1S+ZyjHm0Yjd4KLF7vq
noFt871aRwlAFZwnRWDnTYUra4IefUl75o5NgteHLTj40G4xrQYgb2bwKe+ZzkCO
KlohyD1APFpD714By191TtGPVJYx08Q50oE=
-----END CERTIFICATE-----
Generated at Wed Jul 15 03:01:46 2026 by rpki-client