Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d1ccf14a-810f-3d2e-9a73-987ed6b3ee71.roa
File:                     d1ccf14a-810f-3d2e-9a73-987ed6b3ee71.roa (raw, json)
Hash identifier:          k7AUo81mFwRZOq2DB+FsaPN4SFQ6BtnGSU6/xnJ6xUM=
Subject key identifier:   32:5D:30:B7:8B:16:F1:7E:FC:82:7F:5F:57:34:75:0B:A6:48:02:8C
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584DE2B5E752CB3A1BC710B72900
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d1ccf14a-810f-3d2e-9a73-987ed6b3ee71.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     396982
IP address blocks:        2620:1b2:1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:e7:52:cb:3a:1b:c7:10:b7:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=c3feafba-2186-4b77-81a3-4d6cde511d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:92:2c:cc:b5:e8:38:d2:9d:34:3d:b2:fe:ee:
                    32:0d:39:b3:e2:29:95:f0:e7:7a:4d:e3:16:13:b5:
                    2f:24:a8:34:b0:4b:f8:d8:19:3e:19:78:99:4c:56:
                    58:c3:cd:92:ef:ab:8a:ba:d3:f1:a0:fb:38:b5:18:
                    b3:fe:d0:a4:c4:6a:44:08:a7:4e:f7:62:41:33:cc:
                    92:32:5b:e8:29:d2:6c:be:c0:40:27:ab:ca:4a:c0:
                    c8:1e:5f:3c:6a:0d:1e:63:09:4b:bf:c3:46:58:5a:
                    20:e5:e4:ef:29:44:c4:91:c8:0a:db:0c:f6:17:d9:
                    d2:35:ae:94:31:84:0d:a1:1f:bc:fc:ab:cc:7d:17:
                    d7:66:b7:c9:e9:d8:fb:a2:65:be:88:16:36:db:7a:
                    38:b5:a4:47:37:6f:a7:0f:8b:f1:57:4b:0d:41:07:
                    72:85:3c:97:5f:0d:93:06:8d:57:8e:6c:41:88:28:
                    c7:05:78:82:dd:f2:7f:36:5e:86:8d:b8:ff:da:79:
                    3e:c0:49:9c:e6:cd:4d:75:62:56:dd:d8:69:bb:bf:
                    4e:02:ea:a2:de:32:78:00:50:ee:f1:5d:82:f0:a9:
                    ac:0a:81:cb:37:62:c5:85:3e:5f:11:ef:c0:c9:44:
                    ed:13:78:43:85:cd:42:c8:12:0f:14:e2:7a:3e:06:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5D:30:B7:8B:16:F1:7E:FC:82:7F:5F:57:34:75:0B:A6:48:02:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d1ccf14a-810f-3d2e-9a73-987ed6b3ee71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b2:1d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:86:61:79:8c:a5:e9:ae:6e:52:c6:1c:9a:2c:24:5e:91:3b:
         60:07:0b:a2:83:c7:97:0b:a7:43:46:f2:4e:4f:e3:25:c5:22:
         61:ba:10:08:8a:f4:c9:de:64:47:0a:ad:0b:25:a5:fb:d1:3d:
         d9:5b:ef:37:db:38:86:00:f2:92:82:16:73:8e:1d:9a:5b:e3:
         2f:74:b8:d0:d3:8f:11:cc:14:81:91:74:1a:a2:c1:db:d2:3d:
         04:96:a4:e6:26:f1:4c:9d:35:dd:79:96:2c:81:64:52:1a:6e:
         a0:78:b3:cd:0e:e7:5a:76:59:f1:c7:5f:a5:3c:4a:3e:bb:94:
         0c:28:c9:03:fb:79:4f:74:c9:22:06:04:26:c4:d4:57:11:73:
         d8:12:41:48:45:9e:68:08:2a:f7:03:96:f2:1b:9c:c4:ab:3c:
         53:29:e1:90:ed:07:62:2f:9f:9e:72:32:26:33:1e:8d:f1:ae:
         75:ee:78:60:f3:9e:ac:ca:0e:4e:b1:9c:d4:3d:35:43:33:35:
         b9:d4:22:6a:17:d4:c7:b1:c4:e9:66:bf:d2:55:5f:e2:18:da:
         2c:86:70:f1:99:eb:63:12:b9:82:d6:f5:21:35:fa:f1:4c:e8:
         61:18:ac:b3:51:35:ee:a7:47:9f:f4:14:37:ee:71:60:fe:76:
         f2:35:da:5f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3itedSyzobxxC3KQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmRkMDgyOTItOGRmZC00M2I4LWEwOGMtMjJjYjMxZWQy
MDBmMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk
YzNmZWFmYmEtMjE4Ni00Yjc3LTgxYTMtNGQ2Y2RlNTExZDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5IszLXoONKdND2y/u4yDTmz4imV8Od6TeMW
E7UvJKg0sEv42Bk+GXiZTFZYw82S76uKutPxoPs4tRiz/tCkxGpECKdO92JBM8yS
MlvoKdJsvsBAJ6vKSsDIHl88ag0eYwlLv8NGWFog5eTvKUTEkcgK2wz2F9nSNa6U
MYQNoR+8/KvMfRfXZrfJ6dj7omW+iBY223o4taRHN2+nD4vxV0sNQQdyhTyXXw2T
Bo1XjmxBiCjHBXiC3fJ/Nl6Gjbj/2nk+wEmc5s1NdWJW3dhpu79OAuqi3jJ4AFDu
8V2C8KmsCoHLN2LFhT5fEe/AyUTtE3hDhc1CyBIPFOJ6PgahcQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDJdMLeLFvF+/IJ/X1c0dQumSAKMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZGQw
ODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNiMzFlZDIwMGYvZDFjY2YxNGEtODEwZi0z
ZDJlLTlhNzMtOTg3ZWQ2YjNlZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmRkMDgyOTItOGRmZC00M2I4LWEw
OGMtMjJjYjMxZWQyMDBmLzZkZDA4MjkyLThkZmQtNDNiOC1hMDhjLTIyY2IzMWVk
MjAwZi5jcmwwHwYDVR0jBBgwFoAUsDu+INGuzPtX0T1i6kyZ2kHR6zwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZGQwODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNi
MzFlZDIwMGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABsgAd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALiGYXmMpemublLGHJosJF6RO2AHC6KDx5cLp0NG8k5P4yXFImG6
EAiK9MneZEcKrQslpfvRPdlb7zfbOIYA8pKCFnOOHZpb4y90uNDTjxHMFIGRdBqi
wdvSPQSWpOYm8UydNd15liyBZFIabqB4s80O51p2WfHHX6U8Sj67lAwoyQP7eU90
ySIGBCbE1FcRc9gSQUhFnmgIKvcDlvIbnMSrPFMp4ZDtB2Ivn55yMiYzHo3xrnXu
eGDznqzKDk6xnNQ9NUMzNbnUImoX1MexxOlmv9JVX+IY2iyGcPGZ62MSuYLW9SE1
+vFM6GEYrLNRNe6nR5/0FDfucWD+dvI12l8=
-----END CERTIFICATE-----
Generated at Fri May 22 16:53:56 2026 by rpki-client