Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/351812e7-f09f-3ebc-a853-c4c487d4b593.roa
File:                     351812e7-f09f-3ebc-a853-c4c487d4b593.roa (raw, json)
Hash identifier:          K3OSyLw4Vv7hVQ6bOsxSzHWcGCdAYSQ2rySfXPXgulo=
Subject key identifier:   32:95:39:79:14:83:65:05:94:BC:20:1C:F3:07:A0:E4:AC:8C:F3:B2
Certificate issuer:       /CN=d1d97ce9-5a4c-441e-992e-39480606bb0f
Certificate serial:       010D0C9F4328584D25412D9AF57DA914D67C1E80
Authority key identifier: ED:AF:56:74:C3:55:48:03:79:4E:A3:FA:02:76:02:B5:FE:37:19:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/351812e7-f09f-3ebc-a853-c4c487d4b593.roa
Signing time:             Thu 12 Mar 2026 16:15:38 +0000
ROA not before:           Thu 12 Mar 2026 16:15:38 +0000
ROA not after:            Wed 10 Jun 2026 16:15:38 +0000
asID:                     13804
IP address blocks:        2600:d801::/44 maxlen: 44
                          2600:d801:30::/44 maxlen: 44
                          2600:d801:50::/44 maxlen: 44
                          2600:d801:60::/44 maxlen: 44
                          2600:d801:70::/44 maxlen: 44
                          2600:d801:80::/44 maxlen: 44
                          2600:d801:90::/44 maxlen: 44
                          2600:d801:b0::/44 maxlen: 44
                          2600:d801:c0::/44 maxlen: 44
                          2600:d801:d0::/44 maxlen: 44
                          2600:d801:e0::/44 maxlen: 44
                          2600:d801:f0::/44 maxlen: 44
                          2600:d801:100::/44 maxlen: 44
                          2600:d801:130::/44 maxlen: 44
                          2600:d801:170::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/d1d97ce9-5a4c-441e-992e-39480606bb0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/d1d97ce9-5a4c-441e-992e-39480606bb0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:41:2d:9a:f5:7d:a9:14:d6:7c:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1d97ce9-5a4c-441e-992e-39480606bb0f
        Validity
            Not Before: Mar 12 16:15:38 2026 GMT
            Not After : Jun 10 16:15:38 2026 GMT
        Subject: CN=9b763866-a690-48e7-9fe9-b7807afaacdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:50:ed:1c:c8:4a:2f:69:93:fc:ac:72:8f:66:
                    ee:63:9e:1a:48:e4:5e:47:ee:8a:b6:ba:1e:f3:9b:
                    55:3b:23:a1:68:04:4b:43:86:50:53:71:cc:51:9f:
                    16:d3:c4:70:a2:37:73:2d:02:07:18:55:bc:44:cb:
                    76:aa:3f:52:b2:65:6d:04:13:e0:a8:8d:3a:91:4b:
                    ff:a9:49:3d:53:e3:59:c0:33:83:91:31:58:01:d7:
                    24:6d:8a:0b:a5:51:cd:1a:e1:98:76:90:69:15:15:
                    d7:02:f8:a0:68:00:c3:fe:6c:ec:79:35:af:c5:0f:
                    05:03:ca:dc:45:9d:f2:ef:9e:27:9b:a2:98:9d:c9:
                    60:e9:1d:3a:65:38:17:a2:d8:48:04:7e:a7:e3:f8:
                    b4:b4:d6:f1:7d:b1:1e:51:fc:4f:7e:d4:84:7f:21:
                    78:5b:ea:f0:d8:df:d9:9c:21:d8:33:60:28:9c:f1:
                    42:d7:e9:dd:67:51:d9:3d:84:a1:50:6d:e4:94:f3:
                    da:e4:40:a1:df:74:b1:b5:c1:34:dc:20:c2:be:a7:
                    8d:bc:08:6c:cc:0b:4a:2a:9a:b9:94:cd:6d:0b:bf:
                    15:73:a6:1f:ff:b3:44:79:25:85:3d:08:1f:c7:f2:
                    10:dd:1e:7e:b3:af:e8:a1:34:77:e7:27:66:8b:e5:
                    d2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:95:39:79:14:83:65:05:94:BC:20:1C:F3:07:A0:E4:AC:8C:F3:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/351812e7-f09f-3ebc-a853-c4c487d4b593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/d1d97ce9-5a4c-441e-992e-39480606bb0f.crl

            X509v3 Authority Key Identifier:
                keyid:ED:AF:56:74:C3:55:48:03:79:4E:A3:FA:02:76:02:B5:FE:37:19:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:d801::/44
                  2600:d801:30::/44
                  2600:d801:50::-2600:d801:9f:ffff:ffff:ffff:ffff:ffff
                  2600:d801:b0::-2600:d801:10f:ffff:ffff:ffff:ffff:ffff
                  2600:d801:130::/44
                  2600:d801:170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:4a:3a:5d:4d:46:0e:24:d5:c4:6f:db:89:e6:24:6d:5a:e8:
         f6:92:a0:0c:bb:99:80:35:8b:f4:0f:91:f5:6f:f7:e6:7a:0b:
         24:f7:ad:31:7e:1f:ac:89:99:d0:f4:ad:af:0c:25:11:a4:a1:
         ca:0f:14:17:64:02:f1:b4:4c:01:e8:9b:6b:2c:c0:09:a0:23:
         07:10:0f:42:3a:e5:72:9b:74:d0:40:1d:da:61:d9:c4:59:c9:
         cb:60:6a:bf:cd:00:26:5e:83:df:ab:50:8a:d4:64:13:c1:7d:
         43:a6:1f:21:a6:85:27:e0:07:3a:3c:f4:14:ae:0e:65:c6:b9:
         bb:c3:51:69:55:5b:5a:0b:06:33:2a:f6:cf:89:91:d1:a1:dd:
         54:06:31:4e:2c:24:1a:d8:12:da:f7:e5:01:e6:27:8f:ce:45:
         62:b2:a8:c5:0f:7f:c1:b6:af:ad:47:3b:a3:f2:4f:1f:02:d1:
         4a:21:32:44:91:25:55:3e:5d:cc:fd:a5:1a:56:b4:e3:22:a9:
         3d:79:fd:9a:f3:da:5a:85:42:58:46:3a:7c:5b:8e:68:96:8f:
         c3:68:48:db:a7:a5:db:bb:56:cf:68:32:4b:e1:0e:5e:6e:9f:
         e1:3a:28:ea:43:27:ca:af:bd:f4:d9:a1:90:cb:e2:1c:f5:9b:
         b3:42:f3:c9
-----BEGIN CERTIFICATE-----
MIIGiTCCBXGgAwIBAgIUAQ0Mn0MoWE0lQS2a9X2pFNZ8HoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFkOTdjZTktNWE0Yy00NDFlLTk5MmUtMzk0ODA2MDZi
YjBmMB4XDTI2MDMxMjE2MTUzOFoXDTI2MDYxMDE2MTUzOFowLzEtMCsGA1UEAxMk
OWI3NjM4NjYtYTY5MC00OGU3LTlmZTktYjc4MDdhZmFhY2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVDtHMhKL2mT/Kxyj2buY54aSOReR+6Ktroe
85tVOyOhaARLQ4ZQU3HMUZ8W08RwojdzLQIHGFW8RMt2qj9SsmVtBBPgqI06kUv/
qUk9U+NZwDODkTFYAdckbYoLpVHNGuGYdpBpFRXXAvigaADD/mzseTWvxQ8FA8rc
RZ3y754nm6KYnclg6R06ZTgXothIBH6n4/i0tNbxfbEeUfxPftSEfyF4W+rw2N/Z
nCHYM2AonPFC1+ndZ1HZPYShUG3klPPa5ECh33SxtcE03CDCvqeNvAhszAtKKpq5
lM1tC78Vc6Yf/7NEeSWFPQgfx/IQ3R5+s6/ooTR35ydmi+XSKQIDAQABo4IDmzCC
A5cwHQYDVR0OBBYEFDKVOXkUg2UFlLwgHPMHoOSsjPOyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMWQ5
N2NlOS01YTRjLTQ0MWUtOTkyZS0zOTQ4MDYwNmJiMGYvMzUxODEyZTctZjA5Zi0z
ZWJjLWE4NTMtYzRjNDg3ZDRiNTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDFkOTdjZTktNWE0Yy00NDFlLTk5
MmUtMzk0ODA2MDZiYjBmL2QxZDk3Y2U5LTVhNGMtNDQxZS05OTJlLTM5NDgwNjA2
YmIwZi5jcmwwHwYDVR0jBBgwFoAU7a9WdMNVSAN5TqP6AnYCtf43GRcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMWQ5N2NlOS01YTRjLTQ0MWUtOTkyZS0zOTQ4
MDYwNmJiMGYuY2VyMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAwcEJgDYAQAA
AwcEJgDYAQAwMBIDBwQmANgBAFADBwUmANgBAIAwEgMHBCYA2AEAsAMHBCYA2AEB
AAMHBCYA2AEBMAMHBCYA2AEBcDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjSjpdTUYOJNXEb9uJ5iRtWuj2
kqAMu5mANYv0D5H1b/fmegsk960xfh+siZnQ9K2vDCURpKHKDxQXZALxtEwB6Jtr
LMAJoCMHEA9COuVym3TQQB3aYdnEWcnLYGq/zQAmXoPfq1CK1GQTwX1Dph8hpoUn
4Ac6PPQUrg5lxrm7w1FpVVtaCwYzKvbPiZHRod1UBjFOLCQa2BLa9+UB5iePzkVi
sqjFD3/Btq+tRzuj8k8fAtFKITJEkSVVPl3M/aUaVrTjIqk9ef2a89pahUJYRjp8
W45olo/DaEjbp6Xbu1bPaDJL4Q5ebp/hOijqQyfKr7302aGQy+Ic9ZuzQvPJ
-----END CERTIFICATE-----
Generated at Mon Mar 16 08:06:57 2026 by rpki-client