Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0081699c-3146-380a-bc02-32432876c7c3.roa
File:                     0081699c-3146-380a-bc02-32432876c7c3.roa (raw, json)
Hash identifier:          b/16YLr+hqsj/UXesTxsCL052F7pJyEMJqjriHF6OTQ=
Subject key identifier:   C2:EC:75:46:F1:37:EB:02:96:4D:9E:64:D3:61:D5:DD:6E:69:59:76
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584D8EF555E9F33B26C887378980
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0081699c-3146-380a-bc02-32432876c7c3.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     394354
IP address blocks:        2620:10a:801e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:55:e9:f3:3b:26:c8:87:37:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=37c18861-5c78-4082-b38c-3431d21c657d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ab:77:bc:29:3f:a0:ef:57:07:d2:af:24:cc:
                    c1:aa:67:55:6f:31:d0:4f:7b:49:d6:ba:58:3d:23:
                    ef:12:c1:27:80:30:90:ed:ae:79:de:0b:23:c3:04:
                    1a:f2:ce:6f:78:2f:1a:ef:59:a7:8b:48:14:c3:97:
                    34:34:0d:7b:76:9a:54:7e:08:bb:c0:a0:d4:38:54:
                    f9:f9:0b:1e:14:f7:6d:19:a0:49:65:e2:61:af:50:
                    f4:29:86:10:eb:a8:5b:cb:7d:47:dd:0e:84:36:45:
                    27:97:b9:d0:94:a7:a6:43:f0:58:a5:d4:4c:2e:68:
                    99:b0:48:8f:2a:42:8e:ea:c2:03:1c:2c:5b:10:90:
                    f7:7c:96:77:c7:b8:21:60:a4:3a:03:f0:b3:35:67:
                    81:c5:5f:10:cb:92:93:7c:40:50:45:bd:e9:cd:cc:
                    7e:e7:87:2e:f1:ec:a7:0e:f0:dd:16:4d:03:f4:7b:
                    52:cd:c5:0e:e9:9b:11:47:80:4c:6c:01:30:0f:cf:
                    9d:da:87:1a:7f:86:74:2e:8f:de:34:92:51:24:b7:
                    f5:de:1e:b3:7f:f5:75:5b:62:62:13:4b:f3:b7:31:
                    1a:8e:a9:0b:cc:23:35:bf:0e:12:86:15:1b:57:be:
                    39:fb:14:82:4b:2d:d9:52:a6:97:68:d1:d0:01:bf:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EC:75:46:F1:37:EB:02:96:4D:9E:64:D3:61:D5:DD:6E:69:59:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0081699c-3146-380a-bc02-32432876c7c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:801e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:7e:46:f4:92:2e:4f:ed:da:d0:05:90:64:db:8c:89:67:66:
         0e:e5:53:b9:55:a8:5e:cd:3e:bb:86:d9:77:4c:22:f1:0d:08:
         18:e3:1d:38:90:5b:35:c1:f8:aa:39:22:ec:2f:bb:0f:17:58:
         1d:6d:51:e2:ef:0a:8f:72:3c:81:01:98:3f:a9:e7:3d:01:84:
         b4:f0:7a:25:b4:df:55:48:cd:64:15:68:50:80:f4:5c:fc:88:
         30:af:71:9c:76:1f:31:14:80:23:78:97:2c:43:c2:06:c8:16:
         22:ef:36:24:b9:c9:20:61:19:3d:b7:fc:1b:97:b7:40:05:3d:
         3b:9c:02:f9:e4:32:9c:31:26:bb:59:af:f6:52:78:d4:64:f2:
         56:e0:a1:78:c8:cd:f4:91:0f:bb:d9:18:f3:b2:aa:ea:5c:c9:
         3b:ec:aa:cb:1d:69:8f:aa:dc:df:c3:f2:76:1d:ab:29:92:91:
         58:21:d1:0d:9b:9e:4f:bb:7e:d0:e4:5a:57:ed:6f:dc:94:3f:
         44:99:75:95:d7:a7:8f:84:10:c1:1b:fa:8b:ed:93:f6:15:be:
         21:fb:a5:99:33:e5:54:4e:33:e4:c6:3a:d0:21:63:1d:c0:23:
         3e:71:79:eb:96:3d:4a:0d:7f:a4:e3:de:62:3f:5e:83:6c:21:
         ff:70:22:63
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2O9VXp8zsmyIc3iYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx
OGU4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
MzdjMTg4NjEtNWM3OC00MDgyLWIzOGMtMzQzMWQyMWM2NTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKt3vCk/oO9XB9KvJMzBqmdVbzHQT3tJ1rpY
PSPvEsEngDCQ7a553gsjwwQa8s5veC8a71mni0gUw5c0NA17dppUfgi7wKDUOFT5
+QseFPdtGaBJZeJhr1D0KYYQ66hby31H3Q6ENkUnl7nQlKemQ/BYpdRMLmiZsEiP
KkKO6sIDHCxbEJD3fJZ3x7ghYKQ6A/CzNWeBxV8Qy5KTfEBQRb3pzcx+54cu8eyn
DvDdFk0D9HtSzcUO6ZsRR4BMbAEwD8+d2ocaf4Z0Lo/eNJJRJLf13h6zf/V1W2Ji
E0vztzEajqkLzCM1vw4ShhUbV745+xSCSy3ZUqaXaNHQAb90zQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMLsdUbxN+sClk2eZNNh1d1uaVl2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2
MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvMDA4MTY5OWMtMzE0Ni0z
ODBhLWJjMDItMzI0MzI4NzZjN2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2
MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi
MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5
NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCoAe
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADl+RvSSLk/t2tAFkGTbjIlnZg7lU7lVqF7NPruG2XdMIvENCBjj
HTiQWzXB+Ko5Iuwvuw8XWB1tUeLvCo9yPIEBmD+p5z0BhLTweiW031VIzWQVaFCA
9Fz8iDCvcZx2HzEUgCN4lyxDwgbIFiLvNiS5ySBhGT23/BuXt0AFPTucAvnkMpwx
JrtZr/ZSeNRk8lbgoXjIzfSRD7vZGPOyqupcyTvsqssdaY+q3N/D8nYdqymSkVgh
0Q2bnk+7ftDkWlftb9yUP0SZdZXXp4+EEMEb+ovtk/YVviH7pZkz5VROM+TGOtAh
Yx3AIz5xeeuWPUoNf6Tj3mI/XoNsIf9wImM=
-----END CERTIFICATE-----
Generated at Thu May 7 04:35:51 2026 by rpki-client