Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/30dcb311-9e66-3471-8395-5a52c7a98fbf.roa
File:                     30dcb311-9e66-3471-8395-5a52c7a98fbf.roa (raw, json)
Hash identifier:          Dop5/uKtDGMsFHyDAeMKUgikV8pZrRsDx6B1OIfNbpg=
Subject key identifier:   64:E7:E6:50:85:23:A4:4A:C0:3B:A5:3E:FE:CC:93:7A:56:F7:68:C5
Certificate issuer:       /CN=e11ef213-14f9-4836-8d15-5de5c04f43ed
Certificate serial:       010D0C9F4328584DBA3AEC1FA9C54669205CFE00
Authority key identifier: C1:9E:2C:DD:9F:B8:49:9A:57:8B:3A:F5:BF:E3:5E:54:2C:49:4A:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/30dcb311-9e66-3471-8395-5a52c7a98fbf.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     44382
IP address blocks:        2602:fa5d::/48 maxlen: 48
                          2602:fa5d:1::/48 maxlen: 48
                          2602:fa5d:2::/48 maxlen: 48
                          2602:fa5d:3::/48 maxlen: 48
                          2602:fa5d:4::/48 maxlen: 48
                          2602:fa5d:5::/48 maxlen: 48
                          2602:fa5d:6::/48 maxlen: 48
                          2602:fa5d:7::/48 maxlen: 48
                          2602:fa5d:8::/48 maxlen: 48
                          2602:fa5d:9::/48 maxlen: 48
                          2602:fa5d:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/e11ef213-14f9-4836-8d15-5de5c04f43ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/e11ef213-14f9-4836-8d15-5de5c04f43ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:ec:1f:a9:c5:46:69:20:5c:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11ef213-14f9-4836-8d15-5de5c04f43ed
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=b8f21c41-4c72-4d38-aa65-329afd782e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:6f:18:00:b6:89:7a:82:66:7d:58:61:6d:
                    25:2f:ce:79:fb:84:e5:6f:e1:4c:ce:7d:4d:81:0b:
                    ad:4f:a5:4e:27:ff:ce:97:73:38:f0:30:ee:29:33:
                    2b:2f:60:1f:e2:71:aa:a4:60:d4:67:65:8f:a6:4a:
                    dc:71:c1:e0:86:66:c4:94:b0:bf:c5:e6:93:43:45:
                    48:44:9d:1d:63:06:f9:4d:73:bb:e7:69:81:cc:5e:
                    af:ba:96:c6:7c:34:d5:2a:3a:bd:9d:0f:7c:67:9a:
                    a9:af:67:f4:ee:9a:be:84:3e:d2:56:3a:bf:0b:4d:
                    89:63:bd:63:2c:17:c8:e5:41:0e:43:a6:e8:32:b6:
                    8b:4f:c0:0a:9c:e1:bf:95:7d:28:89:8a:98:37:ca:
                    bb:1e:f4:41:6b:03:ea:c1:10:8c:47:76:01:fa:5c:
                    75:79:47:89:fa:12:4f:56:4b:25:80:30:7c:60:95:
                    62:ad:3d:5a:aa:96:a8:40:57:a9:da:59:4c:9d:8e:
                    8e:d5:91:9e:8a:95:92:b6:3f:aa:fd:f8:a0:c8:9b:
                    d8:0a:91:29:f3:5e:53:f3:1c:ce:ae:5a:81:55:f6:
                    ce:c3:9b:b2:a8:5d:ab:4b:5f:86:38:91:75:6c:2f:
                    7a:c5:c0:de:1a:79:13:58:42:e1:9b:77:56:9b:46:
                    e9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E7:E6:50:85:23:A4:4A:C0:3B:A5:3E:FE:CC:93:7A:56:F7:68:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/30dcb311-9e66-3471-8395-5a52c7a98fbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/e11ef213-14f9-4836-8d15-5de5c04f43ed.crl

            X509v3 Authority Key Identifier:
                keyid:C1:9E:2C:DD:9F:B8:49:9A:57:8B:3A:F5:BF:E3:5E:54:2C:49:4A:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa5d::-2602:fa5d:9:ffff:ffff:ffff:ffff:ffff
                  2602:fa5d:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f9:ea:2c:0f:b8:12:fa:9a:7b:f7:7f:28:67:33:9f:f6:d6:
         55:63:0e:eb:34:09:b1:28:29:18:a5:6c:26:52:a8:4c:21:e7:
         9a:30:d9:41:fa:3d:7b:13:be:bd:b5:87:34:45:4d:a3:22:28:
         2b:97:7f:9f:20:5c:bb:6d:02:cd:fc:04:a4:2b:84:03:bf:1b:
         72:62:b0:64:39:f7:12:86:fa:35:c3:24:bf:e5:b4:4c:d5:5b:
         00:db:a7:06:e6:df:1b:a9:c3:ff:8f:3c:d2:6e:ac:2e:27:66:
         8c:a8:6f:37:a3:10:b2:dc:a1:7a:0e:03:d2:3b:46:d7:98:15:
         2e:92:2c:4d:d5:fa:ac:10:f8:f1:d9:7e:49:79:1f:0f:7e:20:
         5f:8a:57:1a:7e:1c:6e:08:96:60:63:15:1e:4e:65:ad:af:03:
         0d:11:f9:da:80:57:72:d6:eb:45:de:3a:95:57:1d:03:dd:2a:
         a9:02:c3:e5:d0:b7:7a:83:1c:3b:c9:ef:09:2f:16:e9:a6:39:
         a1:75:14:1f:a3:39:3a:9f:cc:d0:c4:47:b3:e9:f0:ac:cf:10:
         22:6d:1c:65:1a:6e:7a:77:4b:62:af:7f:d5:fb:ae:2d:a8:a5:
         5f:9c:91:fe:b7:c8:98:6f:e2:cb:1c:5f:d4:6e:d4:e9:59:3b:
         e0:4f:71:ab
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE26OuwfqcVGaSBc/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTExZWYyMTMtMTRmOS00ODM2LThkMTUtNWRlNWMwNGY0
M2VkMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
YjhmMjFjNDEtNGM3Mi00ZDM4LWFhNjUtMzI5YWZkNzgyZTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4ZvGAC2iXqCZn1YYW0lL855+4Tlb+FMzn1N
gQutT6VOJ//Ol3M48DDuKTMrL2Af4nGqpGDUZ2WPpkrcccHghmbElLC/xeaTQ0VI
RJ0dYwb5TXO752mBzF6vupbGfDTVKjq9nQ98Z5qpr2f07pq+hD7SVjq/C02JY71j
LBfI5UEOQ6boMraLT8AKnOG/lX0oiYqYN8q7HvRBawPqwRCMR3YB+lx1eUeJ+hJP
VkslgDB8YJVirT1aqpaoQFep2llMnY6O1ZGeipWStj+q/figyJvYCpEp815T8xzO
rlqBVfbOw5uyqF2rS1+GOJF1bC96xcDeGnkTWELhm3dWm0bpfwIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFGTn5lCFI6RKwDulPv7Mk3pW92jFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMTFl
ZjIxMy0xNGY5LTQ4MzYtOGQxNS01ZGU1YzA0ZjQzZWQvMzBkY2IzMTEtOWU2Ni0z
NDcxLTgzOTUtNWE1MmM3YTk4ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTExZWYyMTMtMTRmOS00ODM2LThk
MTUtNWRlNWMwNGY0M2VkL2UxMWVmMjEzLTE0ZjktNDgzNi04ZDE1LTVkZTVjMDRm
NDNlZC5jcmwwHwYDVR0jBBgwFoAUwZ4s3Z+4SZpXizr1v+NeVCxJSh0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMTFlZjIxMy0xNGY5LTQ4MzYtOGQxNS01ZGU1
YzA0ZjQzZWQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbMBADBQAmAvpd
AwcBJgL6XQAIAwcAJgL6XQAQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHP56iwPuBL6mnv3fyhnM5/21lVj
Dus0CbEoKRilbCZSqEwh55ow2UH6PXsTvr21hzRFTaMiKCuXf58gXLttAs38BKQr
hAO/G3JisGQ59xKG+jXDJL/ltEzVWwDbpwbm3xupw/+PPNJurC4nZoyobzejELLc
oXoOA9I7RteYFS6SLE3V+qwQ+PHZfkl5Hw9+IF+KVxp+HG4IlmBjFR5OZa2vAw0R
+dqAV3LW60XeOpVXHQPdKqkCw+XQt3qDHDvJ7wkvFummOaF1FB+jOTqfzNDER7Pp
8KzPECJtHGUabnp3S2Kvf9X7ri2opV+ckf63yJhv4sscX9Ru1OlZO+BPcas=
-----END CERTIFICATE-----
Generated at Wed May 13 10:31:58 2026 by rpki-client