Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa
File:                     d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa (raw, json)
Hash identifier:          e7Lt+TsRQ7Mt12trhb6LiXDdgh7juWhDuag29MIp+M0=
Subject key identifier:   9A:56:5C:34:68:4B:DA:A6:FF:7A:AD:C4:32:F7:42:F0:BD:BD:63:1B
Certificate issuer:       /CN=643177f7-12a4-4138-aa72-1b5beaada59f
Certificate serial:       010D0C9F4328584DD4C07E4189BAC763CFD0B840
Authority key identifier: E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     46309
IP address blocks:        2605:bc00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:7e:41:89:ba:c7:63:cf:d0:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643177f7-12a4-4138-aa72-1b5beaada59f
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=400b9cb1-ee47-440e-a9e3-127d06bf847c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5b:a1:cf:dc:32:46:b2:99:d5:35:50:71:ba:
                    c8:3f:86:38:93:17:12:e2:82:28:e0:72:74:79:f9:
                    95:51:13:ec:de:e0:f4:99:84:a5:2e:f5:1f:db:38:
                    ca:c9:08:90:46:d0:07:8c:60:11:c1:83:a9:21:fa:
                    f7:b1:fa:e0:af:00:3c:93:13:14:74:e8:2d:70:a1:
                    e7:a7:a5:1e:97:64:e5:8c:e8:2e:85:14:b6:0c:7d:
                    c0:11:8a:e8:47:72:3f:02:3f:13:86:97:4f:2e:7f:
                    f3:40:71:b1:2d:c6:48:a1:06:e6:45:80:96:8d:af:
                    62:37:2d:ec:c1:16:02:aa:91:8a:ab:52:5d:ab:1f:
                    59:0b:d0:36:31:c7:9c:01:ae:c1:d6:a2:60:c8:81:
                    a8:80:57:9f:0f:d0:a6:9f:af:e3:e9:3f:8a:11:e3:
                    15:3a:df:f1:8d:7d:51:f0:03:d9:d6:be:a6:25:6e:
                    6e:98:08:65:63:12:b8:a4:62:77:3d:ec:e6:75:bb:
                    bd:34:5d:95:d0:9e:91:ba:7e:f5:2b:e8:15:73:f6:
                    19:d0:a1:92:63:c4:7a:40:83:c7:8c:98:9e:01:d2:
                    3d:80:ca:00:92:bc:51:3f:ee:f6:1f:04:fc:45:4e:
                    41:ba:bf:7a:5e:d2:ce:63:4f:91:52:35:f6:fe:f8:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:56:5C:34:68:4B:DA:A6:FF:7A:AD:C4:32:F7:42:F0:BD:BD:63:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl

            X509v3 Authority Key Identifier:
                keyid:E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bc00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f2:8e:d3:53:00:09:7c:95:cb:79:37:4c:c5:53:03:ad:a1:
         b1:8f:63:0a:bc:10:9d:26:a2:6c:67:24:c9:48:f8:d1:f8:c9:
         ef:ba:fe:34:36:35:fe:c1:fd:37:9f:72:ba:f7:59:41:30:5f:
         8c:4c:57:52:0b:aa:06:3f:db:9e:a5:75:a6:b1:ff:68:2c:96:
         74:28:03:ef:12:51:06:a1:25:21:b0:d6:e5:26:b5:71:2f:64:
         8f:49:8b:6e:4f:bc:ee:7f:4e:84:19:95:63:52:ef:6d:3e:95:
         ae:78:99:66:93:6f:4f:d8:ac:2d:03:3f:9f:68:50:b2:f0:1b:
         01:48:33:8e:ca:e1:a0:30:93:7d:35:72:88:c0:24:82:38:3b:
         4e:2f:36:14:3f:dc:c3:0a:04:b6:d2:99:0d:ea:43:c2:7a:78:
         85:37:4d:77:69:8e:15:17:80:df:6a:ab:e4:e0:cf:10:49:6f:
         fc:50:d5:09:74:ba:55:64:8e:d6:8c:83:d2:b7:c7:5b:97:99:
         f9:45:07:12:f4:d6:aa:50:56:b4:d2:37:37:a9:55:01:47:73:
         a6:1c:1d:78:35:ad:69:2e:e4:ef:22:cd:15:f9:5c:bf:d0:c7:
         b9:61:ac:17:33:f3:7a:c7:5d:cd:f6:84:3a:64:7c:56:50:e2:
         de:87:a0:88
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3UwH5BibrHY8/QuEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQzMTc3ZjctMTJhNC00MTM4LWFhNzItMWI1YmVhYWRh
NTlmMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk
NDAwYjljYjEtZWU0Ny00NDBlLWE5ZTMtMTI3ZDA2YmY4NDdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1uhz9wyRrKZ1TVQcbrIP4Y4kxcS4oIo4HJ0
efmVURPs3uD0mYSlLvUf2zjKyQiQRtAHjGARwYOpIfr3sfrgrwA8kxMUdOgtcKHn
p6Uel2TljOguhRS2DH3AEYroR3I/Aj8ThpdPLn/zQHGxLcZIoQbmRYCWja9iNy3s
wRYCqpGKq1Jdqx9ZC9A2McecAa7B1qJgyIGogFefD9Cmn6/j6T+KEeMVOt/xjX1R
8APZ1r6mJW5umAhlYxK4pGJ3Pezmdbu9NF2V0J6Run71K+gVc/YZ0KGSY8R6QIPH
jJieAdI9gMoAkrxRP+72HwT8RU5Bur96XtLOY0+RUjX2/vhiYQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJpWXDRoS9qm/3qtxDL3QvC9vWMbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NDMx
NzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjViZWFhZGE1OWYvZDFiZDgzZGQtNWVjYy0z
Yzc3LTkwNmMtZWE1NmFlNjI0MTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjQzMTc3ZjctMTJhNC00MTM4LWFh
NzItMWI1YmVhYWRhNTlmLzY0MzE3N2Y3LTEyYTQtNDEzOC1hYTcyLTFiNWJlYWFk
YTU5Zi5jcmwwHwYDVR0jBBgwFoAU4IHJ8lxPXkglN0ngXX1t+O7PNiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC82NDMxNzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjVi
ZWFhZGE1OWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgW8ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAm8o7TUwAJfJXLeTdMxVMDraGxj2MKvBCdJqJsZyTJSPjR+Mnvuv40
NjX+wf03n3K691lBMF+MTFdSC6oGP9uepXWmsf9oLJZ0KAPvElEGoSUhsNblJrVx
L2SPSYtuT7zuf06EGZVjUu9tPpWueJlmk29P2KwtAz+faFCy8BsBSDOOyuGgMJN9
NXKIwCSCODtOLzYUP9zDCgS20pkN6kPCeniFN013aY4VF4Dfaqvk4M8QSW/8UNUJ
dLpVZI7WjIPSt8dbl5n5RQcS9NaqUFa00jc3qVUBR3OmHB14Na1pLuTvIs0V+Vy/
0Me5YawXM/N6x13N9oQ6ZHxWUOLeh6CI
-----END CERTIFICATE-----
Generated at Wed Jun 10 03:37:45 2026 by rpki-client