Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/1298e627-64f2-30b0-94f5-1d45a35a642f.roa
File:                     1298e627-64f2-30b0-94f5-1d45a35a642f.roa (raw, json)
Hash identifier:          5nNeF7isOmo+GIYZroJ52U/8GkTHCGAoOLkuw3CEjkU=
Subject key identifier:   D7:FA:DA:1A:D7:68:7F:6F:62:22:09:6C:F7:F8:66:CF:94:16:E8:D6
Certificate issuer:       /CN=b2d9b16a-e15f-46c2-a578-0677307787a3
Certificate serial:       010D0C9F4328584DA11AB63D724C82556977BB40
Authority key identifier: 20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/1298e627-64f2-30b0-94f5-1d45a35a642f.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     399686
IP address blocks:        2606:62c0:11::/48 maxlen: 48
                          2606:62c0:12::/48 maxlen: 48
                          2606:62c0:13::/48 maxlen: 48
                          2606:62c0:17::/48 maxlen: 48
                          2606:62c0:18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:b6:3d:72:4c:82:55:69:77:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d9b16a-e15f-46c2-a578-0677307787a3
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=4d16c7e2-959c-4e08-8a65-b1910702f8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:00:5e:72:15:f2:83:f4:91:20:41:69:e5:
                    21:25:6f:e4:6d:bc:46:2e:b8:46:70:be:de:63:91:
                    de:bb:ac:32:5d:2e:0d:c2:8e:59:d3:7d:16:69:46:
                    28:1a:cd:33:2e:b8:99:3c:50:0f:2c:ec:28:fe:df:
                    bf:15:d3:ea:50:aa:ea:27:84:13:f6:77:09:4c:19:
                    2f:57:1a:4a:87:61:72:44:f6:62:81:3f:fd:13:e6:
                    9f:b9:43:66:5c:98:b2:b7:21:64:dd:29:a1:c1:cd:
                    c8:6c:29:ce:00:4e:f8:6e:73:17:14:43:04:60:97:
                    90:d5:bc:32:91:b2:62:5c:60:e9:8e:c3:09:7e:ff:
                    f4:5f:45:99:87:00:4a:a6:44:93:ce:e9:4e:c2:33:
                    35:f4:a1:fa:27:a4:0f:03:e8:8f:e6:99:b9:8b:a7:
                    23:d7:6a:35:aa:89:95:db:0f:12:ed:b9:2b:e9:14:
                    b7:c3:07:9a:95:ed:83:e4:54:f9:8f:8d:91:6d:f5:
                    98:3c:40:f0:a2:6b:72:33:78:bf:fa:7b:30:99:76:
                    4f:b8:b9:c7:55:53:5e:ca:c6:a0:c1:d8:1e:00:3e:
                    e9:41:0e:dd:91:9f:cd:de:bc:d0:98:a4:b3:a6:a9:
                    96:e2:ff:51:28:6d:3c:ad:27:98:be:29:79:b1:72:
                    1a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FA:DA:1A:D7:68:7F:6F:62:22:09:6C:F7:F8:66:CF:94:16:E8:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/1298e627-64f2-30b0-94f5-1d45a35a642f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl

            X509v3 Authority Key Identifier:
                keyid:20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:62c0:11::-2606:62c0:13:ffff:ffff:ffff:ffff:ffff
                  2606:62c0:17::-2606:62c0:18:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ac:61:92:71:df:01:9c:12:6b:0b:5c:f6:7d:53:07:f8:04:
         8a:50:cc:27:f0:c5:a2:b6:ff:8e:f2:43:bf:9c:9c:05:2c:1a:
         dc:db:ab:31:57:50:21:8f:3c:72:9c:91:cd:e2:fa:1d:dc:36:
         65:15:0a:bf:0e:d6:d3:5b:0b:68:ab:e1:54:7e:cc:70:78:a5:
         96:e6:35:d6:4d:3d:2c:21:f2:41:44:51:15:76:3d:8d:4c:de:
         5a:d9:dd:59:69:71:aa:c1:32:7e:07:4b:23:64:6e:5a:fa:17:
         c3:cf:1a:06:ad:1f:5c:7c:c3:8f:da:f9:6e:eb:e2:e1:87:b4:
         ee:8c:71:85:ef:a0:eb:42:be:e6:3c:a8:db:79:06:e1:42:e0:
         e9:7d:ec:53:2d:1d:fc:8f:1b:81:b9:13:4b:b2:ac:b6:24:95:
         9f:31:11:42:07:a7:3e:3a:f9:4e:02:d1:88:35:f6:60:67:2a:
         3d:18:90:37:0b:0b:fb:54:f4:e2:14:ed:f1:1e:51:24:b4:3e:
         d5:0e:73:5b:90:07:26:bb:5e:13:f1:15:71:c5:c8:34:55:1b:
         f0:81:9b:47:72:b1:9a:54:9b:83:74:f3:22:3c:f2:be:a2:01:
         1c:33:ba:39:45:aa:5b:bf:56:1b:29:5a:51:d6:dc:2d:22:0e:
         94:59:5a:54
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWE2hGrY9ckyCVWl3u0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJkOWIxNmEtZTE1Zi00NmMyLWE1NzgtMDY3NzMwNzc4
N2EzMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
NGQxNmM3ZTItOTU5Yy00ZTA4LThhNjUtYjE5MTA3MDJmOGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreMAXnIV8oP0kSBBaeUhJW/kbbxGLrhGcL7e
Y5Heu6wyXS4Nwo5Z030WaUYoGs0zLriZPFAPLOwo/t+/FdPqUKrqJ4QT9ncJTBkv
VxpKh2FyRPZigT/9E+afuUNmXJiytyFk3Smhwc3IbCnOAE74bnMXFEMEYJeQ1bwy
kbJiXGDpjsMJfv/0X0WZhwBKpkSTzulOwjM19KH6J6QPA+iP5pm5i6cj12o1qomV
2w8S7bkr6RS3wweale2D5FT5j42RbfWYPEDwomtyM3i/+nswmXZPuLnHVVNeysag
wdgeAD7pQQ7dkZ/N3rzQmKSzpqmW4v9RKG08rSeYvil5sXIaMQIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFNf62hrXaH9vYiIJbPf4Zs+UFujWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMmQ5
YjE2YS1lMTVmLTQ2YzItYTU3OC0wNjc3MzA3Nzg3YTMvMTI5OGU2MjctNjRmMi0z
MGIwLTk0ZjUtMWQ0NWEzNWE2NDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjJkOWIxNmEtZTE1Zi00NmMyLWE1
NzgtMDY3NzMwNzc4N2EzL2IyZDliMTZhLWUxNWYtNDZjMi1hNTc4LTA2NzczMDc3
ODdhMy5jcmwwHwYDVR0jBBgwFoAUIEpA4zG5OEM/CEYzRRAWpoSxg2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMmQ5YjE2YS1lMTVmLTQ2YzItYTU3OC0wNjc3
MzA3Nzg3YTMuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAAjAoMBIDBwAmBmLA
ABEDBwImBmLAABAwEgMHACYGYsAAFwMHACYGYsAAGDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcrGGScd8B
nBJrC1z2fVMH+ASKUMwn8MWitv+O8kO/nJwFLBrc26sxV1AhjzxynJHN4vod3DZl
FQq/DtbTWwtoq+FUfsxweKWW5jXWTT0sIfJBRFEVdj2NTN5a2d1ZaXGqwTJ+B0sj
ZG5a+hfDzxoGrR9cfMOP2vlu6+Lhh7TujHGF76DrQr7mPKjbeQbhQuDpfexTLR38
jxuBuRNLsqy2JJWfMRFCB6c+OvlOAtGINfZgZyo9GJA3Cwv7VPTiFO3xHlEktD7V
DnNbkAcmu14T8RVxxcg0VRvwgZtHcrGaVJuDdPMiPPK+ogEcM7o5Rapbv1YbKVpR
1twtIg6UWVpU
-----END CERTIFICATE-----
Generated at Wed May 13 16:09:43 2026 by rpki-client