Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d330a491-d9bc-3e5f-bd51-5cf733eced0f.roa
File:                     d330a491-d9bc-3e5f-bd51-5cf733eced0f.roa (raw, json)
Hash identifier:          JNS5wUahMY6n8V+NTlj+EKcWv0QpFs5pMvPr3x2Rgrs=
Subject key identifier:   03:65:C9:CF:88:8F:11:4E:FA:E0:95:40:1B:48:EC:3C:01:8C:9B:23
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95EFFEDCB5FB352FE63B12C0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d330a491-d9bc-3e5f-bd51-5cf733eced0f.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:20a0::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:fe:dc:b5:fb:35:2f:e6:3b:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=96898771-34b0-466f-aecb-365fa7415ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:8a:fd:57:f9:cf:13:95:bf:d9:34:0c:a5:
                    5e:25:82:2b:47:cb:ca:31:ab:1c:33:95:d7:20:87:
                    04:01:b7:af:c9:a4:48:10:e6:34:3e:58:33:a1:d0:
                    76:94:c4:13:15:5a:f7:de:dc:7f:89:42:22:04:5b:
                    41:da:55:0b:50:75:da:45:17:7b:d6:58:d6:42:69:
                    79:74:e0:d4:14:32:c9:67:59:59:0a:6d:e3:6c:e7:
                    53:37:40:92:12:35:11:6b:3d:a9:4c:63:1e:85:cc:
                    5a:62:3c:66:9a:5a:22:de:bb:ef:3d:9e:d0:7d:34:
                    ba:b4:e5:d3:c0:76:f6:4f:b8:82:f0:ec:d3:6f:d4:
                    6b:3b:fb:19:49:ef:41:8b:49:d9:3f:50:8c:c9:c1:
                    cf:ab:e4:82:cf:e6:78:5f:9c:93:85:c3:96:34:28:
                    7c:69:70:e4:12:2c:84:ef:09:15:e0:e5:d2:7f:0d:
                    b3:37:93:7e:80:51:00:7d:57:05:97:1d:52:73:b4:
                    fb:dc:ab:b8:a2:c3:46:b2:a0:73:8a:fc:6f:75:61:
                    20:f3:20:06:a5:1e:64:81:77:73:4a:ab:cb:04:27:
                    01:54:e5:a4:5b:b9:93:1e:8d:26:22:ac:b4:a0:da:
                    a8:c0:25:8d:c7:fd:9f:26:b5:2d:b2:cd:05:77:93:
                    4b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:65:C9:CF:88:8F:11:4E:FA:E0:95:40:1B:48:EC:3C:01:8C:9B:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d330a491-d9bc-3e5f-bd51-5cf733eced0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:4b:7c:da:18:de:ca:38:9c:59:69:01:49:72:0e:b0:de:19:
         9c:ab:43:56:2a:95:2c:22:9b:8a:42:d8:32:47:22:34:48:9d:
         c7:9f:bf:90:ed:08:a6:75:38:b5:f6:fc:ad:71:bd:82:7b:a8:
         b0:1b:94:31:0d:fe:81:1b:16:bc:8f:c3:ae:90:a2:9b:a9:ef:
         5a:a9:99:0a:57:3d:c3:f4:03:85:02:80:8d:b5:b7:3e:fb:a8:
         16:b1:1d:d6:1d:d2:2b:b1:13:6a:c7:74:46:7b:2a:15:30:94:
         8b:00:b7:6e:ae:d5:9a:0a:eb:94:67:3f:04:7e:0b:52:d4:79:
         ec:78:a2:ef:dc:ea:a5:3e:c2:c0:7a:3b:88:2d:c6:2b:04:1f:
         ae:e2:b4:92:1a:96:48:65:fc:b1:73:eb:66:ca:64:02:94:51:
         3e:b4:56:e9:60:ac:67:d7:20:b6:31:ca:57:eb:69:d3:b9:bf:
         4c:24:de:a5:ff:7f:9e:df:0b:03:39:ab:3d:2a:63:79:75:9f:
         a3:dc:5d:a7:3f:25:2c:39:66:2e:74:55:ff:c4:97:28:e4:06:
         db:13:42:0d:8e:8c:3d:79:17:6b:7c:1e:ce:cd:99:1f:38:01:
         8b:5b:88:20:a7:6d:7f:1b:47:03:3a:55:98:35:55:54:86:8d:
         c1:f7:a2:0d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2V7/7ctfs1L+Y7EsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
OTY4OTg3NzEtMzRiMC00NjZmLWFlY2ItMzY1ZmE3NDE1ZWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohGK/Vf5zxOVv9k0DKVeJYIrR8vKMascM5XX
IIcEAbevyaRIEOY0PlgzodB2lMQTFVr33tx/iUIiBFtB2lULUHXaRRd71ljWQml5
dODUFDLJZ1lZCm3jbOdTN0CSEjURaz2pTGMehcxaYjxmmloi3rvvPZ7QfTS6tOXT
wHb2T7iC8OzTb9RrO/sZSe9Bi0nZP1CMycHPq+SCz+Z4X5yThcOWNCh8aXDkEiyE
7wkV4OXSfw2zN5N+gFEAfVcFlx1Sc7T73Ku4osNGsqBzivxvdWEg8yAGpR5kgXdz
SqvLBCcBVOWkW7mTHo0mIqy0oNqowCWNx/2fJrUtss0Fd5NLxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFANlyc+IjxFO+uCVQBtI7DwBjJsjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvZDMzMGE0OTEtZDliYy0z
ZTVmLWJkNTEtNWNmNzMzZWNlZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCCg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJhLfNoY3so4nFlpAUlyDrDeGZyrQ1YqlSwim4pC2DJHIjRIncef
v5DtCKZ1OLX2/K1xvYJ7qLAblDEN/oEbFryPw66Qopup71qpmQpXPcP0A4UCgI21
tz77qBaxHdYd0iuxE2rHdEZ7KhUwlIsAt26u1ZoK65RnPwR+C1LUeex4ou/c6qU+
wsB6O4gtxisEH67itJIalkhl/LFz62bKZAKUUT60VulgrGfXILYxylfradO5v0wk
3qX/f57fCwM5qz0qY3l1n6PcXac/JSw5Zi50Vf/ElyjkBtsTQg2OjD15F2t8Hs7N
mR84AYtbiCCnbX8bRwM6VZg1VVSGjcH3og0=
-----END CERTIFICATE-----
Generated at Wed May 13 11:31:49 2026 by rpki-client