Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/bfbc81aa-8e83-3e3a-b2ad-03ee9f8450c6.roa
File:                     bfbc81aa-8e83-3e3a-b2ad-03ee9f8450c6.roa (raw, json)
Hash identifier:          mWwIhfGsUt2VIhS71Ye+0j47jeI8nAuXAQOn9hG3MuU=
Subject key identifier:   F5:98:E5:91:9F:D2:5E:85:2F:4D:23:C6:90:6C:97:2A:57:55:F3:13
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F4328584F89A8563AA3E32F64BE0A0380
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/bfbc81aa-8e83-3e3a-b2ad-03ee9f8450c6.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     36692
IP address blocks:        2603:5001:30::/44 maxlen: 44
                          2603:5001:1030::/44 maxlen: 44
                          2603:5001:2030::/44 maxlen: 44
                          2603:5001:3030::/44 maxlen: 44
                          2603:5001:4030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:56:3a:a3:e3:2f:64:be:0a:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=55485679-76e8-45e1-a682-59889529305c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:db:2a:fe:dc:5f:24:e3:ea:ea:41:ad:e3:f5:
                    cf:5e:f0:87:9b:32:4a:14:ba:1d:54:74:79:b8:79:
                    4c:f3:b3:92:5f:3a:47:b0:27:bc:74:e0:e0:85:e1:
                    84:e7:9d:54:bc:13:12:c3:89:ef:cb:79:97:df:a7:
                    58:28:b9:03:77:11:58:a1:94:cb:23:6c:51:4b:5e:
                    f1:85:4e:8f:79:ae:82:f0:79:87:3e:0a:38:ad:ff:
                    50:36:8a:36:3b:7c:78:6a:1e:03:18:34:11:7a:87:
                    51:96:ae:48:9a:a9:9b:52:e9:06:8f:d9:9e:c9:09:
                    b9:b2:50:44:bf:a9:aa:0f:8a:b7:88:5e:86:92:6d:
                    b9:e9:14:cf:18:99:c4:ec:e0:be:3c:d1:70:36:6d:
                    05:22:34:c4:b2:79:9c:b5:17:2a:1b:02:90:39:52:
                    7c:f7:6f:cd:e8:02:6b:43:7f:4a:f0:51:44:a7:f1:
                    3f:db:8e:4c:7d:6f:b7:3d:ed:e1:a0:2e:12:cb:6b:
                    b6:53:74:de:ef:a5:14:18:ee:6d:9e:7d:52:3a:cf:
                    ac:33:52:4b:5a:b0:a7:62:52:20:41:09:42:4a:cb:
                    42:72:b6:22:3a:51:c6:f8:c2:26:f6:56:0c:a8:ed:
                    ad:64:d3:be:d3:ce:38:aa:9e:ff:c7:5d:60:05:69:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:98:E5:91:9F:D2:5E:85:2F:4D:23:C6:90:6C:97:2A:57:55:F3:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/bfbc81aa-8e83-3e3a-b2ad-03ee9f8450c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5001:30::/44
                  2603:5001:1030::/44
                  2603:5001:2030::/44
                  2603:5001:3030::/44
                  2603:5001:4030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:ce:05:45:1a:d7:8a:6a:4d:4c:23:91:d4:42:9c:e6:3c:c0:
         a3:d9:bf:28:cc:66:9f:60:ee:92:63:8b:88:64:3c:34:5b:a4:
         ab:40:fc:10:4e:2c:b1:c5:39:c2:76:86:10:ab:0e:45:d2:a6:
         c3:ae:5b:f2:35:e4:c0:8a:3c:4f:92:cd:41:69:83:e8:45:3a:
         ff:a6:44:53:37:a3:aa:84:15:5f:9c:f9:10:5f:04:22:f9:e9:
         91:af:82:aa:a4:81:67:aa:44:71:2e:ee:88:54:78:26:f0:a3:
         25:2e:b0:9e:15:e7:41:38:65:a3:ba:4f:53:4c:ca:d6:22:2f:
         1a:88:5a:99:d6:88:79:4c:8c:75:89:38:3b:ac:95:4c:cb:fa:
         35:d8:b1:84:d3:20:b0:a1:e6:0e:6b:2c:3c:14:9a:93:81:fc:
         10:36:ce:4e:17:1b:3d:13:95:43:eb:34:25:da:af:2f:4e:e8:
         50:6e:92:d3:fc:57:97:9f:52:9a:3a:98:d5:0f:c3:0b:55:80:
         b5:cb:6a:54:c7:7b:cf:68:68:57:d9:7d:a0:66:cd:db:1b:37:
         80:aa:51:41:69:e0:93:7e:73:14:13:35:5b:a7:a4:72:85:b0:
         fa:a8:e9:ba:6f:48:74:0e:41:b2:ac:f3:62:e0:46:c6:fe:2c:
         07:06:72:db
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWE+JqFY6o+MvZL4KA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc1ZDIwZjYtMWNmYS00ODNlLWJlMGYtZDE1ZWI1NDhm
NjZkMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk
NTU0ODU2NzktNzZlOC00NWUxLWE2ODItNTk4ODk1MjkzMDVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNsq/txfJOPq6kGt4/XPXvCHmzJKFLodVHR5
uHlM87OSXzpHsCe8dODgheGE551UvBMSw4nvy3mX36dYKLkDdxFYoZTLI2xRS17x
hU6Pea6C8HmHPgo4rf9QNoo2O3x4ah4DGDQReodRlq5ImqmbUukGj9meyQm5slBE
v6mqD4q3iF6Gkm256RTPGJnE7OC+PNFwNm0FIjTEsnmctRcqGwKQOVJ892/N6AJr
Q39K8FFEp/E/245MfW+3Pe3hoC4Sy2u2U3Te76UUGO5tnn1SOs+sM1JLWrCnYlIg
QQlCSstCcrYiOlHG+MIm9lYMqO2tZNO+0844qp7/x11gBWnWEQIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFPWY5ZGf0l6FL00jxpBslypXVfMTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83NzVk
MjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVlYjU0OGY2NmQvYmZiYzgxYWEtOGU4My0z
ZTNhLWIyYWQtMDNlZTlmODQ1MGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc1ZDIwZjYtMWNmYS00ODNlLWJl
MGYtZDE1ZWI1NDhmNjZkLzc3NWQyMGY2LTFjZmEtNDgzZS1iZTBmLWQxNWViNTQ4
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUGy2qCGYWpuHYP/G3Oy3sdH8TIz4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83NzVkMjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVl
YjU0OGY2NmQuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcEJgNQAQAw
AwcEJgNQARAwAwcEJgNQASAwAwcEJgNQATAwAwcEJgNQAUAwMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKjO
BUUa14pqTUwjkdRCnOY8wKPZvyjMZp9g7pJji4hkPDRbpKtA/BBOLLHFOcJ2hhCr
DkXSpsOuW/I15MCKPE+SzUFpg+hFOv+mRFM3o6qEFV+c+RBfBCL56ZGvgqqkgWeq
RHEu7ohUeCbwoyUusJ4V50E4ZaO6T1NMytYiLxqIWpnWiHlMjHWJODuslUzL+jXY
sYTTILCh5g5rLDwUmpOB/BA2zk4XGz0TlUPrNCXary9O6FBuktP8V5efUpo6mNUP
wwtVgLXLalTHe89oaFfZfaBmzdsbN4CqUUFp4JN+cxQTNVunpHKFsPqo6bpvSHQO
QbKs82LgRsb+LAcGcts=
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:36:08 2026 by rpki-client