Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa
File:                     a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa (raw, json)
Hash identifier:          FnS2UijtlVpg8FED9oFk6vBl+bSuVYvLV5p3qNR4f9k=
Subject key identifier:   F8:88:99:4B:2A:42:BE:E4:46:8A:E0:4B:58:E6:6E:63:67:94:FB:47
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584F497650C482F17A9F52BC6200
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     17378
IP address blocks:        2001:19b8::/32 maxlen: 48
                          2001:4970::/32 maxlen: 48
                          2600:2c00::/30 maxlen: 48
                          2604:7e00::/32 maxlen: 48
                          2604:7f80::/32 maxlen: 48
                          2606:a700::/32 maxlen: 48
                          2607:f1d0::/32 maxlen: 48
                          2607:f3f8::/32 maxlen: 48
                          2607:fc38::/32 maxlen: 48
                          2607:fdb8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:50:c4:82:f1:7a:9f:52:bc:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5bf10253-aa91-49ad-9b1c-e959c5696b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8e:ab:d6:cf:09:71:8e:9a:1c:5b:b9:86:4e:
                    3f:7a:a1:ca:1f:ee:f7:ba:f2:dd:d4:27:77:ca:fc:
                    a7:29:07:d6:d5:5b:fc:8b:00:07:10:12:ee:91:00:
                    8f:eb:54:4d:e0:9a:88:e5:c3:67:fe:a9:1e:31:89:
                    88:82:db:6c:e3:78:d5:64:33:7e:fd:7a:0d:14:69:
                    c0:11:0a:bc:d5:fa:e6:6d:79:dc:e2:7d:33:dd:95:
                    c7:43:26:7c:0e:cc:e1:09:0c:0f:f3:ee:a2:f1:3d:
                    0b:cb:e1:6b:d8:01:b1:f1:7a:91:f8:7f:70:17:41:
                    a8:92:de:b2:8e:f6:67:23:4f:cd:6d:b6:18:69:69:
                    6b:54:b4:e1:8a:1f:d1:26:03:27:5b:ee:c3:f7:36:
                    fe:ef:79:f2:be:4c:f6:ed:9d:26:87:d1:1f:10:a4:
                    b4:0c:8c:43:b6:bd:8e:17:4b:2f:7c:bc:50:13:3d:
                    1a:fc:a7:ca:fc:6b:77:8e:b9:64:5a:ae:31:13:34:
                    f2:74:a6:83:eb:c8:d8:72:5d:9b:3b:8e:87:67:b2:
                    87:82:53:8a:44:cf:84:8e:54:58:51:f8:d7:6f:52:
                    9f:c2:b2:13:29:b6:11:e5:6a:8e:8e:ba:cc:f9:60:
                    87:f9:01:a4:08:6d:d8:91:2e:95:c0:8e:ff:9e:75:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:88:99:4B:2A:42:BE:E4:46:8A:E0:4B:58:E6:6E:63:67:94:FB:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b8::/32
                  2001:4970::/32
                  2600:2c00::/30
                  2604:7e00::/32
                  2604:7f80::/32
                  2606:a700::/32
                  2607:f1d0::/32
                  2607:f3f8::/32
                  2607:fc38::/32
                  2607:fdb8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:fe:85:96:7d:3e:85:42:35:93:cd:cc:62:af:bb:cf:3c:21:
         01:72:99:43:78:6e:89:83:e0:8b:26:9e:6d:d8:65:7d:e8:57:
         32:a7:30:37:6b:cd:f3:a6:b7:e8:63:35:a7:76:49:c3:3c:6d:
         66:0a:31:af:b4:a6:b7:f9:2c:a1:91:2e:e1:c3:7a:ad:03:92:
         18:5c:4b:3a:cb:34:ff:b5:43:16:14:79:97:7f:bb:54:78:49:
         ea:e8:9d:fd:77:92:b2:d6:ca:52:89:d7:eb:e5:b4:5e:8b:36:
         19:2d:77:e0:c5:11:68:26:11:19:2d:60:c1:92:43:c0:eb:d5:
         0e:ac:1a:fb:fe:24:52:b7:ef:d8:42:c0:00:d6:85:c6:df:b8:
         16:c2:e1:5f:00:d4:3f:f1:55:c3:8d:e9:ec:13:00:30:26:48:
         28:35:93:79:f2:66:d9:6d:b9:a8:f6:5b:47:95:ed:54:92:df:
         ac:1a:03:5c:53:82:9f:0f:18:08:39:39:46:4f:48:1b:aa:7f:
         0c:a9:c4:5b:e6:97:c3:d4:dc:b3:48:bd:34:dc:fa:19:10:e1:
         63:1f:ac:b1:94:72:bc:e9:3f:49:02:af:b6:82:70:10:4e:63:
         8b:72:d4:76:46:fc:e9:ac:3d:22:0e:0a:bc:46:a1:63:c1:1b:
         66:15:f9:cf
-----BEGIN CERTIFICATE-----
MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWE9JdlDEgvF6n1K8YgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWJmMTAyNTMtYWE5MS00OWFkLTliMWMtZTk1OWM1Njk2YjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY6r1s8JcY6aHFu5hk4/eqHKH+73uvLd1Cd3
yvynKQfW1Vv8iwAHEBLukQCP61RN4JqI5cNn/qkeMYmIgtts43jVZDN+/XoNFGnA
EQq81frmbXnc4n0z3ZXHQyZ8DszhCQwP8+6i8T0Ly+Fr2AGx8XqR+H9wF0Gokt6y
jvZnI0/NbbYYaWlrVLThih/RJgMnW+7D9zb+73nyvkz27Z0mh9EfEKS0DIxDtr2O
F0svfLxQEz0a/KfK/Gt3jrlkWq4xEzTydKaD68jYcl2bO46HZ7KHglOKRM+EjlRY
UfjXb1KfwrITKbYR5WqOjrrM+WCH+QGkCG3YkS6VwI7/nnX7OQIDAQABo4IDlTCC
A5EwHQYDVR0OBBYEFPiImUsqQr7kRorgS1jmbmNnlPtHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTQyY2Q1ZGMtYzlmYi0z
MDY1LWJmZDMtMTdjZTY0ZWI4OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUAIAEZuAMF
ACABSXADBQImACwAAwUAJgR+AAMFACYEf4ADBQAmBqcAAwUAJgfx0AMFACYH8/gD
BQAmB/w4AwUAJgf9uDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9/oWWfT6FQjWTzcxir7vPPCEBcplDeG6J
g+CLJp5t2GV96FcypzA3a83zprfoYzWndknDPG1mCjGvtKa3+SyhkS7hw3qtA5IY
XEs6yzT/tUMWFHmXf7tUeEnq6J39d5Ky1spSidfr5bReizYZLXfgxRFoJhEZLWDB
kkPA69UOrBr7/iRSt+/YQsAA1oXG37gWwuFfANQ/8VXDjensEwAwJkgoNZN58mbZ
bbmo9ltHle1Ukt+sGgNcU4KfDxgIOTlGT0gbqn8MqcRb5pfD1NyzSL003PoZEOFj
H6yxlHK86T9JAq+2gnAQTmOLctR2RvzprD0iDgq8RqFjwRtmFfnP
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:00:03 2026 by rpki-client