Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f31a0517-a6bb-37a1-8d18-bee86b07588f.roa
File:                     f31a0517-a6bb-37a1-8d18-bee86b07588f.roa (raw, json)
Hash identifier:          JbhMxl52GmLn1xzrcz2Lj1gGR64R15xg+TLIRP+W/Kw=
Subject key identifier:   98:3F:C8:9C:2C:CD:3B:F7:E0:79:DF:23:1C:0A:CE:B9:6B:8F:85:D5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA94C9C7F4705A90103BC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f31a0517-a6bb-37a1-8d18-bee86b07588f.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20001
IP address blocks:        2603:803d::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:94:c9:c7:f4:70:5a:90:10:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=0f832e5b-f047-47fe-a2f8-bc001687c77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fc:e0:79:e2:4c:bd:0d:f9:b0:73:12:01:7b:
                    78:1b:bb:ec:85:83:f4:1e:68:b4:e4:a4:a6:ce:61:
                    7c:d9:b1:fa:1d:a7:d4:82:e1:c5:bc:61:38:6b:3b:
                    9a:f0:9f:58:6e:e0:17:f2:17:12:ce:8b:8a:65:b5:
                    1a:af:da:a9:82:e2:06:39:43:6a:65:17:d8:bf:ce:
                    a2:09:33:37:3b:6f:f5:90:85:3b:c3:07:de:b5:d8:
                    49:33:d4:91:e4:79:57:66:35:44:e0:b6:3d:55:0b:
                    1e:65:25:05:69:62:9d:ea:88:c0:cf:3a:ab:36:93:
                    ab:e1:75:1f:ea:cf:58:79:3b:51:1a:6d:89:97:dc:
                    9a:3d:3d:66:72:7b:83:25:da:7b:3c:5e:48:ee:5c:
                    06:18:63:1b:eb:65:28:41:b6:d0:94:17:12:e3:ef:
                    44:7c:34:5a:33:04:ac:85:16:74:01:91:a6:dd:f4:
                    e8:99:58:46:96:df:b8:f7:4f:ac:3b:3e:bf:6f:3b:
                    3c:e2:dc:39:b8:8f:53:15:02:0d:cf:9d:f6:fb:a1:
                    47:d1:f6:ce:c0:30:54:f4:0c:8a:03:f5:8c:25:16:
                    88:8f:16:66:7f:c6:90:9e:b5:a4:25:2c:a0:3e:c2:
                    ef:90:ed:5d:82:c4:0e:92:0f:f3:e5:72:f5:ae:bb:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3F:C8:9C:2C:CD:3B:F7:E0:79:DF:23:1C:0A:CE:B9:6B:8F:85:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f31a0517-a6bb-37a1-8d18-bee86b07588f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:803d::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:20:77:91:55:62:ac:e1:69:4b:a1:40:2a:97:66:0f:ed:5a:
         0b:00:9e:76:0f:bb:c2:e2:5f:bd:f2:6d:42:60:4c:32:f1:51:
         25:09:e1:bf:77:be:f7:9d:5b:f2:71:f0:d2:c0:b7:3d:b0:20:
         5c:f3:d9:6c:de:a7:c1:5d:82:c3:fc:2a:5c:63:fb:9d:19:40:
         b3:57:30:bf:eb:c7:49:19:6e:c4:2f:71:8c:95:94:81:61:5d:
         92:79:7c:b2:59:3f:7f:98:ae:9e:45:2e:9e:a7:91:41:db:06:
         d2:bb:85:2c:e1:82:60:f8:60:49:f1:78:42:3d:51:12:13:65:
         a2:17:2f:cb:dc:c5:8b:42:e7:9d:67:24:ea:05:6d:0a:3b:c1:
         b6:ab:2e:76:0a:c2:87:c7:cb:4e:37:c0:c5:17:0d:44:f4:1c:
         d6:66:0e:31:65:08:18:ae:3b:9f:e4:05:a7:5c:95:90:19:96:
         17:45:c4:89:43:dd:48:c2:f2:41:ad:a2:01:45:38:d7:33:10:
         7a:00:6d:bb:fd:b7:74:46:b5:38:68:a2:4a:4e:bd:e9:76:42:
         9a:c5:6a:94:cb:46:d3:79:7d:4d:3f:82:45:a6:ae:f0:41:45:
         b7:be:58:96:5a:8e:d5:a0:44:13:a2:ea:a7:09:5d:32:91:f1:
         7e:74:4f:09
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1AypTJx/RwWpAQO8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
MGY4MzJlNWItZjA0Ny00N2ZlLWEyZjgtYmMwMDE2ODdjNzdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPzgeeJMvQ35sHMSAXt4G7vshYP0Hmi05KSm
zmF82bH6HafUguHFvGE4azua8J9YbuAX8hcSzouKZbUar9qpguIGOUNqZRfYv86i
CTM3O2/1kIU7wwfetdhJM9SR5HlXZjVE4LY9VQseZSUFaWKd6ojAzzqrNpOr4XUf
6s9YeTtRGm2Jl9yaPT1mcnuDJdp7PF5I7lwGGGMb62UoQbbQlBcS4+9EfDRaMwSs
hRZ0AZGm3fTomVhGlt+490+sOz6/bzs84tw5uI9TFQINz532+6FH0fbOwDBU9AyK
A/WMJRaIjxZmf8aQnrWkJSygPsLvkO1dgsQOkg/z5XL1rrsQswIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJg/yJwszTv34HnfIxwKzrlrj4XVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZjMxYTA1MTctYTZiYi0z
N2ExLThkMTgtYmVlODZiMDc1ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgOAPTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBFIHeRVWKs4WlLoUAql2YP7VoLAJ52D7vC4l+98m1CYEwy8VElCeG/
d773nVvycfDSwLc9sCBc89ls3qfBXYLD/CpcY/udGUCzVzC/68dJGW7EL3GMlZSB
YV2SeXyyWT9/mK6eRS6ep5FB2wbSu4Us4YJg+GBJ8XhCPVESE2WiFy/L3MWLQued
ZyTqBW0KO8G2qy52CsKHx8tON8DFFw1E9BzWZg4xZQgYrjuf5AWnXJWQGZYXRcSJ
Q91IwvJBraIBRTjXMxB6AG27/bd0RrU4aKJKTr3pdkKaxWqUy0bTeX1NP4JFpq7w
QUW3vliWWo7VoEQTouqnCV0ykfF+dE8J
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:32:25 2026 by rpki-client