Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/200fc7f1-296c-395b-ae12-c62ffa69709e.roa
File:                     200fc7f1-296c-395b-ae12-c62ffa69709e.roa (raw, json)
Hash identifier:          eoJHWVhpQZ6GVYK6J6MFs5isOAUXmAyz11KZ004GLSA=
Subject key identifier:   B7:5A:EA:04:6A:B3:C2:9D:48:44:52:A8:4B:9B:75:9E:2B:00:63:9F
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584D91C02379014D303B9C6488E0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/200fc7f1-296c-395b-ae12-c62ffa69709e.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     16509
IP address blocks:        2607:dbc0:3000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:23:79:01:4d:30:3b:9c:64:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=a9770cd8-9efd-4fdf-bf5e-9ae8c393f5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:76:05:14:11:6a:1e:93:52:89:7a:a2:36:
                    a5:b9:7e:cf:81:dc:58:72:08:22:c4:d0:73:a7:03:
                    72:b2:35:0b:fe:14:c6:89:c5:58:2c:07:ba:86:b5:
                    d3:c5:6d:6c:78:51:d6:91:39:45:eb:da:99:38:3d:
                    1f:bb:b6:ec:46:40:ae:50:9d:68:3b:43:88:17:4d:
                    ec:c6:05:0f:1a:98:4b:a7:df:c0:a2:9e:2e:e7:55:
                    40:0a:4a:6c:a5:dc:9f:db:6a:94:3a:58:cf:7b:d9:
                    27:2f:66:66:da:7b:a4:07:02:f1:f1:32:ba:7f:96:
                    03:2d:e1:05:d0:d9:36:e1:80:6e:d4:04:bf:ac:f4:
                    45:6f:2d:e9:26:cf:65:e9:0b:92:33:f8:00:70:32:
                    83:c4:2a:e6:08:1c:04:c5:92:c0:10:12:72:dc:14:
                    d1:b1:ca:d2:2e:6d:48:ab:a7:78:9e:54:f5:79:f6:
                    21:44:99:bc:43:ca:08:d6:f3:99:bb:a6:d0:28:8e:
                    dd:59:03:02:7c:7b:bb:63:27:6d:46:90:e4:a0:86:
                    c0:4e:41:66:6d:58:87:dd:1d:5d:e2:99:ea:32:25:
                    50:40:af:ce:06:c9:c4:95:db:79:51:7c:7c:f9:9e:
                    21:21:cb:25:f8:f4:98:49:13:94:68:90:01:4f:22:
                    81:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5A:EA:04:6A:B3:C2:9D:48:44:52:A8:4B:9B:75:9E:2B:00:63:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/200fc7f1-296c-395b-ae12-c62ffa69709e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:1e:69:2f:cc:14:8f:56:e7:91:56:14:53:49:da:31:06:96:
         fc:6b:5b:d8:12:4d:ea:63:58:98:6f:32:23:10:22:9d:38:47:
         d0:d4:cb:ab:17:b2:e4:f0:1e:1f:5f:dc:48:1d:e9:cf:aa:fd:
         4b:18:d9:b4:f2:78:15:81:fb:3e:8d:3f:d4:59:f4:73:06:ac:
         fb:e9:41:57:de:75:f6:04:26:c7:de:55:94:3c:89:aa:d7:36:
         53:a0:1d:2a:ae:1f:08:0e:53:ce:c9:e0:70:45:d3:67:32:1c:
         22:20:e8:0a:7c:f2:65:61:e3:37:a1:07:77:c7:2e:d2:68:b3:
         42:10:c2:97:41:99:22:a3:cd:77:07:b6:da:17:64:80:d8:47:
         4d:1b:f8:f1:fc:73:7f:fe:16:25:e7:5c:cc:36:21:ab:f3:55:
         c1:ff:6f:1c:6a:c2:54:d9:19:fd:7c:46:61:8a:bc:18:1b:d0:
         68:be:84:03:24:6a:a7:78:db:ad:42:50:b4:5d:01:0d:61:e6:
         1c:be:df:f7:95:25:38:43:82:07:17:e7:4b:26:da:d5:c1:d7:
         80:bd:83:fa:ae:1a:73:cd:ae:ec:df:4b:3b:98:a5:a7:11:6f:
         5f:05:90:2a:8f:43:c8:78:d3:ce:81:29:94:ab:b2:2e:c6:e8:
         fe:7d:49:d5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwCN5AU0wO5xkiOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
YTk3NzBjZDgtOWVmZC00ZmRmLWJmNWUtOWFlOGMzOTNmNWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT52BRQRah6TUol6ojaluX7PgdxYcggixNBz
pwNysjUL/hTGicVYLAe6hrXTxW1seFHWkTlF69qZOD0fu7bsRkCuUJ1oO0OIF03s
xgUPGphLp9/Aop4u51VACkpspdyf22qUOljPe9knL2Zm2nukBwLx8TK6f5YDLeEF
0Nk24YBu1AS/rPRFby3pJs9l6QuSM/gAcDKDxCrmCBwExZLAEBJy3BTRscrSLm1I
q6d4nlT1efYhRJm8Q8oI1vOZu6bQKI7dWQMCfHu7YydtRpDkoIbATkFmbViH3R1d
4pnqMiVQQK/OBsnEldt5UXx8+Z4hIcsl+PSYSROUaJABTyKBeQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLda6gRqs8KdSERSqEubdZ4rAGOfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvMjAwZmM3ZjEtMjk2Yy0z
OTViLWFlMTItYzYyZmZhNjk3MDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfbwDAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGgeaS/MFI9W55FWFFNJ2jEGlvxrW9gSTepjWJhvMiMQIp04R9DU
y6sXsuTwHh9f3Egd6c+q/UsY2bTyeBWB+z6NP9RZ9HMGrPvpQVfedfYEJsfeVZQ8
iarXNlOgHSquHwgOU87J4HBF02cyHCIg6Ap88mVh4zehB3fHLtJos0IQwpdBmSKj
zXcHttoXZIDYR00b+PH8c3/+FiXnXMw2IavzVcH/bxxqwlTZGf18RmGKvBgb0Gi+
hAMkaqd4261CULRdAQ1h5hy+3/eVJThDggcX50sm2tXB14C9g/quGnPNruzfSzuY
pacRb18FkCqPQ8h4086BKZSrsi7G6P59SdU=
-----END CERTIFICATE-----
Generated at Wed May 13 14:32:07 2026 by rpki-client