Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa
File:                     1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa (raw, json)
Hash identifier:          LNK81xrpU5dMfRyDQxRmctfLUftRcKMT+OqJBHeA9Dc=
Subject key identifier:   E7:96:BA:71:B0:98:35:70:86:55:D5:C2:15:F9:75:98:C2:1D:55:EE
Certificate issuer:       /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Certificate serial:       010D0C9F4328584DB34029B9E2870E38E3FCD000
Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa
Signing time:             Sat 02 May 2026 13:00:31 +0000
ROA not before:           Sat 02 May 2026 13:00:31 +0000
ROA not after:            Fri 31 Jul 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        2602:faca:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:40:29:b9:e2:87:0e:38:e3:fc:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
        Validity
            Not Before: May  2 13:00:31 2026 GMT
            Not After : Jul 31 13:00:31 2026 GMT
        Subject: CN=fecd8d4c-e318-4f3b-a93b-32a21f20fd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:32:1c:ff:17:6d:a3:f3:20:69:97:3c:25:
                    a2:f6:82:81:2b:49:46:5f:55:3b:cb:9b:00:03:34:
                    73:64:36:3c:a1:c9:cd:23:6e:59:31:3f:c3:09:b3:
                    71:96:db:56:cb:68:c6:d3:df:8a:d3:47:fc:a0:2e:
                    b8:b6:c5:b4:5d:67:5c:be:6c:03:99:c7:0c:e9:f0:
                    9d:17:73:51:58:a4:bf:38:9c:44:2e:64:d2:3b:77:
                    48:20:49:d6:8c:be:0f:82:57:ba:1e:16:f4:e1:3e:
                    4b:e0:64:c8:4e:2e:89:ab:82:46:37:e5:2f:f6:f4:
                    37:b9:bd:70:88:34:62:f9:20:6f:66:74:6f:5b:28:
                    92:c7:1b:2a:30:42:c2:5c:80:0a:50:60:b4:a1:d4:
                    8e:26:8c:0f:7a:c5:d5:f2:35:60:19:12:c5:79:7f:
                    ec:50:58:f2:8a:59:68:9e:09:4b:73:94:d1:b6:2d:
                    29:39:88:68:33:08:23:b7:2d:64:96:72:7d:f3:cd:
                    83:ad:47:fd:a3:4d:6f:20:28:64:51:30:bb:36:a1:
                    c5:8e:6a:b7:f7:7d:c5:aa:f3:26:6d:88:c4:cf:5f:
                    08:e8:92:a6:16:44:a9:30:d3:26:91:9d:ee:b3:d2:
                    e9:e7:85:80:d2:a0:4f:54:4e:ff:ff:b7:d7:78:bb:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:96:BA:71:B0:98:35:70:86:55:D5:C2:15:F9:75:98:C2:1D:55:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl

            X509v3 Authority Key Identifier:
                keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faca:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:fc:1b:b5:36:9e:53:4b:b9:e7:4b:a1:bf:ac:34:64:ec:16:
         64:a4:3b:ed:4b:d7:c3:0b:f4:89:8c:9f:e2:9c:e1:d1:a4:5a:
         5c:ce:9f:d2:10:32:ac:05:a7:c6:dd:87:95:18:db:22:71:94:
         8c:70:67:72:87:5c:60:36:6e:94:cb:14:1d:77:fa:70:42:61:
         f1:cd:91:f1:f2:2a:22:7c:e4:f1:94:8d:22:a6:a0:ad:fe:2e:
         ec:38:6e:75:5a:a5:70:34:3d:8c:86:4b:35:76:9f:5d:82:24:
         b2:51:40:1a:cd:a3:6e:d2:cd:6b:ba:f7:57:fb:f8:34:ef:f0:
         bb:44:51:86:b6:33:82:ad:b2:0e:6d:2e:67:5d:c4:45:72:5c:
         0f:6e:14:0f:92:e3:28:6e:a7:63:c4:22:62:2a:a8:bc:b7:1e:
         79:05:8a:87:1b:55:8a:6d:5b:8b:0e:0d:98:0f:bd:97:cf:26:
         c6:37:b8:45:ad:6f:56:ab:dd:4d:b9:ee:c9:65:81:96:5f:66:
         aa:a9:57:2e:2b:be:e9:1f:1d:f6:79:b9:19:07:28:a8:8b:36:
         bb:0c:15:65:5b:03:59:67:d6:d4:85:c5:ba:b3:7f:43:ef:11:
         cc:1d:d8:29:29:b8:e3:6a:59:fb:f6:c5:79:22:9a:3d:6f:06:
         1a:f0:14:51
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2zQCm54ocOOOP80AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0
OWY4MB4XDTI2MDUwMjEzMDAzMVoXDTI2MDczMTEzMDAzMVowLzEtMCsGA1UEAxMk
ZmVjZDhkNGMtZTMxOC00ZjNiLWE5M2ItMzJhMjFmMjBmZDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVoyHP8XbaPzIGmXPCWi9oKBK0lGX1U7y5sA
AzRzZDY8ocnNI25ZMT/DCbNxlttWy2jG09+K00f8oC64tsW0XWdcvmwDmccM6fCd
F3NRWKS/OJxELmTSO3dIIEnWjL4Pgle6Hhb04T5L4GTITi6Jq4JGN+Uv9vQ3ub1w
iDRi+SBvZnRvWyiSxxsqMELCXIAKUGC0odSOJowPesXV8jVgGRLFeX/sUFjyillo
nglLc5TRti0pOYhoMwgjty1klnJ9882DrUf9o01vIChkUTC7NqHFjmq3933FqvMm
bYjEz18I6JKmFkSpMNMmkZ3us9Lp54WA0qBPVE7//7fXeLv/3wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOeWunGwmDVwhlXVwhX5dZjCHVXuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz
M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvMWRiNTlhZGYtMWMzZi0z
MDVkLWJhMTEtN2NmZDAxZmMyNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw
OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh
NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4
NjM0YTQ5ZjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6ygEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHP8G7U2nlNLuedLob+sNGTsFmSkO+1L18ML9ImMn+Kc4dGkWlzO
n9IQMqwFp8bdh5UY2yJxlIxwZ3KHXGA2bpTLFB13+nBCYfHNkfHyKiJ85PGUjSKm
oK3+Luw4bnVapXA0PYyGSzV2n12CJLJRQBrNo27SzWu691f7+DTv8LtEUYa2M4Kt
sg5tLmddxEVyXA9uFA+S4yhup2PEImIqqLy3HnkFiocbVYptW4sODZgPvZfPJsY3
uEWtb1ar3U257sllgZZfZqqpVy4rvukfHfZ5uRkHKKiLNrsMFWVbA1ln1tSFxbqz
f0PvEcwd2CkpuONqWfv2xXkimj1vBhrwFFE=
-----END CERTIFICATE-----
Generated at Wed May 13 04:46:09 2026 by rpki-client