Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1ed7089c-e365-3674-9455-efb27e243354.roa
File:                     1ed7089c-e365-3674-9455-efb27e243354.roa (raw, json)
Hash identifier:          Ust2xHul/nwtjkYZCYkY6XAzpSc03HHWc58J5YXUqBU=
Subject key identifier:   2C:52:9B:A0:61:C1:B3:08:61:91:E6:16:8A:BE:BC:F5:46:B5:89:E7
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584DB4A5B0CD90CA4900CD5CC640
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1ed7089c-e365-3674-9455-efb27e243354.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     63023
IP address blocks:        2604:86c0:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:b0:cd:90:ca:49:00:cd:5c:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=1943b8af-c9e6-4c32-926c-3bcb92b47dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e6:4a:f8:6d:e6:a4:35:b4:f2:cd:16:d3:0d:
                    7f:ff:f3:b4:10:d4:bb:78:aa:91:7d:79:ef:5b:26:
                    33:d8:6a:24:bf:33:b9:7b:c5:0e:3d:78:0c:6d:e8:
                    33:ed:7e:b0:da:bf:e3:95:5b:94:0c:3c:b4:a6:d7:
                    09:a6:3b:1f:94:5b:32:a1:57:75:e1:73:76:97:5e:
                    cd:e7:db:70:98:93:66:45:17:fe:59:1d:ee:04:b6:
                    85:80:44:b5:fc:28:88:9f:9c:28:c7:a9:e7:a2:7a:
                    c3:15:6a:64:33:77:df:b8:96:95:25:d5:c1:1f:a6:
                    3b:fa:b6:a0:57:80:00:a8:9e:84:a1:43:2c:88:c4:
                    8a:d4:9f:ee:ca:8d:fd:8c:69:41:76:74:b8:4a:22:
                    18:66:26:cf:a2:49:b9:d7:d3:e8:2f:0b:79:27:95:
                    4c:b0:88:3f:8c:50:9c:b9:ae:91:97:0f:31:71:b9:
                    cc:a6:9f:a9:db:d5:97:21:c7:21:98:ee:67:75:04:
                    13:7b:fe:98:5f:7a:5d:98:ba:04:1d:7d:09:dd:aa:
                    76:d9:82:d5:1a:c1:ab:67:ff:5b:74:17:21:e1:76:
                    48:31:93:34:2d:6c:91:ce:1a:92:3d:89:e5:a5:8f:
                    db:b0:0b:aa:10:5b:27:a6:20:2e:96:de:b5:d1:25:
                    5e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:52:9B:A0:61:C1:B3:08:61:91:E6:16:8A:BE:BC:F5:46:B5:89:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1ed7089c-e365-3674-9455-efb27e243354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:86c0:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:0f:d1:3a:f8:f2:2d:16:8a:a8:56:cb:94:3b:6a:81:1a:66:
         ff:ec:1b:d2:5f:fc:f3:b0:9a:0a:eb:6a:5a:dc:cf:91:17:60:
         2e:ee:71:fd:6d:03:40:c3:bc:cd:95:48:c1:15:e2:f0:ea:5a:
         99:18:7c:0e:75:b6:e7:91:7e:74:9b:5f:39:ca:ee:fd:2e:99:
         75:f2:9f:10:35:04:1e:eb:76:0e:73:2d:0d:8a:73:36:d2:3b:
         ab:76:fa:3f:5d:a6:e3:0d:29:66:3f:1e:d7:b5:54:52:f7:ab:
         2f:69:6c:79:df:5a:3c:0f:7f:18:a0:7c:8d:5a:09:fb:3f:98:
         b7:d9:c0:ae:3f:19:5b:82:0f:7b:cd:43:be:eb:8d:d4:10:b8:
         58:d8:74:9e:39:d9:c7:03:fd:e8:b7:41:7a:3f:d2:b7:75:97:
         b2:7c:7b:bc:80:ca:de:e4:d3:78:2d:ee:0b:fb:99:eb:2b:b2:
         98:c2:cb:3e:cb:91:eb:60:68:b4:8e:24:85:e3:1b:94:6a:68:
         d9:f1:36:86:de:47:2e:09:22:65:ed:2f:2d:d5:a9:c3:af:7e:
         dc:85:80:1b:ee:a2:cc:55:52:6e:c4:a2:48:a1:75:2e:45:3b:
         b0:48:ce:cb:ae:e9:b8:92:ec:71:8c:df:b3:61:d1:c0:2d:19:
         10:58:ca:91
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE20pbDNkMpJAM1cxkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz
OWUwMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
MTk0M2I4YWYtYzllNi00YzMyLTkyNmMtM2JjYjkyYjQ3ZGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieZK+G3mpDW08s0W0w1///O0ENS7eKqRfXnv
WyYz2GokvzO5e8UOPXgMbegz7X6w2r/jlVuUDDy0ptcJpjsflFsyoVd14XN2l17N
59twmJNmRRf+WR3uBLaFgES1/CiIn5wox6nnonrDFWpkM3ffuJaVJdXBH6Y7+rag
V4AAqJ6EoUMsiMSK1J/uyo39jGlBdnS4SiIYZibPokm519PoLwt5J5VMsIg/jFCc
ua6Rlw8xcbnMpp+p29WXIcchmO5ndQQTe/6YX3pdmLoEHX0J3ap22YLVGsGrZ/9b
dBch4XZIMZM0LWyRzhqSPYnlpY/bsAuqEFsnpiAult610SVe8wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCxSm6BhwbMIYZHmFoq+vPVGtYnnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk
ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMWVkNzA4OWMtZTM2NS0z
Njc0LTk0NTUtZWZiMjdlMjQzMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk
ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh
MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5
NDg5YTM5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgSGwIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdA/ROvjyLRaKqFbLlDtqgRpm/+wb0l/887CaCutqWtzPkRdgLu5x
/W0DQMO8zZVIwRXi8OpamRh8DnW255F+dJtfOcru/S6ZdfKfEDUEHut2DnMtDYpz
NtI7q3b6P12m4w0pZj8e17VUUverL2lsed9aPA9/GKB8jVoJ+z+Yt9nArj8ZW4IP
e81DvuuN1BC4WNh0njnZxwP96LdBej/St3WXsnx7vIDK3uTTeC3uC/uZ6yuymMLL
PsuR62BotI4kheMblGpo2fE2ht5HLgkiZe0vLdWpw69+3IWAG+6izFVSbsSiSKF1
LkU7sEjOy67puJLscYzfs2HRwC0ZEFjKkQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:11:56 2026 by rpki-client