Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa
File:                     ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa (raw, json)
Hash identifier:          yul+qOE92kA5J4YKcZqmtUjtUFyURwb2TarwNpRdU28=
Subject key identifier:   8C:91:41:7B:F5:0F:EE:00:6B:4E:EE:12:8F:A0:41:15:DC:54:D8:50
Certificate issuer:       /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Certificate serial:       010D0C9F4328584DB1DAD08CCBE1E5A9D5550240
Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     10911
IP address blocks:        2600:c00:2:3::/64 maxlen: 64
                          2600:c00:1002::/64 maxlen: 64
                          2600:c00:1002:3::/64 maxlen: 64
                          2600:c00:1002:4::/64 maxlen: 64
                          2600:c02:b002:12::/64 maxlen: 64
                          2600:c02:b002:13::/64 maxlen: 64
                          2600:c04:e002:2::/64 maxlen: 64
                          2600:c05:3002:5::/64 maxlen: 64
                          2600:c05:3002:6::/64 maxlen: 64
                          2600:c0e:1002::/64 maxlen: 64
                          2600:c0e:7002:b::/64 maxlen: 64
                          2600:c12:6002:e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:d0:8c:cb:e1:e5:a9:d5:55:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=53267897-bbd7-4ad0-9665-f8be4eefe8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:00:1d:4f:85:12:01:1f:96:de:4f:29:4a:95:
                    c0:8c:82:35:dc:87:2a:77:d8:f7:68:b7:39:bc:f3:
                    41:e8:c8:bd:c1:77:c5:31:bf:15:06:23:b0:00:a4:
                    8a:96:d0:8e:24:9d:ce:cf:5d:fd:68:27:40:c7:d3:
                    65:ef:fd:48:eb:fc:20:25:b6:4d:45:a0:c8:9b:c5:
                    b7:e8:73:36:57:c9:6e:b5:c8:84:57:0c:92:cd:7e:
                    5b:d7:d6:00:76:61:55:9d:19:60:2a:4a:ff:6f:17:
                    1c:00:b3:14:2f:79:5e:d8:22:46:db:1d:dc:f7:09:
                    47:f9:f5:bb:f6:5a:18:cb:36:c4:95:fe:55:d4:70:
                    5b:de:1e:42:d6:53:90:b6:2e:1b:50:0b:12:23:b4:
                    1d:01:6e:ea:8b:1a:f1:4e:a7:5d:46:50:0e:b0:c7:
                    49:3a:21:dc:a1:c5:c6:e2:e7:09:5c:6e:63:cd:26:
                    ff:25:08:0c:06:c7:f3:83:2a:0a:3e:10:aa:c5:7a:
                    84:b3:cf:d6:a6:6b:a9:32:c9:ad:68:d5:4e:74:79:
                    18:3f:b2:e7:92:95:62:93:f0:b0:1a:a8:84:e1:fd:
                    c9:21:34:c6:e2:5f:b7:78:a3:7d:44:f0:a0:38:25:
                    8e:6b:a0:54:a1:6f:ce:b2:d8:78:d2:15:e2:b1:a4:
                    df:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:91:41:7B:F5:0F:EE:00:6B:4E:EE:12:8F:A0:41:15:DC:54:D8:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:c00:2:3::/64
                  2600:c00:1002::/64
                  2600:c00:1002:3::-2600:c00:1002:4:ffff:ffff:ffff:ffff
                  2600:c02:b002:12::/63
                  2600:c04:e002:2::/64
                  2600:c05:3002:5::-2600:c05:3002:6:ffff:ffff:ffff:ffff
                  2600:c0e:1002::/64
                  2600:c0e:7002:b::/64
                  2600:c12:6002:e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:4e:e6:bb:29:c7:35:45:31:24:f6:e6:fa:de:37:d2:44:90:
         82:fe:99:a5:77:99:b8:b4:38:49:5c:4f:b1:c8:81:18:03:0f:
         96:02:1b:97:d5:1a:66:ec:86:2a:8a:df:f9:75:02:df:d0:7b:
         66:4e:44:71:25:17:b3:bc:f0:52:f7:fa:7c:2f:fb:a0:67:76:
         ed:cf:70:6e:ef:1c:eb:da:cc:c5:7e:87:63:e9:60:4f:9b:ef:
         08:d2:f4:49:f8:17:85:16:11:c9:90:70:d7:5e:6c:34:73:1b:
         fb:0b:70:7a:82:39:1f:50:37:59:1c:30:96:8d:c8:fa:0c:9e:
         53:7a:f8:14:f1:9c:60:37:b7:1e:11:d7:61:23:bd:08:f7:77:
         42:cd:a1:db:aa:74:ba:7e:97:b4:1d:8c:c0:68:53:b8:27:f5:
         3c:74:62:01:61:d5:9f:9f:c5:71:b9:45:68:44:3b:a1:55:7f:
         d7:6a:f1:c9:f5:3a:8e:01:ea:e0:33:d7:0d:36:43:11:e8:9d:
         65:dd:3a:cc:cf:4f:c2:36:bf:22:81:06:34:14:96:c8:56:78:
         8f:5a:d5:11:a0:1a:bf:91:2b:38:fb:30:d9:5c:91:c0:86:91:
         33:0c:65:1a:fb:2e:87:fc:f1:19:56:f9:be:e5:74:03:0b:d7:
         1f:01:61:92
-----BEGIN CERTIFICATE-----
MIIGvjCCBaagAwIBAgIUAQ0Mn0MoWE2x2tCMy+HlqdVVAkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFlNDY1YzAtMmExMC00OTVhLWI3ZDItMmFhMDQ4YjI4
NmEwMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk
NTMyNjc4OTctYmJkNy00YWQwLTk2NjUtZjhiZTRlZWZlOGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAAdT4USAR+W3k8pSpXAjII13Icqd9j3aLc5
vPNB6Mi9wXfFMb8VBiOwAKSKltCOJJ3Oz139aCdAx9Nl7/1I6/wgJbZNRaDIm8W3
6HM2V8lutciEVwySzX5b19YAdmFVnRlgKkr/bxccALMUL3le2CJG2x3c9wlH+fW7
9loYyzbElf5V1HBb3h5C1lOQti4bUAsSI7QdAW7qixrxTqddRlAOsMdJOiHcocXG
4ucJXG5jzSb/JQgMBsfzgyoKPhCqxXqEs8/WpmupMsmtaNVOdHkYP7LnkpVik/Cw
GqiE4f3JITTG4l+3eKN9RPCgOCWOa6BUoW/Osth40hXisaTfSQIDAQABo4ID0DCC
A8wwHQYDVR0OBBYEFIyRQXv1D+4Aa07uEo+gQRXcVNhQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0
NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEwNDhiMjg2YTAvZGRmOGUwMGQtMDVhZC0z
NGVhLTgxMDgtY2E3MWU3NGQ0ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFlNDY1YzAtMmExMC00OTVhLWI3
ZDItMmFhMDQ4YjI4NmEwL2FhZTQ2NWMwLTJhMTAtNDk1YS1iN2QyLTJhYTA0OGIy
ODZhMC5jcmwwHwYDVR0jBBgwFoAUqvGlGuuoqNwlLVt4tOGaGNmKjyQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEw
NDhiMjg2YTAuY2VyMIGZBggrBgEFBQcBBwEB/wSBiTCBhjCBgwQCAAIwfQMJACYA
DAAAAgADAwkAJgAMABACAAAwFgMJACYADAAQAgADAwkAJgAMABACAAQDCQEmAAwC
sAIAEgMJACYADATgAgACMBYDCQAmAAwFMAIABQMJACYADAUwAgAGAwkAJgAMDhAC
AAADCQAmAAwOcAIACwMJACYADBJgAgAOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC9O5rspxzVFMST25vre
N9JEkIL+maV3mbi0OElcT7HIgRgDD5YCG5fVGmbshiqK3/l1At/Qe2ZORHElF7O8
8FL3+nwv+6Bndu3PcG7vHOvazMV+h2PpYE+b7wjS9En4F4UWEcmQcNdebDRzG/sL
cHqCOR9QN1kcMJaNyPoMnlN6+BTxnGA3tx4R12EjvQj3d0LNoduqdLp+l7QdjMBo
U7gn9Tx0YgFh1Z+fxXG5RWhEO6FVf9dq8cn1Oo4B6uAz1w02QxHonWXdOszPT8I2
vyKBBjQUlshWeI9a1RGgGr+RKzj7MNlckcCGkTMMZRr7Lof88RlW+b7ldAML1x8B
YZI=
-----END CERTIFICATE-----
Generated at Wed May 13 07:31:12 2026 by rpki-client