Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/1c66c136-216a-334e-9397-93f9ed1f75ca.roa
File:                     1c66c136-216a-334e-9397-93f9ed1f75ca.roa (raw, json)
Hash identifier:          ysKR3/wDM8j738J4Te3ay9VlYOnXvQ0ss5jfTRIl2gk=
Subject key identifier:   F4:7E:6F:E4:9E:60:E4:F1:32:C5:8B:1B:E1:C5:9E:8E:02:3D:D5:75
Certificate issuer:       /CN=31d2846b-36c4-41a9-86c2-a98e92bef162
Certificate serial:       010D0C9F4328584DC29AFC6F12C4AE86A2C89700
Authority key identifier: D1:1B:C7:AF:55:55:C9:0C:20:32:FC:68:AF:8F:AB:49:8E:5A:81:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/1c66c136-216a-334e-9397-93f9ed1f75ca.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     398757
IP address blocks:        2620:0:630::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:fc:6f:12:c4:ae:86:a2:c8:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d2846b-36c4-41a9-86c2-a98e92bef162
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=037b5d1d-0602-432f-8ffc-0842d7ae7413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e0:03:58:6b:b8:8b:ee:42:fb:73:83:b9:50:
                    e4:30:b5:a0:20:65:1f:97:dc:c8:a8:d7:9e:e0:65:
                    bc:68:17:31:e9:85:b2:1b:d2:bb:45:3f:ba:a3:71:
                    ad:02:f6:40:8b:30:05:fc:c8:3f:7d:44:d5:8d:6e:
                    0d:fd:c1:9e:a4:cb:d3:40:c5:d3:56:01:42:e8:ab:
                    95:74:75:bf:8e:ae:d2:00:44:61:15:9e:34:e7:a5:
                    67:88:0c:a1:13:bd:7a:8e:20:0a:f8:1a:ce:5e:c6:
                    63:fc:e3:d5:c7:bd:b3:fc:50:99:ab:af:85:ac:89:
                    cd:75:b8:34:23:36:b0:fc:01:70:5c:90:e1:56:d0:
                    89:c6:ba:05:6d:5e:bc:02:a3:10:ad:e0:e8:9a:ba:
                    de:a8:b2:44:b2:1a:59:4f:47:46:51:c6:52:b7:11:
                    0e:cb:e3:43:be:6f:19:ba:79:8a:57:b9:50:52:cb:
                    54:21:b7:f9:0a:5e:73:61:b2:03:60:fa:75:69:9a:
                    36:27:05:93:8f:1f:fc:c8:61:10:99:b7:57:b6:16:
                    38:c0:d2:a6:63:91:c6:06:18:65:bf:8d:22:2b:70:
                    0a:3f:d8:be:d3:c9:8e:6c:66:e8:6e:d5:3e:01:ea:
                    d9:49:52:41:c9:96:25:73:a1:ef:43:da:0b:5c:fb:
                    97:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7E:6F:E4:9E:60:E4:F1:32:C5:8B:1B:E1:C5:9E:8E:02:3D:D5:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/1c66c136-216a-334e-9397-93f9ed1f75ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.crl

            X509v3 Authority Key Identifier:
                keyid:D1:1B:C7:AF:55:55:C9:0C:20:32:FC:68:AF:8F:AB:49:8E:5A:81:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:630::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:eb:69:cc:c8:43:52:cd:4f:74:74:35:c3:36:3c:7b:8a:23:
         a0:c9:e5:bb:79:a4:11:0d:fe:72:b5:c4:d4:7a:2c:5d:bb:1c:
         d6:94:1f:6d:23:4d:cc:44:f6:27:1b:58:f6:db:b6:95:5f:2f:
         d8:05:31:e5:e7:1e:40:35:88:29:4b:8a:da:0c:fe:5a:55:e9:
         3e:32:a5:f8:c3:da:35:a9:15:91:2f:ba:f5:b5:c3:fb:89:8f:
         1d:f3:e0:a1:6e:68:c8:3a:47:b5:8b:45:c2:14:7c:a6:1b:ce:
         5b:63:bb:d6:34:a2:4a:40:25:87:ab:db:84:38:a0:be:26:04:
         69:26:6c:89:0a:8c:ee:0e:bb:15:b5:04:74:45:80:13:61:91:
         07:14:ee:20:bf:84:98:34:65:6e:a0:c5:bc:f9:d3:0d:66:89:
         27:40:e8:4a:10:3b:21:bb:82:fa:77:e4:ff:dd:d4:0b:1e:97:
         19:b0:51:ad:72:0a:81:f5:be:3f:7b:7e:46:88:a3:bf:07:1a:
         84:d7:21:be:e6:2f:cd:b0:f9:3a:b1:b9:e0:8d:f6:47:31:c7:
         6c:3a:e4:88:30:5b:51:04:30:6f:5a:2c:5e:5f:0a:b1:dc:42:
         05:56:dd:cb:d4:81:aa:02:5c:a1:d7:4c:8c:2a:c0:fa:d6:ff:
         03:b2:7d:7c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3CmvxvEsSuhqLIlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFkMjg0NmItMzZjNC00MWE5LTg2YzItYTk4ZTkyYmVm
MTYyMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk
MDM3YjVkMWQtMDYwMi00MzJmLThmZmMtMDg0MmQ3YWU3NDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeADWGu4i+5C+3ODuVDkMLWgIGUfl9zIqNee
4GW8aBcx6YWyG9K7RT+6o3GtAvZAizAF/Mg/fUTVjW4N/cGepMvTQMXTVgFC6KuV
dHW/jq7SAERhFZ4056VniAyhE716jiAK+BrOXsZj/OPVx72z/FCZq6+FrInNdbg0
Izaw/AFwXJDhVtCJxroFbV68AqMQreDomrreqLJEshpZT0dGUcZStxEOy+NDvm8Z
unmKV7lQUstUIbf5Cl5zYbIDYPp1aZo2JwWTjx/8yGEQmbdXthY4wNKmY5HGBhhl
v40iK3AKP9i+08mObGbobtU+AerZSVJByZYlc6HvQ9oLXPuXOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPR+b+SeYOTxMsWLG+HFno4CPdV1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMWQy
ODQ2Yi0zNmM0LTQxYTktODZjMi1hOThlOTJiZWYxNjIvMWM2NmMxMzYtMjE2YS0z
MzRlLTkzOTctOTNmOWVkMWY3NWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzFkMjg0NmItMzZjNC00MWE5LTg2
YzItYTk4ZTkyYmVmMTYyLzMxZDI4NDZiLTM2YzQtNDFhOS04NmMyLWE5OGU5MmJl
ZjE2Mi5jcmwwHwYDVR0jBBgwFoAU0RvHr1VVyQwgMvxor4+rSY5agXEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMWQyODQ2Yi0zNmM0LTQxYTktODZjMi1hOThl
OTJiZWYxNjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAYw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBANTraczIQ1LNT3R0NcM2PHuKI6DJ5bt5pBEN/nK1xNR6LF27HNaU
H20jTcxE9icbWPbbtpVfL9gFMeXnHkA1iClLitoM/lpV6T4ypfjD2jWpFZEvuvW1
w/uJjx3z4KFuaMg6R7WLRcIUfKYbzltju9Y0okpAJYer24Q4oL4mBGkmbIkKjO4O
uxW1BHRFgBNhkQcU7iC/hJg0ZW6gxbz50w1miSdA6EoQOyG7gvp35P/d1Aselxmw
Ua1yCoH1vj97fkaIo78HGoTXIb7mL82w+TqxueCN9kcxx2w65IgwW1EEMG9aLF5f
CrHcQgVW3cvUgaoCXKHXTIwqwPrW/wOyfXw=
-----END CERTIFICATE-----
Generated at Wed May 13 14:39:17 2026 by rpki-client