Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/fd2bc698-ed35-3048-a5b2-88a08f7584a2.roa
File:                     fd2bc698-ed35-3048-a5b2-88a08f7584a2.roa (raw, json)
Hash identifier:          i1crUF9uBTiE2lemZpzLjE4Vyja7eRLPu/hkUkFmlN4=
Subject key identifier:   3A:42:5A:9B:9A:0A:A5:07:38:33:1E:FE:95:1D:C0:B3:7F:9E:3B:C8
Certificate issuer:       /CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
Certificate serial:       010D0C9F4328584D8EF97AC0AF84E11E2F0C7200
Authority key identifier: FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/fd2bc698-ed35-3048-a5b2-88a08f7584a2.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        2607:8d40:f40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:7a:c0:af:84:e1:1e:2f:0c:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=02c49d6c-05f5-4c3e-9368-0c0ae2ca1141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:06:cf:8b:0f:ef:dd:7d:50:55:40:36:c2:93:
                    29:f7:a7:91:68:05:ad:4f:c8:c7:a9:7a:86:df:81:
                    bc:bf:0b:ef:f8:17:76:21:83:0a:e9:ad:e2:1d:6d:
                    8e:8b:a9:5a:06:80:01:60:0f:aa:30:3a:ec:21:d9:
                    fe:b4:6c:3d:97:6b:9d:05:1b:c2:52:62:7a:45:18:
                    b6:16:b7:bd:5c:1c:a8:6c:ca:59:37:16:f2:1b:cb:
                    57:01:a3:57:61:0c:94:ab:ed:78:0b:01:cf:72:6f:
                    96:e2:a6:01:ed:81:ab:3e:5b:dd:aa:c7:6f:9a:f4:
                    95:b9:77:ac:d9:3d:70:89:de:de:6c:50:81:ae:3e:
                    56:0e:ad:d3:0e:25:27:b3:dd:0f:a6:16:a5:c0:05:
                    68:67:dd:3c:ab:64:9a:8c:a3:5b:20:81:97:6d:a4:
                    cf:06:cc:28:bc:8e:3f:b3:f9:b8:00:4e:92:db:ba:
                    90:17:9d:33:18:cd:ed:54:27:69:74:4c:50:07:15:
                    71:ac:95:a1:fb:70:72:39:97:23:2b:b3:44:66:48:
                    ac:cc:85:87:9d:1c:63:1c:cc:5e:1f:0a:b7:09:a3:
                    3f:dc:0b:fb:a9:96:02:30:e0:88:e7:d8:99:1b:b4:
                    ff:bb:54:3c:8e:eb:ac:b2:0a:6e:01:5e:7f:b0:b3:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:42:5A:9B:9A:0A:A5:07:38:33:1E:FE:95:1D:C0:B3:7F:9E:3B:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/fd2bc698-ed35-3048-a5b2-88a08f7584a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8d40:f40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:aa:ad:c8:be:f6:98:5d:92:8e:fe:f1:f0:ff:12:28:d0:ea:
         df:d3:91:c6:ae:f1:a3:4a:3c:34:3b:ce:ba:25:8c:fb:d7:d6:
         35:54:c2:03:2d:1b:dc:63:a9:a8:14:2d:e5:da:93:3c:02:25:
         84:de:50:58:74:96:79:53:8d:ea:18:2b:84:42:b4:ea:fe:fc:
         dc:a3:40:63:ac:22:d5:4a:38:e6:4c:2d:75:00:5f:46:c1:48:
         82:ca:8a:12:9d:5a:90:0f:29:23:b5:40:26:a8:b0:3d:20:58:
         d6:77:0e:10:67:2d:7f:a7:6d:66:b6:a0:0a:9c:59:f5:bd:d2:
         ad:d9:aa:bb:bc:bd:b9:db:12:b5:76:d1:18:55:ec:96:f0:91:
         45:d7:00:48:16:19:2b:fa:fc:3e:8d:de:4e:e6:47:ff:73:d9:
         c2:b8:c2:6e:5a:fa:92:e6:d4:6a:24:ee:28:d0:68:be:57:4f:
         35:1a:cc:4f:fe:e8:15:4c:ad:28:7c:d4:4d:4d:72:e9:37:96:
         e8:1c:8d:7a:c9:5d:e6:5e:fc:62:a9:72:a8:7d:bf:55:21:f1:
         a0:bd:bb:bc:77:c2:8c:24:2c:03:04:5e:c2:19:ef:64:32:92:
         30:95:38:13:cd:6d:57:1d:4c:93:03:4b:08:2a:d8:d8:87:20:
         05:2e:89:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2O+XrAr4ThHi8McgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRlMmQ1YWEtNTYwMC00ZTBjLTk1MjUtMjQxODdjMGVh
NjZiMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
MDJjNDlkNmMtMDVmNS00YzNlLTkzNjgtMGMwYWUyY2ExMTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngbPiw/v3X1QVUA2wpMp96eRaAWtT8jHqXqG
34G8vwvv+Bd2IYMK6a3iHW2Oi6laBoABYA+qMDrsIdn+tGw9l2udBRvCUmJ6RRi2
Fre9XByobMpZNxbyG8tXAaNXYQyUq+14CwHPcm+W4qYB7YGrPlvdqsdvmvSVuXes
2T1wid7ebFCBrj5WDq3TDiUns90PphalwAVoZ908q2SajKNbIIGXbaTPBswovI4/
s/m4AE6S27qQF50zGM3tVCdpdExQBxVxrJWh+3ByOZcjK7NEZkiszIWHnRxjHMxe
Hwq3CaM/3Av7qZYCMOCI59iZG7T/u1Q8juussgpuAV5/sLN6gwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDpCWpuaCqUHODMe/pUdwLN/njvIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZGUy
ZDVhYS01NjAwLTRlMGMtOTUyNS0yNDE4N2MwZWE2NmIvZmQyYmM2OTgtZWQzNS0z
MDQ4LWE1YjItODhhMDhmNzU4NGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWRlMmQ1YWEtNTYwMC00ZTBjLTk1
MjUtMjQxODdjMGVhNjZiL2FkZTJkNWFhLTU2MDAtNGUwYy05NTI1LTI0MTg3YzBl
YTY2Yi5jcmwwHwYDVR0jBBgwFoAU+59lZmjkjRtkcXXXPwUAuz7UHZcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZGUyZDVhYS01NjAwLTRlMGMtOTUyNS0yNDE4
N2MwZWE2NmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeNQA9A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJCqrci+9phdko7+8fD/EijQ6t/Tkcau8aNKPDQ7zroljPvX1jVU
wgMtG9xjqagULeXakzwCJYTeUFh0lnlTjeoYK4RCtOr+/NyjQGOsItVKOOZMLXUA
X0bBSILKihKdWpAPKSO1QCaosD0gWNZ3DhBnLX+nbWa2oAqcWfW90q3Zqru8vbnb
ErV20RhV7JbwkUXXAEgWGSv6/D6N3k7mR/9z2cK4wm5a+pLm1Gok7ijQaL5XTzUa
zE/+6BVMrSh81E1Ncuk3lugcjXrJXeZe/GKpcqh9v1Uh8aC9u7x3wowkLAMEXsIZ
72QykjCVOBPNbVcdTJMDSwgq2NiHIAUuiRQ=
-----END CERTIFICATE-----
Generated at Wed May 13 03:07:31 2026 by rpki-client