Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381/fff2c1ac-357b-340d-84b5-3e5ff9e533e8.roa
File:                     fff2c1ac-357b-340d-84b5-3e5ff9e533e8.roa (raw, json)
Hash identifier:          R15Wl2c1bJ+O937oiWlvp4giOCSSqdTzkkVHanSVsnw=
Subject key identifier:   85:EC:87:53:A7:19:75:16:B1:7F:99:97:2D:33:DA:63:DF:5B:EE:02
Certificate issuer:       /CN=d499a688-e2cb-43b1-9984-b7b259cd7381
Certificate serial:       010D0C9F4328584D9298E14CC38F97A7C21C4600
Authority key identifier: D8:1E:E1:7B:9F:D5:51:90:BE:91:72:87:95:81:CE:6C:53:5B:E7:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381/fff2c1ac-357b-340d-84b5-3e5ff9e533e8.roa
Signing time:             Mon 20 Apr 2026 20:17:38 +0000
ROA not before:           Mon 20 Apr 2026 20:17:38 +0000
ROA not after:            Sun 19 Jul 2026 20:17:38 +0000
asID:                     394227
IP address blocks:        2607:e8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381/d499a688-e2cb-43b1-9984-b7b259cd7381.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381/d499a688-e2cb-43b1-9984-b7b259cd7381.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:92:98:e1:4c:c3:8f:97:a7:c2:1c:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d499a688-e2cb-43b1-9984-b7b259cd7381
        Validity
            Not Before: Apr 20 20:17:38 2026 GMT
            Not After : Jul 19 20:17:38 2026 GMT
        Subject: CN=bd4610c3-c63c-4f75-957b-e7429ab1bad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ad:3b:dc:48:eb:26:a0:17:25:8a:69:80:13:
                    8a:92:36:9c:4a:08:02:f4:07:55:ac:fb:b7:4b:a3:
                    d8:57:8d:91:99:c0:27:90:bc:ef:d8:c9:0e:6a:c6:
                    d6:3b:11:02:a6:72:e3:9c:f8:ca:c4:8d:93:e8:5e:
                    36:0c:a2:df:ae:ab:ce:db:6d:68:9c:18:f9:66:2a:
                    c6:2d:8a:26:ba:06:29:2f:e5:17:e0:9d:28:75:e1:
                    17:e2:34:5b:a1:a0:26:6b:cd:db:98:06:23:d1:88:
                    2f:b2:1d:aa:6a:65:24:05:7d:69:d3:e8:66:ae:8b:
                    10:68:cc:67:c9:4f:c8:7d:d9:20:b4:03:8d:ea:58:
                    09:01:d5:cc:ed:d2:ca:89:9b:d7:95:d3:59:d6:18:
                    7e:b0:03:bc:93:99:aa:1d:90:0e:bb:df:4d:a3:60:
                    ed:6c:df:29:13:6a:94:a8:cf:88:76:17:06:f1:c0:
                    3d:e4:15:8d:91:e1:2c:b2:17:04:2b:41:88:c4:db:
                    03:a3:36:5d:75:a4:f6:97:cb:03:3f:60:c5:02:08:
                    e0:8d:2b:47:cf:be:24:0a:68:36:bc:c3:29:2a:ff:
                    f8:68:0e:44:b8:00:6a:18:38:75:b4:7a:83:e6:e9:
                    77:cb:04:54:09:41:c9:6a:73:af:16:10:5a:6a:d9:
                    07:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EC:87:53:A7:19:75:16:B1:7F:99:97:2D:33:DA:63:DF:5B:EE:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381/fff2c1ac-357b-340d-84b5-3e5ff9e533e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381/d499a688-e2cb-43b1-9984-b7b259cd7381.crl

            X509v3 Authority Key Identifier:
                keyid:D8:1E:E1:7B:9F:D5:51:90:BE:91:72:87:95:81:CE:6C:53:5B:E7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e8c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4e:93:35:c5:90:79:b7:bc:57:85:93:cb:63:5e:89:1a:2e:
         c1:a7:bf:9e:49:fc:ee:f5:69:cd:1b:c7:48:1e:dd:18:a3:4a:
         6a:0d:da:ec:77:ce:f7:7f:9e:8d:30:4f:a9:61:fa:d9:7a:33:
         9b:64:40:4e:3f:00:ad:9c:b9:cc:c3:e1:69:8b:21:9b:e8:ec:
         ff:8e:21:0b:4d:a8:b8:10:c0:04:26:db:55:cf:25:d4:85:8a:
         93:fc:32:bd:f7:a0:ef:d2:1e:73:6d:76:aa:32:ea:4f:af:75:
         96:f1:24:69:2c:3a:e2:9b:c7:df:42:cc:07:6f:17:35:a6:94:
         6f:3c:69:c7:d9:b0:91:51:ec:8c:a8:25:f0:fe:1b:1d:f2:72:
         6e:53:13:45:d4:52:62:36:94:75:64:8e:8b:75:16:e0:fb:98:
         f3:ad:82:f4:01:1e:78:83:c4:f5:17:66:c8:3c:d4:23:8b:94:
         11:6b:98:46:11:de:a8:5a:7e:73:55:37:ac:2e:cc:86:cb:50:
         6e:e7:a9:5a:2d:9d:17:ba:8c:97:ae:d4:2b:e8:76:fb:0a:9e:
         a6:67:6a:18:63:27:de:5d:ae:ab:54:e9:7b:bd:27:a5:9a:57:
         1c:d7:fb:44:18:a2:39:9c:f6:bf:15:6f:7b:0c:09:e4:d3:4d:
         cb:cc:8d:03
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2SmOFMw4+Xp8IcRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ5OWE2ODgtZTJjYi00M2IxLTk5ODQtYjdiMjU5Y2Q3
MzgxMB4XDTI2MDQyMDIwMTczOFoXDTI2MDcxOTIwMTczOFowLzEtMCsGA1UEAxMk
YmQ0NjEwYzMtYzYzYy00Zjc1LTk1N2ItZTc0MjlhYjFiYWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a073EjrJqAXJYppgBOKkjacSggC9AdVrPu3
S6PYV42RmcAnkLzv2MkOasbWOxECpnLjnPjKxI2T6F42DKLfrqvO221onBj5ZirG
LYomugYpL+UX4J0odeEX4jRboaAma83bmAYj0Ygvsh2qamUkBX1p0+hmrosQaMxn
yU/IfdkgtAON6lgJAdXM7dLKiZvXldNZ1hh+sAO8k5mqHZAOu99No2DtbN8pE2qU
qM+IdhcG8cA95BWNkeEsshcEK0GIxNsDozZddaT2l8sDP2DFAgjgjStHz74kCmg2
vMMpKv/4aA5EuABqGDh1tHqD5ul3ywRUCUHJanOvFhBaatkHxwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIXsh1OnGXUWsX+Zly0z2mPfW+4CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNDk5
YTY4OC1lMmNiLTQzYjEtOTk4NC1iN2IyNTljZDczODEvZmZmMmMxYWMtMzU3Yi0z
NDBkLTg0YjUtM2U1ZmY5ZTUzM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDQ5OWE2ODgtZTJjYi00M2IxLTk5
ODQtYjdiMjU5Y2Q3MzgxL2Q0OTlhNjg4LWUyY2ItNDNiMS05OTg0LWI3YjI1OWNk
NzM4MS5jcmwwHwYDVR0jBBgwFoAU2B7he5/VUZC+kXKHlYHObFNb51YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kNDk5YTY4OC1lMmNiLTQzYjEtOTk4NC1iN2Iy
NTljZDczODEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfowDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAYTpM1xZB5t7xXhZPLY16JGi7Bp7+eSfzu9WnNG8dIHt0Yo0pqDdrs
d873f56NME+pYfrZejObZEBOPwCtnLnMw+FpiyGb6Oz/jiELTai4EMAEJttVzyXU
hYqT/DK996Dv0h5zbXaqMupPr3WW8SRpLDrim8ffQswHbxc1ppRvPGnH2bCRUeyM
qCXw/hsd8nJuUxNF1FJiNpR1ZI6LdRbg+5jzrYL0AR54g8T1F2bIPNQji5QRa5hG
Ed6oWn5zVTesLsyGy1Bu56laLZ0XuoyXrtQr6Hb7Cp6mZ2oYYyfeXa6rVOl7vSel
mlcc1/tEGKI5nPa/FW97DAnk003LzI0D
-----END CERTIFICATE-----
Generated at Wed May 13 04:20:23 2026 by rpki-client