Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/3feeeaca-68cc-366d-8054-94f196ab0dc2.roa
File:                     3feeeaca-68cc-366d-8054-94f196ab0dc2.roa (raw, json)
Hash identifier:          EMm20KHYxYyrhdPvFthZyo8YMfneKHXoZuPl1WiVUv0=
Subject key identifier:   98:9C:66:47:FF:67:3A:9F:FC:34:44:D8:A5:87:96:10:96:A3:26:1B
Certificate issuer:       /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
Certificate serial:       010D0C9F4328584E1E449EA904651B5D723A8ED0
Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/3feeeaca-68cc-366d-8054-94f196ab0dc2.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     29888
IP address blocks:        2620:109:3000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:9e:a9:04:65:1b:5d:72:3a:8e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=a14eb151-6dac-4a8f-99ab-4955e8c8c6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:f9:4e:85:58:37:a2:9d:d0:d5:b5:0a:91:
                    b9:60:ad:cb:c8:ae:7d:f3:57:5b:4e:74:c6:4a:eb:
                    ea:f3:1d:a8:0a:2a:1d:38:48:84:de:52:f1:4f:85:
                    24:bc:7f:07:94:42:55:6a:4d:db:13:39:8e:9d:7f:
                    4e:25:38:3d:79:2b:30:b4:7d:7d:ab:a6:b2:f6:70:
                    46:86:0c:8f:e7:4a:46:6f:7f:c1:e6:e4:33:31:e7:
                    e6:a3:d6:08:63:9d:a3:3d:02:ab:40:52:63:66:00:
                    22:c5:40:7c:c0:9f:00:bc:5d:08:fb:9a:27:31:39:
                    fc:05:f4:ad:d2:be:b9:ab:db:18:dd:ca:ad:24:30:
                    56:64:81:df:15:65:d4:f2:9b:79:ab:30:db:69:d7:
                    9d:ad:49:f2:a8:94:de:2c:d5:96:4b:ee:8b:ef:5f:
                    fa:54:e8:cb:0d:fb:65:12:c7:91:22:92:ba:36:9e:
                    a4:4e:51:b6:07:69:b1:52:b9:12:36:bf:9b:0e:b2:
                    6e:aa:47:7b:bf:57:b9:69:1a:a0:d1:2d:12:f8:8e:
                    af:ca:f3:bf:36:02:2b:fb:ed:21:b1:f0:77:2b:18:
                    29:fd:77:26:0d:92:68:a7:6b:c1:69:cd:a5:3b:7f:
                    a4:5d:0f:4f:42:65:29:4f:49:d7:65:37:a8:ff:97:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9C:66:47:FF:67:3A:9F:FC:34:44:D8:A5:87:96:10:96:A3:26:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/3feeeaca-68cc-366d-8054-94f196ab0dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl

            X509v3 Authority Key Identifier:
                keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:109:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:1b:ce:f2:c7:df:99:b0:44:07:01:0e:4a:0d:0c:28:76:9f:
         46:20:4f:82:b6:38:0d:61:03:69:b7:fe:db:c8:0c:1a:a7:cc:
         66:64:03:64:0a:48:39:0a:1f:c5:d3:32:6d:84:3d:b5:56:3c:
         b9:b2:bd:6d:77:c7:dc:38:f0:7e:7d:7e:99:29:a0:6b:61:86:
         59:48:19:66:8d:92:75:34:a2:08:1e:78:88:a3:ba:96:bf:ff:
         f0:2a:90:c5:b3:15:2b:ac:33:26:1b:45:59:60:48:b5:98:15:
         60:d5:3e:d3:58:6d:7d:44:95:2f:c9:0d:de:b0:fb:7d:ed:4e:
         6e:44:d4:17:d7:bc:2e:51:8a:4b:3c:f7:aa:7b:8a:06:1b:9a:
         bb:0b:00:21:b2:36:95:8b:e1:83:38:8f:60:49:ec:57:c5:af:
         f3:cf:f5:e2:0a:e7:63:0f:9d:e8:97:53:b7:ba:39:e9:e1:fb:
         aa:a8:61:a3:9f:dd:fe:2e:fe:1a:08:38:d1:86:db:8d:83:6b:
         ab:ce:9c:58:19:10:f4:c6:a7:bc:73:1a:5a:85:2b:69:04:4e:
         02:7b:0b:d6:ff:a5:c3:93:26:6c:13:fe:d7:51:bf:47:0b:ac:
         76:44:1b:77:86:e1:f6:70:2e:74:83:9c:e6:88:10:e9:e9:56:
         3c:91:84:d5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4eRJ6pBGUbXXI6jtAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFiM2I4ODUtNzlkYS00MGVkLWFiMGItY2U0YTMwZjc3
MGRiMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
YTE0ZWIxNTEtNmRhYy00YThmLTk5YWItNDk1NWU4YzhjNmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvn5ToVYN6Kd0NW1CpG5YK3LyK5981dbTnTG
Suvq8x2oCiodOEiE3lLxT4UkvH8HlEJVak3bEzmOnX9OJTg9eSswtH19q6ay9nBG
hgyP50pGb3/B5uQzMefmo9YIY52jPQKrQFJjZgAixUB8wJ8AvF0I+5onMTn8BfSt
0r65q9sY3cqtJDBWZIHfFWXU8pt5qzDbadedrUnyqJTeLNWWS+6L71/6VOjLDftl
EseRIpK6Np6kTlG2B2mxUrkSNr+bDrJuqkd7v1e5aRqg0S0S+I6vyvO/NgIr++0h
sfB3Kxgp/XcmDZJop2vBac2lO3+kXQ9PQmUpT0nXZTeo/5f01wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJicZkf/Zzqf/DRE2KWHlhCWoyYbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIz
Yjg4NS03OWRhLTQwZWQtYWIwYi1jZTRhMzBmNzcwZGIvM2ZlZWVhY2EtNjhjYy0z
NjZkLTgwNTQtOTRmMTk2YWIwZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDFiM2I4ODUtNzlkYS00MGVkLWFi
MGItY2U0YTMwZjc3MGRiLzQxYjNiODg1LTc5ZGEtNDBlZC1hYjBiLWNlNGEzMGY3
NzBkYi5jcmwwHwYDVR0jBBgwFoAU0IYoSmXaLSFCYScW7q5E9ynm2/QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIzYjg4NS03OWRhLTQwZWQtYWIwYi1jZTRh
MzBmNzcwZGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABCTAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFcbzvLH35mwRAcBDkoNDCh2n0YgT4K2OA1hA2m3/tvIDBqnzGZk
A2QKSDkKH8XTMm2EPbVWPLmyvW13x9w48H59fpkpoGthhllIGWaNknU0oggeeIij
upa///AqkMWzFSusMyYbRVlgSLWYFWDVPtNYbX1ElS/JDd6w+33tTm5E1BfXvC5R
iks896p7igYbmrsLACGyNpWL4YM4j2BJ7FfFr/PP9eIK52MPneiXU7e6Oenh+6qo
YaOf3f4u/hoIONGG242Da6vOnFgZEPTGp7xzGlqFK2kETgJ7C9b/pcOTJmwT/tdR
v0cLrHZEG3eG4fZwLnSDnOaIEOnpVjyRhNU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:36:34 2026 by rpki-client