Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/dcaf58ee-6eb7-3de9-b353-3f111c591d5b.roa
File:                     dcaf58ee-6eb7-3de9-b353-3f111c591d5b.roa (raw, json)
Hash identifier:          VjUs7pvWhxabuyJykXETXKQh5UvKHwa/scaYQCqM6lg=
Subject key identifier:   87:0E:D9:25:9B:42:53:4B:8B:92:03:B8:5E:FF:E0:DB:35:4E:E0:5D
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F4328584E28099E8A6614F450CCBB4640
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/dcaf58ee-6eb7-3de9-b353-3f111c591d5b.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2603:5000:1040::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:9e:8a:66:14:f4:50:cc:bb:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=0d449c12-7540-406e-ab55-cb7dcfa97711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6c:6c:d7:5e:81:53:1f:11:d5:6a:80:0f:9d:
                    eb:f3:02:04:5e:05:3f:ad:53:27:bd:fb:45:f9:4e:
                    33:ac:78:26:18:2a:01:62:06:0d:80:cf:ed:e6:08:
                    fe:47:64:77:44:be:f8:23:85:ec:f1:a4:54:da:65:
                    e8:2a:d5:ab:a5:27:a6:85:11:4c:0f:81:cc:c4:4d:
                    48:66:39:a3:a2:8f:b8:38:ff:a4:75:43:33:81:63:
                    bb:ac:1e:a3:04:48:ac:ed:70:bc:9f:13:68:e0:4d:
                    7c:63:16:3a:d0:2f:8a:7e:aa:77:9a:cc:6c:3d:b6:
                    86:54:0d:ee:a2:80:74:23:3b:56:09:7c:ab:53:67:
                    93:fb:6c:c3:27:d8:c7:ec:8a:b7:18:c8:c9:19:86:
                    54:81:fd:8f:b9:88:4f:34:14:65:e3:ae:f0:b7:f7:
                    d4:ad:49:2d:7c:1f:3c:94:66:c8:c1:9c:f5:fd:25:
                    32:55:ef:44:30:da:e8:87:81:9d:37:f6:4d:71:58:
                    06:fb:81:21:07:bc:55:76:71:5d:ab:c5:88:1c:5f:
                    b7:07:4a:18:75:ad:8f:a7:39:11:eb:bf:43:a3:ba:
                    d6:dd:80:9b:17:c8:35:67:b6:01:aa:cd:06:e3:af:
                    24:a3:26:56:19:eb:64:4a:6c:48:71:66:ea:f4:8d:
                    16:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0E:D9:25:9B:42:53:4B:8B:92:03:B8:5E:FF:E0:DB:35:4E:E0:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/dcaf58ee-6eb7-3de9-b353-3f111c591d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5000:1040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:91:e3:c8:63:8e:b5:a7:27:8b:ac:da:16:d9:95:3e:e5:bf:
         74:c3:f0:62:e4:f9:af:db:ca:60:3b:75:3c:f6:ce:37:f4:d6:
         e8:90:ea:71:d3:2c:aa:ee:1a:1a:f4:ab:70:55:47:5f:da:b8:
         df:8e:50:e8:71:4a:be:f2:5b:ab:32:ac:2a:b8:e0:fa:58:f1:
         b8:81:87:08:50:be:6b:eb:d8:69:1e:1e:0a:60:06:b6:dd:08:
         95:91:57:d4:65:4c:ba:b3:91:e5:f7:12:e7:85:33:f1:65:d8:
         44:3a:a0:6f:76:d5:1f:0c:b9:67:4b:bd:e6:7d:7c:9a:a4:4e:
         ec:79:b9:2a:03:eb:97:98:d8:fd:8c:20:86:55:c6:28:3a:f3:
         74:89:e6:15:60:c8:e3:bd:fd:8c:98:99:c3:8a:e7:9e:a7:e4:
         3f:76:11:ff:14:a7:ad:db:16:bd:5f:bd:3a:ad:88:08:31:75:
         e8:7b:60:7d:18:be:e5:3a:65:b1:4a:7d:cc:7e:33:52:69:6b:
         57:04:fe:22:1d:29:36:41:b9:57:fd:d3:23:13:66:cc:d1:2b:
         a8:f7:59:a7:85:ca:4e:48:99:e1:1c:d5:02:8f:1d:b1:01:20:
         2e:b5:42:5d:84:1d:8a:a0:1b:2b:e3:11:4e:97:04:6a:2f:42:
         2f:0f:a6:94
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4oCZ6KZhT0UMy7RkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc1ZDIwZjYtMWNmYS00ODNlLWJlMGYtZDE1ZWI1NDhm
NjZkMB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk
MGQ0NDljMTItNzU0MC00MDZlLWFiNTUtY2I3ZGNmYTk3NzExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumxs116BUx8R1WqAD53r8wIEXgU/rVMnvftF
+U4zrHgmGCoBYgYNgM/t5gj+R2R3RL74I4Xs8aRU2mXoKtWrpSemhRFMD4HMxE1I
Zjmjoo+4OP+kdUMzgWO7rB6jBEis7XC8nxNo4E18YxY60C+Kfqp3msxsPbaGVA3u
ooB0IztWCXyrU2eT+2zDJ9jH7Iq3GMjJGYZUgf2PuYhPNBRl467wt/fUrUktfB88
lGbIwZz1/SUyVe9EMNroh4GdN/ZNcVgG+4EhB7xVdnFdq8WIHF+3B0oYda2PpzkR
679Do7rW3YCbF8g1Z7YBqs0G468koyZWGetkSmxIcWbq9I0WxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIcO2SWbQlNLi5IDuF7/4Ns1TuBdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83NzVk
MjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVlYjU0OGY2NmQvZGNhZjU4ZWUtNmViNy0z
ZGU5LWIzNTMtM2YxMTFjNTkxZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc1ZDIwZjYtMWNmYS00ODNlLWJl
MGYtZDE1ZWI1NDhmNjZkLzc3NWQyMGY2LTFjZmEtNDgzZS1iZTBmLWQxNWViNTQ4
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUGy2qCGYWpuHYP/G3Oy3sdH8TIz4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83NzVkMjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVl
YjU0OGY2NmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgNQABBA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABGR48hjjrWnJ4us2hbZlT7lv3TD8GLk+a/bymA7dTz2zjf01uiQ
6nHTLKruGhr0q3BVR1/auN+OUOhxSr7yW6syrCq44PpY8biBhwhQvmvr2GkeHgpg
BrbdCJWRV9RlTLqzkeX3EueFM/Fl2EQ6oG921R8MuWdLveZ9fJqkTux5uSoD65eY
2P2MIIZVxig683SJ5hVgyOO9/YyYmcOK556n5D92Ef8Up63bFr1fvTqtiAgxdeh7
YH0YvuU6ZbFKfcx+M1Jpa1cE/iIdKTZBuVf90yMTZszRK6j3WaeFyk5ImeEc1QKP
HbEBIC61Ql2EHYqgGyvjEU6XBGovQi8PppQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:49:54 2026 by rpki-client