Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/04ec7425-cefd-36db-9516-40e01881cc8c.roa
File:                     04ec7425-cefd-36db-9516-40e01881cc8c.roa (raw, json)
Hash identifier:          JkTCLemlbNyJVLpusavmms2d988KvjttIGi8Kvl4Rhk=
Subject key identifier:   6B:C1:3B:4D:DB:E0:47:25:6C:48:0E:15:04:7F:54:E8:FA:98:94:07
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F4328584DE6E5D32874F8B74450E36400
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/04ec7425-cefd-36db-9516-40e01881cc8c.roa
Signing time:             Thu 21 May 2026 01:00:25 +0000
ROA not before:           Thu 21 May 2026 01:00:25 +0000
ROA not after:            Wed 19 Aug 2026 01:00:25 +0000
asID:                     16509
IP address blocks:        129.41.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:e5:d3:28:74:f8:b7:44:50:e3:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: May 21 01:00:25 2026 GMT
            Not After : Aug 19 01:00:25 2026 GMT
        Subject: CN=de0ce5e5-d5ee-4e68-b1c1-195ad681a674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:79:e0:16:a1:9e:7c:d9:c4:46:f3:6b:e6:
                    b7:1f:31:3c:0c:6e:45:6d:fe:a5:c2:a5:be:57:76:
                    1b:7f:74:c6:22:ac:fe:83:c7:65:6b:d9:42:7c:c8:
                    de:cb:5f:44:30:a9:42:21:62:32:d5:7a:23:83:6b:
                    71:f6:74:ba:7b:5a:37:dc:a1:63:01:23:d0:6e:c7:
                    97:81:e3:81:1b:2f:19:bf:80:49:e9:8f:c1:b9:02:
                    37:ff:bf:4b:ac:46:b0:9e:04:98:c6:86:29:6b:f6:
                    e9:20:2d:c9:79:ec:e5:0d:cc:81:1a:8d:41:2b:8a:
                    35:89:84:a9:1b:08:64:2f:7c:35:20:d8:74:f5:30:
                    35:e5:48:4a:59:ab:a7:17:87:1c:8f:08:29:08:bc:
                    3b:4b:6b:b5:1f:05:27:b3:c4:c7:19:0b:8c:64:c1:
                    1d:7b:d0:d9:f2:ba:7a:c6:c0:96:ef:90:51:32:3a:
                    26:2d:ce:78:8e:7f:d3:26:2a:5b:65:0f:89:87:14:
                    3c:45:9b:e6:ca:65:6b:2c:b3:d4:b1:71:a7:14:db:
                    3f:72:a2:30:91:af:9e:b2:8f:40:4b:b5:39:f1:5c:
                    6c:37:14:1a:a3:74:38:f0:98:45:27:7c:4f:a8:46:
                    b4:78:b1:5b:9d:75:24:98:01:83:bc:c5:9b:0e:6a:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C1:3B:4D:DB:E0:47:25:6C:48:0E:15:04:7F:54:E8:FA:98:94:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/04ec7425-cefd-36db-9516-40e01881cc8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:01:7f:07:3d:e4:fd:c0:fc:cb:9e:ed:71:72:b5:5e:25:38:
         90:23:dc:5d:39:16:82:8c:0d:7c:08:12:4b:58:0c:c1:46:4e:
         83:16:03:6b:cb:54:25:b3:4b:bd:4f:db:43:a0:96:31:83:46:
         28:1b:b8:46:35:00:fe:60:0e:3f:50:9d:a4:b3:bc:7e:88:ca:
         39:27:b9:32:76:53:bc:81:4c:5e:a9:2b:12:20:84:9f:16:f4:
         96:31:31:5c:bb:7a:be:83:89:28:b8:32:66:f0:d7:49:55:fe:
         4d:fd:37:d0:50:5c:05:93:e1:db:fe:4f:ef:b7:ac:46:56:91:
         9c:af:f1:13:b2:e8:97:c0:91:b0:96:8f:de:b1:c3:a0:aa:ed:
         93:20:68:d4:31:04:6f:c6:fb:56:ba:ce:b8:30:73:ef:cc:23:
         6a:63:3d:5c:be:aa:38:0a:10:04:41:c1:a0:a8:bc:0f:d4:a3:
         25:c8:a0:ac:81:b7:40:35:cf:7f:82:92:6e:37:1e:10:55:13:
         3d:09:ad:dc:2f:d9:5f:55:37:0e:31:6c:d7:64:f6:f2:73:c7:
         78:f0:08:29:1a:e2:9e:61:8c:79:f6:79:69:46:b4:61:a3:d8:
         a1:8e:52:5c:4b:25:1f:a6:25:62:2a:6f:6c:d6:9b:62:d9:47:
         b4:af:d2:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3m5dModPi3RFDjZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4
Mjc5MB4XDTI2MDUyMTAxMDAyNVoXDTI2MDgxOTAxMDAyNVowLzEtMCsGA1UEAxMk
ZGUwY2U1ZTUtZDVlZS00ZTY4LWIxYzEtMTk1YWQ2ODFhNjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWd54BahnnzZxEbza+a3HzE8DG5Fbf6lwqW+
V3Ybf3TGIqz+g8dla9lCfMjey19EMKlCIWIy1Xojg2tx9nS6e1o33KFjASPQbseX
geOBGy8Zv4BJ6Y/BuQI3/79LrEawngSYxoYpa/bpIC3JeezlDcyBGo1BK4o1iYSp
GwhkL3w1INh09TA15UhKWaunF4ccjwgpCLw7S2u1HwUns8THGQuMZMEde9DZ8rp6
xsCW75BRMjomLc54jn/TJipbZQ+JhxQ8RZvmymVrLLPUsXGnFNs/cqIwka+eso9A
S7U58VxsNxQao3Q48JhFJ3xPqEa0eLFbnXUkmAGDvMWbDmqIwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGvBO03b4EclbEgOFQR/VOj6mJQHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5
N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvMDRlYzc0MjUtY2VmZC0z
NmRiLTk1MTYtNDBlMDE4ODFjYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5
ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw
ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0
OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSkDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGMBfwc95P3A/Mue7XFytV4lOJAj3F05FoKMDXwIEktYDMFGToMWA2vL
VCWzS71P20OgljGDRigbuEY1AP5gDj9QnaSzvH6IyjknuTJ2U7yBTF6pKxIghJ8W
9JYxMVy7er6DiSi4Mmbw10lV/k39N9BQXAWT4dv+T++3rEZWkZyv8ROy6JfAkbCW
j96xw6Cq7ZMgaNQxBG/G+1a6zrgwc+/MI2pjPVy+qjgKEARBwaCovA/UoyXIoKyB
t0A1z3+Ckm43HhBVEz0Jrdwv2V9VNw4xbNdk9vJzx3jwCCka4p5hjHn2eWlGtGGj
2KGOUlxLJR+mJWIqb2zWm2LZR7Sv0mE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:25:39 2026 by rpki-client