Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/823f883e-6514-3885-b21f-65a300758958.roa
File:                     823f883e-6514-3885-b21f-65a300758958.roa (raw, json)
Hash identifier:          H8zfYdfWsw2sDrFn38jldJicWRqAdeN4a5csaTI+6NI=
Subject key identifier:   DE:CF:8A:C7:66:2F:BC:70:DC:E3:59:E9:61:7F:02:5F:76:AA:EA:AD
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584CCD0CB097D8D7F65A4D1D2D20
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/823f883e-6514-3885-b21f-65a300758958.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     7018
IP address blocks:        2001:1890::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:b0:97:d8:d7:f6:5a:4d:1d:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=18355fe6-89d7-4567-b019-0d3e855f2eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a1:c3:cd:7d:47:38:2c:3e:54:56:50:40:6f:
                    cb:68:1c:80:3f:bc:48:d6:3e:f3:64:43:a9:7b:41:
                    39:51:49:14:df:8f:57:d6:8f:7a:e9:5a:71:7a:76:
                    08:10:dd:35:e4:e0:00:7a:5a:59:7d:c8:93:03:ea:
                    c8:d9:13:5a:88:e5:b2:65:05:8d:69:86:d2:d9:ba:
                    e7:e6:f3:38:cb:93:a4:5a:ea:fa:de:d4:de:c8:4a:
                    34:cc:8f:92:13:64:a5:ea:6b:12:67:11:1f:12:32:
                    c1:6e:88:07:46:c3:59:93:ff:a7:09:ba:c6:15:39:
                    fb:cd:6d:0d:9b:d1:00:09:db:9d:51:bc:0e:72:81:
                    6d:d8:a9:e1:ac:e2:d5:f9:63:43:c7:c7:4d:a3:1b:
                    6f:39:74:b5:19:70:d6:05:dc:c3:87:8d:20:dc:31:
                    ec:5f:29:1a:f4:2e:3a:9c:7f:3a:48:f7:15:62:4c:
                    69:9d:4f:f4:22:fe:9b:7b:bd:c8:16:ab:93:a5:12:
                    9c:00:f7:f2:97:8a:87:d8:8f:00:08:5b:33:93:8a:
                    95:b8:08:26:af:3b:40:d5:03:8b:38:75:4e:71:2d:
                    45:65:fd:3b:b5:89:32:59:81:9e:61:b2:60:52:41:
                    27:49:d0:e2:c1:34:e3:53:bf:e6:33:69:f2:1e:d2:
                    a3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CF:8A:C7:66:2F:BC:70:DC:E3:59:E9:61:7F:02:5F:76:AA:EA:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/823f883e-6514-3885-b21f-65a300758958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1890::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3a:b6:b9:00:c2:93:42:fe:3d:a8:9a:5e:44:b2:a1:22:c1:
         b4:bc:4e:62:e0:bb:10:87:ce:88:e5:c1:bc:e1:6e:a5:29:e8:
         ab:27:3a:48:f0:7f:ea:8d:28:1c:f3:e7:b6:33:a3:9a:54:ac:
         b5:d4:8e:78:6b:4b:55:20:eb:a9:8c:a4:63:fe:41:5b:12:02:
         8e:d6:32:ac:b3:f2:ba:08:37:fa:cc:f6:ed:8b:2d:97:f8:57:
         3a:a3:d7:76:b6:62:f4:ab:d3:2f:23:c5:90:af:a6:66:d3:f9:
         f2:e0:ea:b5:79:45:d8:b0:95:56:a8:b7:79:d0:bc:0c:0c:54:
         2e:33:b9:02:a6:4d:66:2a:e9:31:b9:18:59:ed:e3:1c:b5:7f:
         13:56:cf:14:fd:ee:e2:7c:dc:fd:f0:78:77:91:c6:fc:24:14:
         4f:a4:e4:e4:28:0e:51:74:92:dc:93:13:17:7a:e6:3c:a7:d0:
         ef:ca:7d:6d:a6:cf:a5:c9:45:bc:20:39:a5:a6:74:c4:82:37:
         38:19:e3:47:7e:ed:d4:8d:37:72:88:5e:06:98:ae:38:a8:c6:
         76:38:cd:8e:b0:f7:25:dd:a9:1c:36:4d:82:82:4d:16:59:15:
         6e:33:79:32:4f:c4:8c:10:b9:15:71:9d:1c:ed:93:b7:8b:7a:
         11:cc:46:a5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzNDLCX2Nf2Wk0dLSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE0MTg2ZGYtODdiYS00ZGQ1LWFkYmYtMWM2YzJiYmUw
NGE4MB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk
MTgzNTVmZTYtODlkNy00NTY3LWIwMTktMGQzZTg1NWYyZWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKHDzX1HOCw+VFZQQG/LaByAP7xI1j7zZEOp
e0E5UUkU349X1o966VpxenYIEN015OAAelpZfciTA+rI2RNaiOWyZQWNaYbS2brn
5vM4y5OkWur63tTeyEo0zI+SE2Sl6msSZxEfEjLBbogHRsNZk/+nCbrGFTn7zW0N
m9EACdudUbwOcoFt2KnhrOLV+WNDx8dNoxtvOXS1GXDWBdzDh40g3DHsXyka9C46
nH86SPcVYkxpnU/0Iv6be73IFquTpRKcAPfyl4qH2I8ACFszk4qVuAgmrztA1QOL
OHVOcS1FZf07tYkyWYGeYbJgUkEnSdDiwTTjU7/mM2nyHtKjeQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFN7PisdmL7xw3ONZ6WF/Al92quqtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQx
ODZkZi04N2JhLTRkZDUtYWRiZi0xYzZjMmJiZTA0YTgvODIzZjg4M2UtNjUxNC0z
ODg1LWIyMWYtNjVhMzAwNzU4OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MTg2ZGYtODdiYS00ZGQ1LWFk
YmYtMWM2YzJiYmUwNGE4LzMxNDE4NmRmLTg3YmEtNGRkNS1hZGJmLTFjNmMyYmJl
MDRhOC5jcmwwHwYDVR0jBBgwFoAUUhXIm1E3DpTxq8Kvfcj2u+Hy5W8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQxODZkZi04N2JhLTRkZDUtYWRiZi0xYzZj
MmJiZTA0YTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAEYkDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAUOra5AMKTQv49qJpeRLKhIsG0vE5i4LsQh86I5cG84W6lKeirJzpI
8H/qjSgc8+e2M6OaVKy11I54a0tVIOupjKRj/kFbEgKO1jKss/K6CDf6zPbtiy2X
+Fc6o9d2tmL0q9MvI8WQr6Zm0/ny4Oq1eUXYsJVWqLd50LwMDFQuM7kCpk1mKukx
uRhZ7eMctX8TVs8U/e7ifNz98Hh3kcb8JBRPpOTkKA5RdJLckxMXeuY8p9Dvyn1t
ps+lyUW8IDmlpnTEgjc4GeNHfu3UjTdyiF4GmK44qMZ2OM2OsPcl3akcNk2Cgk0W
WRVuM3kyT8SMELkVcZ0c7ZO3i3oRzEal
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:32:07 2026 by rpki-client