Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/22b0067f-6848-32a9-afe1-94cd676c473d.roa
File:                     22b0067f-6848-32a9-afe1-94cd676c473d.roa (raw, json)
Hash identifier:          x3KTxlqDp2Kc2b2vYUtb3+VV/mGwWbQA6PQ5adSMLUw=
Subject key identifier:   44:1C:67:65:95:51:95:EE:B1:43:25:55:8E:17:1A:64:21:2A:72:40
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F629301E41D2784C0058BB4C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/22b0067f-6848-32a9-afe1-94cd676c473d.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        2603:900a::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:01:e4:1d:27:84:c0:05:8b:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=534a5481-5301-4fd8-8233-3a31678975cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:80:cd:92:5e:04:fc:e8:48:02:67:33:82:
                    81:4c:e5:0b:12:86:40:60:82:7c:03:bf:e0:4e:5a:
                    41:5c:0d:ce:6c:b6:1b:8b:bf:9a:fa:cf:b0:61:72:
                    9d:05:db:9a:c1:23:7f:d8:5f:fe:55:b3:93:a6:49:
                    23:2f:44:ff:1d:f8:16:72:07:f8:43:99:40:2f:02:
                    cc:ca:ce:78:f2:86:0b:10:f5:36:68:b7:ff:88:9e:
                    9d:d4:19:61:fd:83:dd:3f:1e:c5:2d:ba:09:8b:ba:
                    47:08:c0:df:3d:e8:97:85:98:18:9a:11:45:5b:3d:
                    f0:d4:20:01:e3:7b:65:1a:f2:a3:0d:ed:3e:50:cf:
                    19:80:0b:03:5f:25:a7:4a:42:2b:39:70:7e:15:80:
                    5e:46:da:18:ad:01:bf:41:b5:b0:37:6c:5c:b2:ce:
                    f4:30:d3:2e:5b:35:d9:83:e5:b8:67:e7:9b:a8:07:
                    1c:dc:99:f7:86:5c:12:d7:13:04:3d:b5:21:69:f1:
                    bd:7e:07:ad:62:a7:1a:f3:4a:79:af:3d:d8:d6:7c:
                    50:59:13:fe:6c:d4:ca:d3:11:e4:1d:91:e9:a4:7d:
                    bb:c7:55:5f:a6:5c:14:78:a1:04:d0:da:19:35:65:
                    58:9c:de:c7:da:bb:c1:50:ae:ab:c1:30:22:c8:6f:
                    c6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1C:67:65:95:51:95:EE:B1:43:25:55:8E:17:1A:64:21:2A:72:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/22b0067f-6848-32a9-afe1-94cd676c473d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:900a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:45:23:9b:94:60:00:30:d4:5d:df:e9:96:10:e6:a0:2e:72:
         13:ea:0d:b1:a2:53:e3:ac:c1:af:47:cd:c4:02:92:13:01:49:
         59:f4:6d:1f:0a:ec:7a:2b:f5:9b:f0:1c:29:17:c8:bd:d1:1b:
         5f:67:2f:84:49:82:10:a9:24:a1:18:ba:8c:43:f1:47:a5:33:
         1b:dc:ec:47:47:37:1f:e6:6a:67:d0:7f:84:75:31:e1:03:d3:
         3d:5e:bd:b3:1e:9f:f6:25:fa:37:3a:8d:47:69:bc:dd:1b:c1:
         94:da:66:19:0e:e2:07:af:b3:b8:bd:7b:b9:e0:f6:6f:4f:10:
         9d:b1:d4:8f:11:62:e8:dc:b9:0d:0c:8d:e7:37:8f:06:8e:5f:
         e0:ac:4a:86:55:c7:12:fb:05:dc:6a:45:d7:f2:f8:dd:49:2e:
         d8:f4:b8:b3:2d:b1:c7:01:32:04:71:8b:b9:e5:20:3f:d4:d9:
         ba:c0:6a:b7:31:61:66:38:4f:65:18:24:96:ec:de:0f:34:9c:
         b8:e7:1e:2b:28:18:11:ac:3a:7b:db:d2:c4:de:17:12:d3:40:
         82:6f:55:41:bc:ac:a6:e2:e0:43:c1:e5:8f:9b:b2:93:d8:9c:
         41:be:03:55:25:75:be:e7:7a:b0:42:f8:aa:09:4d:ae:ae:75:
         77:10:30:be
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikwHkHSeEwAWLtMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
NTM0YTU0ODEtNTMwMS00ZmQ4LTgyMzMtM2EzMTY3ODk3NWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvCAzZJeBPzoSAJnM4KBTOULEoZAYIJ8A7/g
TlpBXA3ObLYbi7+a+s+wYXKdBduawSN/2F/+VbOTpkkjL0T/HfgWcgf4Q5lALwLM
ys548oYLEPU2aLf/iJ6d1Blh/YPdPx7FLboJi7pHCMDfPeiXhZgYmhFFWz3w1CAB
43tlGvKjDe0+UM8ZgAsDXyWnSkIrOXB+FYBeRtoYrQG/QbWwN2xcss70MNMuWzXZ
g+W4Z+ebqAcc3Jn3hlwS1xMEPbUhafG9fgetYqca80p5rz3Y1nxQWRP+bNTK0xHk
HZHppH27x1VfplwUeKEE0NoZNWVYnN7H2rvBUK6rwTAiyG/GJwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEQcZ2WVUZXusUMlVY4XGmQhKnJAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMjJiMDA2N2YtNjg0OC0z
MmE5LWFmZTEtOTRjZDY3NmM0NzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgOQCjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCHRSOblGAAMNRd3+mWEOagLnIT6g2xolPjrMGvR83EApITAUlZ9G0f
Cux6K/Wb8BwpF8i90RtfZy+ESYIQqSShGLqMQ/FHpTMb3OxHRzcf5mpn0H+EdTHh
A9M9Xr2zHp/2Jfo3Oo1HabzdG8GU2mYZDuIHr7O4vXu54PZvTxCdsdSPEWLo3LkN
DI3nN48Gjl/grEqGVccS+wXcakXX8vjdSS7Y9LizLbHHATIEcYu55SA/1Nm6wGq3
MWFmOE9lGCSW7N4PNJy45x4rKBgRrDp729LE3hcS00CCb1VBvKym4uBDweWPm7KT
2JxBvgNVJXW+53qwQviqCU2urnV3EDC+
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:23:19 2026 by rpki-client