Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/8b85d5bc-909d-38aa-a82e-624e2f57d190.roa
File:                     8b85d5bc-909d-38aa-a82e-624e2f57d190.roa (raw, json)
Hash identifier:          +ob8JIACYpIM48czzoPIgGFUBgZzobC0jKAF0Y8rs9E=
Subject key identifier:   A2:F3:81:21:B5:DE:CA:D1:99:52:36:7F:BF:55:E7:9C:7C:48:60:C2
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584DE1507BD8539CDE220210FE80
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/8b85d5bc-909d-38aa-a82e-624e2f57d190.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2001:4f8:fe00::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:7b:d8:53:9c:de:22:02:10:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=79466696-0b44-4a35-b4a3-3b462e756bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:09:9a:d3:b5:fc:e5:47:e2:8d:c2:d4:22:
                    59:5b:12:a4:a4:69:7f:54:25:7d:bc:70:b5:b9:68:
                    09:0c:31:36:02:66:c2:06:e4:14:07:f2:16:a3:83:
                    6d:d7:8e:19:6c:ac:28:de:17:10:42:50:60:bb:96:
                    57:f4:5e:19:a6:fe:97:99:e4:2d:fb:a5:a4:f7:aa:
                    a5:44:49:e3:d0:3d:e8:b1:c3:05:44:21:20:49:9f:
                    03:d6:db:52:13:4b:f6:22:86:4b:16:ed:f6:14:a0:
                    c1:f3:38:f0:4c:5d:b3:bf:23:f3:d6:42:c6:8a:87:
                    cb:d9:42:8b:cd:50:92:f4:22:dc:e6:0d:a6:ca:04:
                    10:a0:10:07:c2:2d:61:0e:f6:7e:23:c7:63:50:ee:
                    09:40:55:89:26:70:13:8c:ff:56:10:21:00:57:0b:
                    56:ee:82:30:ec:25:0d:f6:79:08:21:2f:29:5f:fe:
                    70:dc:a8:13:2d:07:72:39:ec:68:52:fa:7c:9f:fd:
                    12:4d:9d:56:1d:5e:a0:90:2a:0d:ea:16:5d:fa:8c:
                    75:f1:08:b0:a4:7f:65:99:dd:06:93:3a:37:1b:d3:
                    38:f3:56:02:cb:09:5f:8a:67:ce:ac:bf:7f:44:15:
                    34:18:27:a5:81:c8:24:c6:d2:8d:67:ec:37:07:66:
                    49:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F3:81:21:B5:DE:CA:D1:99:52:36:7F:BF:55:E7:9C:7C:48:60:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/8b85d5bc-909d-38aa-a82e-624e2f57d190.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4f8:fe00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:60:96:32:fb:ac:c9:73:d7:14:44:ae:3d:af:60:55:28:f0:
         9c:da:8a:04:ef:0c:1e:19:84:99:98:d3:dd:80:88:be:bc:ba:
         53:c9:be:73:dc:ec:e7:2c:ec:0c:1e:15:28:4a:11:b9:a2:0d:
         43:f0:f9:4a:1e:fe:b9:f6:fb:82:ee:f9:88:61:56:23:72:02:
         91:59:49:00:ea:a1:4d:e2:a5:82:37:6a:84:79:1a:e7:e0:44:
         49:c3:f3:9a:a5:fd:bc:72:42:49:c4:86:13:78:95:f9:b8:b7:
         f6:77:f0:a0:ef:37:c5:f8:43:dc:9c:6c:5e:e4:31:35:9a:37:
         61:e4:2d:40:e2:4c:8c:26:3b:d1:37:75:67:9a:d8:df:63:ec:
         ee:fd:49:1e:50:9e:37:75:0f:bf:6a:d6:39:7c:32:d1:f3:ae:
         9f:2b:cc:82:e4:34:31:42:f9:33:b3:34:40:14:17:64:92:98:
         25:e3:91:87:74:98:bc:da:c0:91:70:ee:e4:48:ee:1a:37:07:
         3a:00:bc:2e:ee:7b:62:e1:ca:9c:df:46:2e:d5:9e:d0:1e:b4:
         d5:70:45:07:75:2c:ab:72:06:60:1d:5a:bb:67:e5:9b:5f:d4:
         eb:57:33:b1:84:bb:6a:7e:3b:b9:2b:77:97:ce:33:71:b7:c9:
         37:11:9d:49
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3hUHvYU5zeIgIQ/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk
Nzk0NjY2OTYtMGI0NC00YTM1LWI0YTMtM2I0NjJlNzU2YmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHcJmtO1/OVH4o3C1CJZWxKkpGl/VCV9vHC1
uWgJDDE2AmbCBuQUB/IWo4Nt144ZbKwo3hcQQlBgu5ZX9F4Zpv6XmeQt+6Wk96ql
REnj0D3oscMFRCEgSZ8D1ttSE0v2IoZLFu32FKDB8zjwTF2zvyPz1kLGiofL2UKL
zVCS9CLc5g2mygQQoBAHwi1hDvZ+I8djUO4JQFWJJnATjP9WECEAVwtW7oIw7CUN
9nkIIS8pX/5w3KgTLQdyOexoUvp8n/0STZ1WHV6gkCoN6hZd+ox18QiwpH9lmd0G
kzo3G9M481YCywlfimfOrL9/RBU0GCelgcgkxtKNZ+w3B2ZJPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKLzgSG13srRmVI2f79V55x8SGDCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvOGI4NWQ1YmMtOTA5ZC0z
OGFhLWE4MmUtNjI0ZTJmNTdkMTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEE+P4A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACNgljL7rMlz1xRErj2vYFUo8JzaigTvDB4ZhJmY092AiL68ulPJ
vnPc7Ocs7AweFShKEbmiDUPw+Uoe/rn2+4Lu+YhhViNyApFZSQDqoU3ipYI3aoR5
GufgREnD85ql/bxyQknEhhN4lfm4t/Z38KDvN8X4Q9ycbF7kMTWaN2HkLUDiTIwm
O9E3dWea2N9j7O79SR5Qnjd1D79q1jl8MtHzrp8rzILkNDFC+TOzNEAUF2SSmCXj
kYd0mLzawJFw7uRI7ho3BzoAvC7ue2LhypzfRi7VntAetNVwRQd1LKtyBmAdWrtn
5Ztf1OtXM7GEu2p+O7krd5fOM3G3yTcRnUk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:35:29 2026 by rpki-client