Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/99519124-3c81-3303-bd9f-e847296686a3.roa
File:                     99519124-3c81-3303-bd9f-e847296686a3.roa (raw, json)
Hash identifier:          Z6AE1lNVT6a87hCx7Z5/nxNHgEn24rJZhepyli9A6EE=
Subject key identifier:   02:57:7F:01:A1:B1:9D:6C:F6:11:30:8E:83:37:D6:0A:3B:10:7A:DA
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584D67DFF8CE8BECD3A880C152F0
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/99519124-3c81-3303-bd9f-e847296686a3.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     17390
IP address blocks:        2620:1f7:c030::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:f8:ce:8b:ec:d3:a8:80:c1:52:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=45ed9c6d-66fa-48b3-8635-63734493aa1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:e8:ff:4a:4f:59:87:a0:66:c6:cd:89:28:
                    a6:5d:fe:79:b0:2f:a1:65:8b:33:5b:d7:32:ed:21:
                    54:2f:5d:d3:a4:1d:9b:ca:55:31:48:5b:5b:c0:8b:
                    d6:a4:c3:9e:cd:4a:b5:38:98:0d:d7:b2:bb:1e:e4:
                    77:6b:09:c8:77:a2:4a:5e:70:90:bd:1f:e6:0b:b5:
                    03:11:cf:78:d0:9b:62:bb:85:59:81:de:94:a1:62:
                    8a:00:8d:5a:e3:d2:3b:78:0e:d7:2b:1a:e0:88:4f:
                    1a:d3:f8:04:02:4b:1e:45:bb:c6:cd:ad:cd:21:22:
                    f6:0a:b0:d9:4d:bc:0a:81:5f:a4:fa:78:65:dc:97:
                    d6:2f:61:fd:f0:7d:90:1f:60:fe:58:d0:f3:f9:74:
                    51:0e:93:ec:3a:73:29:64:c9:16:e9:79:eb:c6:d8:
                    aa:07:cc:6d:64:64:45:09:7d:25:a5:7e:b6:70:3f:
                    8e:77:89:0a:12:f1:03:7d:d0:4a:56:f5:63:dd:f3:
                    25:87:a7:79:26:37:ea:29:e4:bc:2c:14:e0:47:a0:
                    49:ff:16:52:3a:2e:7a:75:15:2e:12:18:aa:0f:fc:
                    c8:25:9f:08:57:61:a5:52:51:06:d9:6f:65:f7:f9:
                    5e:1a:46:cb:f0:8e:c9:0d:bd:f3:dd:be:e5:dc:98:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:57:7F:01:A1:B1:9D:6C:F6:11:30:8E:83:37:D6:0A:3B:10:7A:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/99519124-3c81-3303-bd9f-e847296686a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c030::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:75:e8:b3:eb:be:6c:f6:1b:02:28:99:dd:40:8a:93:f8:c9:
         ea:c5:33:ad:bf:53:9a:c2:40:6d:90:ed:e5:22:c5:b4:47:2d:
         75:24:94:5c:1f:bc:02:fd:33:c6:16:8b:73:34:62:04:b9:fa:
         35:0c:72:99:f2:cc:22:1b:74:d8:83:75:9d:73:d0:12:0c:ef:
         d4:34:7d:11:ba:50:ba:d3:d2:a1:7a:20:ad:36:a4:c6:83:65:
         2a:8f:82:dd:cf:27:ab:8f:0f:5d:38:18:23:c9:a4:d2:c8:d1:
         5e:81:c7:92:0b:a6:b2:e7:c7:10:87:51:00:8f:07:27:64:5f:
         e1:b8:f4:b8:c6:70:b6:03:87:54:f9:76:68:dd:58:38:c7:17:
         24:f4:0b:d0:ae:6e:36:db:79:f4:5d:ef:87:47:82:cf:e2:f4:
         74:d5:95:1b:be:ef:94:c1:0b:c7:60:40:ca:98:fd:c7:05:cf:
         a7:a6:50:66:ac:65:0b:0e:e2:3f:65:25:2a:67:e1:ec:5d:8b:
         91:97:46:5f:cc:69:b5:0d:e0:40:94:16:89:22:f9:0e:d1:3f:
         c4:ca:1f:e8:fa:95:e5:c6:66:53:34:79:f9:06:f5:86:a6:4b:
         8a:5c:6f:52:8b:cc:6a:b6:be:1a:76:ab:b7:a1:d5:28:d5:4b:
         a6:55:0e:fd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1n3/jOi+zTqIDBUvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5
OTNkMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
NDVlZDljNmQtNjZmYS00OGIzLTg2MzUtNjM3MzQ0OTNhYTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcjo/0pPWYegZsbNiSimXf55sC+hZYszW9cy
7SFUL13TpB2bylUxSFtbwIvWpMOezUq1OJgN17K7HuR3awnId6JKXnCQvR/mC7UD
Ec940Jtiu4VZgd6UoWKKAI1a49I7eA7XKxrgiE8a0/gEAkseRbvGza3NISL2CrDZ
TbwKgV+k+nhl3JfWL2H98H2QH2D+WNDz+XRRDpPsOnMpZMkW6XnrxtiqB8xtZGRF
CX0lpX62cD+Od4kKEvEDfdBKVvVj3fMlh6d5JjfqKeS8LBTgR6BJ/xZSOi56dRUu
EhiqD/zIJZ8IV2GlUlEG2W9l9/leGkbL8I7JDb3z3b7l3JguWwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAJXfwGhsZ1s9hEwjoM31go7EHraMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi
OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvOTk1MTkxMjQtM2M4MS0z
MzAzLWJkOWYtZTg0NzI5NjY4NmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky
NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk
OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy
NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98Aw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFt16LPrvmz2GwIomd1AipP4yerFM62/U5rCQG2Q7eUixbRHLXUk
lFwfvAL9M8YWi3M0YgS5+jUMcpnyzCIbdNiDdZ1z0BIM79Q0fRG6ULrT0qF6IK02
pMaDZSqPgt3PJ6uPD104GCPJpNLI0V6Bx5ILprLnxxCHUQCPBydkX+G49LjGcLYD
h1T5dmjdWDjHFyT0C9CubjbbefRd74dHgs/i9HTVlRu+75TBC8dgQMqY/ccFz6em
UGasZQsO4j9lJSpn4exdi5GXRl/MabUN4ECUFoki+Q7RP8TKH+j6leXGZlM0efkG
9YamS4pcb1KLzGq2vhp2q7eh1SjVS6ZVDv0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:45 2026 by rpki-client