Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa
File:                     c983825e-c67d-363b-8674-4ab78008496c.roa (raw, json)
Hash identifier:          Fkbc2sH0DsDAfJPt2945lyx0NSAuwtpnOkLgtiQo1Yg=
Subject key identifier:   33:78:A1:5F:45:16:EA:DA:97:58:A2:51:52:CA:5A:A7:AB:2C:43:A9
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584C9ACC35D55971EC376359EEA0
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa
Signing time:             Thu 22 Jan 2026 02:00:31 +0000
ROA not before:           Thu 22 Jan 2026 02:00:31 +0000
ROA not after:            Wed 22 Apr 2026 01:00:31 +0000
asID:                     20205
IP address blocks:        2001:4950::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9a:cc:35:d5:59:71:ec:37:63:59:ee:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Jan 22 02:00:31 2026 GMT
            Not After : Apr 22 01:00:31 2026 GMT
        Subject: CN=6e7322ea-0e62-4da9-a528-f2d75820e327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c1:3e:18:69:0e:92:e6:d4:c5:db:fe:37:10:
                    ac:a1:ce:b0:31:19:73:ed:89:69:7d:cd:12:0c:e8:
                    98:f7:b7:b6:b1:ae:ec:64:d6:1e:6a:36:a4:9e:8a:
                    e7:55:04:c0:da:95:a7:42:89:a1:53:fb:40:fb:ef:
                    06:b5:70:36:6f:4e:61:2b:33:9c:23:be:65:e3:95:
                    e9:88:43:43:30:02:5e:1e:2a:c1:84:8e:7d:2c:ed:
                    8a:a3:d3:25:e0:37:38:f4:b9:b9:f9:cb:a7:ef:21:
                    7f:d0:3d:da:01:ee:6e:68:9a:0d:78:25:b7:0a:f2:
                    80:fc:80:01:77:3f:b6:d6:da:46:75:8b:b4:e3:d4:
                    f1:c4:b7:8e:ae:29:09:a9:94:18:14:a5:0a:ed:ca:
                    dc:94:f8:bb:e6:3d:39:2d:fe:68:60:34:01:92:be:
                    bd:85:31:37:b4:8d:d0:fe:32:9a:76:d3:e8:e7:69:
                    3c:2b:e7:42:d2:c0:d5:1a:9b:02:f4:4e:99:e9:6d:
                    80:da:a0:0e:8c:bb:d7:49:f5:09:4a:d1:56:fc:a7:
                    6d:ce:2d:68:d3:02:89:13:46:be:80:44:85:75:f2:
                    6a:bf:f7:fa:91:76:c3:3b:2f:39:0e:15:26:14:1f:
                    59:6b:ac:01:ec:d7:97:ba:b5:26:f5:f7:ae:08:03:
                    91:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:78:A1:5F:45:16:EA:DA:97:58:A2:51:52:CA:5A:A7:AB:2C:43:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4950::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:f5:49:0a:b4:36:71:48:37:55:09:4c:55:9c:c6:d4:5f:be:
         e7:88:ca:b3:86:b8:4b:9b:7e:07:e9:58:73:e2:2d:22:51:05:
         64:90:bc:f0:42:90:af:cd:22:13:40:57:f8:bb:63:62:eb:87:
         d4:72:bc:2f:8d:d2:a2:89:60:7e:a3:bc:3f:3f:b7:65:c4:78:
         6c:49:32:07:99:6d:f9:36:61:5f:fc:56:d7:84:64:94:dd:f0:
         61:ae:6b:69:d4:c2:ff:36:5a:1a:e2:a4:c9:bc:96:fa:2e:a4:
         c4:4b:bd:16:d8:0c:fa:78:4e:91:b0:1e:03:f1:77:51:89:fc:
         48:47:ff:d4:6b:cc:3b:3c:3e:be:22:21:07:da:68:70:73:1c:
         02:99:0b:4b:9c:c8:84:4f:d1:db:81:0e:90:61:e4:61:54:94:
         38:4d:ae:31:05:d1:ed:e4:61:22:f6:d7:7f:f3:62:5d:ef:31:
         95:2b:56:41:27:37:b2:1d:3f:65:ec:af:ff:b7:0c:71:bd:2b:
         34:70:08:92:8f:10:18:f3:e4:c3:54:ca:64:4d:b9:68:92:8c:
         5c:7a:f7:19:ac:e5:1a:9c:ac:f6:ff:6c:86:36:c7:b5:2a:43:
         eb:da:05:68:3a:a1:05:89:c9:0e:6b:83:63:1c:6e:0a:c9:47:
         4b:4c:2c:f0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyazDXVWXHsN2NZ7qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNDVlOTctOTBjMi00ODNkLWE2OGItMmRkMmM4MzI2
NmEyMB4XDTI2MDEyMjAyMDAzMVoXDTI2MDQyMjAxMDAzMVowLzEtMCsGA1UEAxMk
NmU3MzIyZWEtMGU2Mi00ZGE5LWE1MjgtZjJkNzU4MjBlMzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhME+GGkOkubUxdv+NxCsoc6wMRlz7Ylpfc0S
DOiY97e2sa7sZNYeajaknornVQTA2pWnQomhU/tA++8GtXA2b05hKzOcI75l45Xp
iENDMAJeHirBhI59LO2Ko9Ml4Dc49Lm5+cun7yF/0D3aAe5uaJoNeCW3CvKA/IAB
dz+21tpGdYu049TxxLeOrikJqZQYFKUK7crclPi75j05Lf5oYDQBkr69hTE3tI3Q
/jKadtPo52k8K+dC0sDVGpsC9E6Z6W2A2qAOjLvXSfUJStFW/Kdtzi1o0wKJE0a+
gESFdfJqv/f6kXbDOy85DhUmFB9Za6wB7NeXurUm9feuCAORZQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDN4oV9FFural1iiUVLKWqerLEOpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0
NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQyYzgzMjY2YTIvYzk4MzgyNWUtYzY3ZC0z
NjNiLTg2NzQtNGFiNzgwMDg0OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWVkNDVlOTctOTBjMi00ODNkLWE2
OGItMmRkMmM4MzI2NmEyLzllZDQ1ZTk3LTkwYzItNDgzZC1hNjhiLTJkZDJjODMy
NjZhMi5jcmwwHwYDVR0jBBgwFoAU2Na/N7W2TtQdeVXNk36mXgCJn/gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQy
YzgzMjY2YTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJUDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBH9UkKtDZxSDdVCUxVnMbUX77niMqzhrhLm34H6Vhz4i0iUQVkkLzw
QpCvzSITQFf4u2Ni64fUcrwvjdKiiWB+o7w/P7dlxHhsSTIHmW35NmFf/FbXhGSU
3fBhrmtp1ML/Nloa4qTJvJb6LqTES70W2Az6eE6RsB4D8XdRifxIR//Ua8w7PD6+
IiEH2mhwcxwCmQtLnMiET9HbgQ6QYeRhVJQ4Ta4xBdHt5GEi9td/82Jd7zGVK1ZB
JzeyHT9l7K//twxxvSs0cAiSjxAY8+TDVMpkTblokoxcevcZrOUanKz2/2yGNse1
KkPr2gVoOqEFickOa4NjHG4KyUdLTCzw
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:10 2026 by rpki-client