Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa
File:                     d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa (raw, json)
Hash identifier:          YaQhcx85iZ+nVXgT4uSKIsZQlFlfayT3MXfYiqwBgaU=
Subject key identifier:   F9:82:BD:CE:08:EA:FA:B5:F4:61:1F:35:A3:46:71:7A:02:12:42:45
Certificate issuer:       /CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
Certificate serial:       010D0C9F4328584F1467A446B83677FA158AC700
Authority key identifier: 3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     198949
IP address blocks:        2610:148::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a4:46:b8:36:77:fa:15:8a:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=0e5b9611-6f06-4479-833a-64fd4a3f4059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:1b:f1:45:65:eb:47:e5:9d:63:8a:cc:83:
                    09:f7:c3:e0:4c:0a:a5:8a:8f:73:03:f1:f1:d4:5b:
                    0b:24:1b:74:3e:9b:52:b7:54:99:c7:b8:34:bc:af:
                    ae:3f:c9:bb:e9:f7:40:93:ea:b3:07:67:6b:1a:58:
                    17:c3:6b:b8:c7:9c:99:dc:f7:32:f7:bd:cf:6d:c2:
                    7c:60:8e:27:b6:be:a7:a3:bb:e3:cc:08:e3:32:19:
                    cf:48:fc:7f:8a:4d:23:59:72:49:f6:62:37:4e:ad:
                    dc:a3:a8:65:31:d9:ca:a9:c1:c7:01:c6:f4:cd:14:
                    3e:25:1b:a7:5e:f7:53:03:70:4b:7e:b6:70:f6:2e:
                    ad:1b:a5:f6:49:5e:c6:93:30:62:d6:7f:cf:70:3b:
                    be:57:4d:06:1f:8c:07:cf:b1:30:c7:1c:66:84:2c:
                    cd:4b:c3:78:e4:7b:e6:a5:31:b4:2c:d8:62:5f:6a:
                    5b:90:d9:ad:89:d8:bd:e9:f6:03:a5:70:a6:ba:d0:
                    58:26:d9:93:63:bb:67:d0:0a:3e:85:b4:d3:c7:69:
                    c0:39:be:52:b7:1a:a7:80:e3:e7:dc:b7:5e:2d:0a:
                    53:62:04:87:c6:af:64:cb:4b:23:a2:88:27:74:64:
                    b4:64:e4:1b:25:85:bb:7c:3f:b2:f4:cf:3e:3b:cd:
                    33:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:82:BD:CE:08:EA:FA:B5:F4:61:1F:35:A3:46:71:7A:02:12:42:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:148::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d4:0d:ab:dd:e8:98:45:18:32:d0:da:1f:a4:eb:58:6d:60:
         eb:c6:8f:1d:d0:dc:fc:41:c8:c1:37:6a:16:3a:37:4a:73:02:
         eb:83:8b:ee:20:80:e5:00:f5:47:f0:6e:a0:71:4a:f0:b5:a3:
         46:d1:18:ad:4d:e6:96:a4:ca:53:5e:16:11:e7:2b:63:ba:98:
         76:02:50:40:85:99:75:df:7e:b8:f7:e6:a0:a8:31:41:62:1e:
         77:d6:03:d3:31:08:b8:76:cb:00:cc:e1:38:98:14:52:81:66:
         a8:bf:99:70:1b:08:0a:11:6f:be:f7:94:63:e0:89:00:84:59:
         df:ad:b3:e5:b5:b4:54:04:9d:0b:f4:67:78:68:86:12:85:7e:
         d6:2b:b5:db:e3:f5:7d:98:9b:44:33:10:7a:78:da:86:6f:e8:
         78:ca:29:6b:fb:ed:6b:c3:e3:16:bc:c3:0f:1b:53:d3:44:2b:
         4a:98:1f:44:56:93:55:20:da:d8:65:19:89:6b:cb:02:89:05:
         bd:c0:a0:e7:09:a3:b6:3a:a0:5b:0c:4d:4f:e9:f5:7a:bc:28:
         1a:4e:15:dd:ad:52:96:bc:83:19:80:ee:c4:4f:5b:fa:3a:25:
         be:a7:0b:2e:12:6f:19:71:22:38:84:e6:e6:53:36:5c:af:f0:
         80:6d:27:98
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8UZ6RGuDZ3+hWKxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDMwZDkyY2ItNzRiZC00ZDZkLTlmNzktYmI5M2Y5MWQ4
M2FmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk
MGU1Yjk2MTEtNmYwNi00NDc5LTgzM2EtNjRmZDRhM2Y0MDU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPwb8UVl60flnWOKzIMJ98PgTAqlio9zA/Hx
1FsLJBt0PptSt1SZx7g0vK+uP8m76fdAk+qzB2drGlgXw2u4x5yZ3Pcy973PbcJ8
YI4ntr6no7vjzAjjMhnPSPx/ik0jWXJJ9mI3Tq3co6hlMdnKqcHHAcb0zRQ+JRun
XvdTA3BLfrZw9i6tG6X2SV7GkzBi1n/PcDu+V00GH4wHz7EwxxxmhCzNS8N45Hvm
pTG0LNhiX2pbkNmtidi96fYDpXCmutBYJtmTY7tn0Ao+hbTTx2nAOb5StxqngOPn
3LdeLQpTYgSHxq9ky0sjoogndGS0ZOQbJYW7fD+y9M8+O80zLwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPmCvc4I6vq19GEfNaNGcXoCEkJFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzBk
OTJjYi03NGJkLTRkNmQtOWY3OS1iYjkzZjkxZDgzYWYvZDBkZGNiYTktY2MzYS0z
M2MyLTk3N2MtYTJhYTI3OGQ0NzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDMwZDkyY2ItNzRiZC00ZDZkLTlm
NzktYmI5M2Y5MWQ4M2FmLzAzMGQ5MmNiLTc0YmQtNGQ2ZC05Zjc5LWJiOTNmOTFk
ODNhZi5jcmwwHwYDVR0jBBgwFoAUP6RtTMtvThGAzhFePD4BtF/7g+kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzBkOTJjYi03NGJkLTRkNmQtOWY3OS1iYjkz
ZjkxZDgzYWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJhABSDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA21A2r3eiYRRgy0NofpOtYbWDrxo8d0Nz8QcjBN2oWOjdKcwLrg4vu
IIDlAPVH8G6gcUrwtaNG0RitTeaWpMpTXhYR5ytjuph2AlBAhZl133649+agqDFB
Yh531gPTMQi4dssAzOE4mBRSgWaov5lwGwgKEW++95Rj4IkAhFnfrbPltbRUBJ0L
9Gd4aIYShX7WK7Xb4/V9mJtEMxB6eNqGb+h4yilr++1rw+MWvMMPG1PTRCtKmB9E
VpNVINrYZRmJa8sCiQW9wKDnCaO2OqBbDE1P6fV6vCgaThXdrVKWvIMZgO7ET1v6
OiW+pwsuEm8ZcSI4hObmUzZcr/CAbSeY
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:06:51 2026 by rpki-client