Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/c26ecb5c-14d6-3b48-8786-04e77660f150.roa
File:                     c26ecb5c-14d6-3b48-8786-04e77660f150.roa (raw, json)
Hash identifier:          4ktz/QfxHMdewBhdWpLUuBrtOqcF6qnnMvTzYkR2sIM=
Subject key identifier:   9F:C7:1B:1C:23:1A:AB:64:CF:2F:C2:47:6D:D1:C0:85:81:8D:5B:E0
Certificate issuer:       /CN=cdd649c3-69cc-4c17-ab23-18770e2b8be8
Certificate serial:       010D0C9F4328584D746FCB811AE10D9B9DE4EF80
Authority key identifier: 26:0E:C1:31:80:A9:07:AB:3B:51:A6:8E:ED:B7:15:A7:A1:7B:55:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/c26ecb5c-14d6-3b48-8786-04e77660f150.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     36309
IP address blocks:        2620:9d:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:cb:81:1a:e1:0d:9b:9d:e4:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdd649c3-69cc-4c17-ab23-18770e2b8be8
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=00219183-282b-4391-8a5a-1a2e1d1b00c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:4d:19:11:3f:ea:a0:4c:81:07:92:6c:13:
                    01:3b:40:78:48:a0:f1:51:31:44:df:4d:5d:f8:e5:
                    a6:19:57:c4:8d:39:f0:dd:4c:42:6c:6f:07:d1:b8:
                    26:38:6b:df:96:87:b8:7d:a0:cf:75:fb:6e:09:87:
                    ee:07:33:b5:c5:99:a6:67:81:71:8a:fb:32:7c:88:
                    dc:0b:d2:36:92:01:1d:d7:05:87:50:e5:ae:c9:55:
                    01:cb:fa:47:1a:ef:3b:5a:e7:c7:d0:39:80:6d:3c:
                    20:02:6f:16:24:24:9f:d7:05:f1:54:b5:85:3d:a3:
                    85:4a:0f:0e:40:f0:a3:77:e9:8b:cf:be:0a:07:a1:
                    46:99:4a:4f:73:b1:53:e8:ca:6d:3e:19:75:5a:75:
                    b7:ef:f8:21:39:05:8b:b0:e5:fe:b9:93:5a:05:7e:
                    34:a4:ca:ef:7d:fc:09:b2:37:15:26:8c:84:57:fe:
                    0e:fd:83:51:d8:cd:ac:f6:1a:4d:cf:97:42:48:2c:
                    57:3a:25:70:5d:4c:0c:29:ef:7e:67:2d:90:7f:c5:
                    9a:44:e4:0f:d3:ee:1e:60:8b:7f:03:6e:96:aa:c8:
                    93:7a:bc:6a:97:47:43:25:3a:1d:f9:28:60:c4:55:
                    32:ca:59:64:c5:38:09:65:ae:d4:49:cd:3d:83:9c:
                    8d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C7:1B:1C:23:1A:AB:64:CF:2F:C2:47:6D:D1:C0:85:81:8D:5B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/c26ecb5c-14d6-3b48-8786-04e77660f150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.crl

            X509v3 Authority Key Identifier:
                keyid:26:0E:C1:31:80:A9:07:AB:3B:51:A6:8E:ED:B7:15:A7:A1:7B:55:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9d:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:04:49:25:78:c7:1d:4b:80:15:69:28:e9:d2:57:4d:c4:18:
         33:8a:9d:a8:60:7a:c7:23:53:43:8d:17:07:ca:80:97:4d:ce:
         88:bd:6b:f4:dc:41:35:b6:e5:89:39:07:81:90:72:c7:8d:22:
         0f:5d:45:2e:ec:a6:21:e4:eb:c7:fe:06:6f:37:d5:fb:62:c8:
         9e:26:f4:24:2c:1c:3d:37:5a:a8:bb:7e:a8:34:f0:88:ba:83:
         01:ce:4b:94:93:70:f5:5b:a1:b5:4c:32:fa:58:ca:91:7d:66:
         f8:ed:9d:1c:d2:a9:58:cd:e4:10:34:2d:c2:09:4a:31:84:69:
         98:75:40:24:17:28:a6:d2:17:e4:90:33:0f:9e:55:51:c3:0b:
         5e:21:d1:98:78:85:e6:7f:36:78:ca:26:21:36:70:ba:0b:db:
         64:31:55:94:d6:48:8e:38:73:f8:fa:85:cc:ff:df:d6:e2:83:
         ff:8d:90:7e:88:c7:a8:c8:a9:6d:bd:5e:37:b2:f4:43:36:f5:
         19:88:64:c4:ad:4d:62:f3:b3:6b:8c:91:5a:3a:5e:5c:74:82:
         d5:11:82:91:2e:79:6e:62:4a:b1:ef:aa:4e:c4:73:d5:28:9a:
         c8:85:40:2c:b9:1e:a9:8c:cf:60:bf:6e:1e:5e:51:89:45:6f:
         ef:6b:0b:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10b8uBGuENm53k74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2RkNjQ5YzMtNjljYy00YzE3LWFiMjMtMTg3NzBlMmI4
YmU4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
MDAyMTkxODMtMjgyYi00MzkxLThhNWEtMWEyZTFkMWIwMGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCtNGRE/6qBMgQeSbBMBO0B4SKDxUTFE301d
+OWmGVfEjTnw3UxCbG8H0bgmOGvfloe4faDPdftuCYfuBzO1xZmmZ4FxivsyfIjc
C9I2kgEd1wWHUOWuyVUBy/pHGu87WufH0DmAbTwgAm8WJCSf1wXxVLWFPaOFSg8O
QPCjd+mLz74KB6FGmUpPc7FT6MptPhl1WnW37/ghOQWLsOX+uZNaBX40pMrvffwJ
sjcVJoyEV/4O/YNR2M2s9hpNz5dCSCxXOiVwXUwMKe9+Zy2Qf8WaROQP0+4eYIt/
A26WqsiTerxql0dDJTod+ShgxFUyyllkxTgJZa7USc09g5yNBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ/HGxwjGqtkzy/CR23RwIWBjVvgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZGQ2
NDljMy02OWNjLTRjMTctYWIyMy0xODc3MGUyYjhiZTgvYzI2ZWNiNWMtMTRkNi0z
YjQ4LTg3ODYtMDRlNzc2NjBmMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2RkNjQ5YzMtNjljYy00YzE3LWFi
MjMtMTg3NzBlMmI4YmU4L2NkZDY0OWMzLTY5Y2MtNGMxNy1hYjIzLTE4NzcwZTJi
OGJlOC5jcmwwHwYDVR0jBBgwFoAUJg7BMYCpB6s7UaaO7bcVp6F7VTAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jZGQ2NDljMy02OWNjLTRjMTctYWIyMy0xODc3
MGUyYjhiZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAncAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAcESSV4xx1LgBVpKOnSV03EGDOKnahgescjU0ONFwfKgJdNzoi9
a/TcQTW25Yk5B4GQcseNIg9dRS7spiHk68f+Bm831ftiyJ4m9CQsHD03Wqi7fqg0
8Ii6gwHOS5STcPVbobVMMvpYypF9ZvjtnRzSqVjN5BA0LcIJSjGEaZh1QCQXKKbS
F+SQMw+eVVHDC14h0Zh4heZ/NnjKJiE2cLoL22QxVZTWSI44c/j6hcz/39big/+N
kH6Ix6jIqW29Xjey9EM29RmIZMStTWLzs2uMkVo6Xlx0gtURgpEueW5iSrHvqk7E
c9UomsiFQCy5HqmMz2C/bh5eUYlFb+9rCyc=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:12:56 2026 by rpki-client