Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89171cb8-bdd4-300e-8011-3c5ea18edb46.roa
File:                     89171cb8-bdd4-300e-8011-3c5ea18edb46.roa (raw, json)
Hash identifier:          qc5Ymglt4mUCZic7aa7RCnxW11onqpPccjE7vQ+1uH0=
Subject key identifier:   26:B1:47:6E:C3:C6:42:99:62:FC:A8:B4:6D:2E:AA:7A:2F:95:DA:60
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584D571FBCA1E717E1F856EFCE30
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89171cb8-bdd4-300e-8011-3c5ea18edb46.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     54113
IP address blocks:        2620:11a:c021::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:bc:a1:e7:17:e1:f8:56:ef:ce:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=14cf9b99-fc4f-402f-8fa1-4a390a93df2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:36:ca:53:4a:30:f6:87:ce:34:4f:63:2f:
                    6c:3f:e5:6d:5c:15:60:30:b5:11:8e:2d:a2:f6:cc:
                    5e:dd:fc:14:75:ef:a5:c5:b0:3c:aa:5f:4e:18:ed:
                    9e:d1:c6:97:17:93:2a:1a:93:e0:31:e4:dd:36:75:
                    75:f3:49:a1:43:7d:b4:87:0c:cb:e5:cb:92:fe:15:
                    7b:67:9b:05:27:02:b8:98:78:c0:c1:c9:d7:93:cc:
                    03:84:65:65:01:87:df:40:33:16:56:83:f7:57:16:
                    46:3d:a3:80:b4:1b:24:ba:82:7e:ba:13:80:e6:14:
                    44:99:8e:3b:0c:39:ac:0d:65:5c:3c:95:b3:63:73:
                    6b:75:50:77:37:2d:ae:ce:f6:48:59:40:25:6b:28:
                    9e:3a:05:d1:ee:51:65:66:49:eb:c6:ed:76:3a:d3:
                    58:d5:e8:ad:9d:01:a2:93:9c:f3:74:42:f4:4e:fd:
                    51:64:f7:20:03:ae:a7:e4:45:f6:d3:9b:24:a7:af:
                    a7:70:93:86:fd:70:72:f2:82:d4:c9:d5:cb:e0:3e:
                    a6:e4:3c:10:ef:4f:a2:87:cb:e5:42:28:60:6a:32:
                    2e:17:5a:93:2a:ba:03:5c:f4:b3:55:68:57:9f:a0:
                    09:62:31:96:67:5f:64:b3:29:9a:42:bd:9c:43:98:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B1:47:6E:C3:C6:42:99:62:FC:A8:B4:6D:2E:AA:7A:2F:95:DA:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89171cb8-bdd4-300e-8011-3c5ea18edb46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c021::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:9b:9b:14:a7:df:f2:68:0f:dc:dc:05:ee:37:d7:41:b1:d0:
         0f:26:97:85:36:b0:3c:1c:41:3e:57:1f:a2:f9:ab:15:d7:f9:
         58:74:a7:ae:30:3a:40:b6:64:d0:0a:bc:b0:1a:e1:92:94:e6:
         31:ed:18:aa:13:6c:00:35:de:a3:b3:67:2d:c4:44:59:12:ca:
         56:b2:5e:d9:d2:cb:7d:bb:0a:ab:26:74:08:32:e6:20:98:41:
         0e:01:12:34:a5:15:4c:a8:1b:f3:9a:e5:18:c5:96:8e:3e:41:
         01:d3:45:a0:5b:8d:99:75:ec:d5:cb:cf:39:27:e2:09:00:12:
         ce:f2:1a:ff:40:44:fb:28:ee:3d:ce:f3:2e:04:4a:33:80:ef:
         94:4a:f4:64:79:84:29:da:6c:24:47:5b:f4:16:bd:98:d5:b5:
         66:e4:f4:9e:bf:aa:4e:38:b3:a1:81:00:65:fb:7f:56:f1:f2:
         aa:ab:0d:8e:30:14:f8:0c:f7:a0:af:a6:64:40:7e:6a:0f:12:
         d2:52:3d:b8:98:ad:9a:01:4c:10:6f:68:64:5a:00:fa:74:6c:
         1f:8e:a1:94:ab:ba:c8:12:13:d3:dd:39:2f:18:03:67:2e:bd:
         c2:6e:d8:6d:7d:7c:5e:2f:4e:ca:dc:d6:bd:13:5d:c5:46:0d:
         57:af:fb:d5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1XH7yh5xfh+FbvzjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
MTRjZjliOTktZmM0Zi00MDJmLThmYTEtNGEzOTBhOTNkZjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP82ylNKMPaHzjRPYy9sP+VtXBVgMLURji2i
9sxe3fwUde+lxbA8ql9OGO2e0caXF5MqGpPgMeTdNnV180mhQ320hwzL5cuS/hV7
Z5sFJwK4mHjAwcnXk8wDhGVlAYffQDMWVoP3VxZGPaOAtBskuoJ+uhOA5hREmY47
DDmsDWVcPJWzY3NrdVB3Ny2uzvZIWUAlayieOgXR7lFlZknrxu12OtNY1eitnQGi
k5zzdEL0Tv1RZPcgA66n5EX205skp6+ncJOG/XBy8oLUydXL4D6m5DwQ70+ih8vl
QihgajIuF1qTKroDXPSzVWhXn6AJYjGWZ19ksymaQr2cQ5iXAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCaxR27DxkKZYvyotG0uqnovldpgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvODkxNzFjYjgtYmRkNC0z
MDBlLTgwMTEtM2M1ZWExOGVkYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGsAh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAabmxSn3/JoD9zcBe4310Gx0A8ml4U2sDwcQT5XH6L5qxXX+Vh0
p64wOkC2ZNAKvLAa4ZKU5jHtGKoTbAA13qOzZy3ERFkSylayXtnSy327CqsmdAgy
5iCYQQ4BEjSlFUyoG/Oa5RjFlo4+QQHTRaBbjZl17NXLzzkn4gkAEs7yGv9ARPso
7j3O8y4ESjOA75RK9GR5hCnabCRHW/QWvZjVtWbk9J6/qk44s6GBAGX7f1bx8qqr
DY4wFPgM96CvpmRAfmoPEtJSPbiYrZoBTBBvaGRaAPp0bB+OoZSrusgSE9PdOS8Y
A2cuvcJu2G19fF4vTsrc1r0TXcVGDVev+9U=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:53:02 2026 by rpki-client