Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4ee3ab41-3902-3f92-a28e-0a15af229ae9.roa
File:                     4ee3ab41-3902-3f92-a28e-0a15af229ae9.roa (raw, json)
Hash identifier:          qYN/MDL+6w6+0EC/HCr6Gg1Wwfk6OH++RuF+tk1kv3M=
Subject key identifier:   CB:1F:51:4B:07:97:0B:AA:BB:E8:BA:CB:EE:99:A7:32:9F:4C:E4:5B
Certificate issuer:       /CN=9305060e-d479-4a8f-8eba-23b31106c750
Certificate serial:       010D0C9F4328584DFBD621D60AE9308BB0859780
Authority key identifier: CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4ee3ab41-3902-3f92-a28e-0a15af229ae9.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     14618
IP address blocks:        2620:12c:8041::/48 maxlen: 48
                          2620:12c:8051::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:21:d6:0a:e9:30:8b:b0:85:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9305060e-d479-4a8f-8eba-23b31106c750
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=fffad8f6-5cd1-4f16-8d6a-9be10fa7c8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:d1:9d:3f:84:4e:e2:9e:2b:8e:6a:40:95:
                    f4:fc:e5:17:6a:bf:c0:d6:da:fb:9f:3e:1c:d8:bd:
                    a8:2d:39:dd:87:cd:ef:47:6a:0b:f8:6a:51:97:e6:
                    86:b2:de:74:fc:20:33:ee:4e:76:33:36:b1:b5:3a:
                    27:dd:e6:b6:e3:3c:4c:38:de:3e:82:32:ea:cf:d4:
                    18:f0:74:79:81:5a:d3:d6:af:73:27:4d:09:07:ea:
                    e5:50:9a:af:33:95:c7:4c:a0:19:e2:1e:b9:63:42:
                    0d:3a:76:59:d3:2a:3d:2d:0f:fd:1c:21:f2:0a:95:
                    12:d9:d6:f3:0b:37:00:e8:8a:72:3f:81:ef:76:41:
                    eb:7b:62:0f:ac:0a:ee:9d:7a:3b:7f:fc:e9:65:b6:
                    2d:68:47:03:c2:5d:16:28:0d:ac:da:94:02:f4:5b:
                    9a:ed:5f:6b:8e:8c:6a:46:74:52:b9:9f:0a:e5:3f:
                    ae:e7:2b:60:d0:18:d1:76:a1:a1:ac:3a:8a:c0:5d:
                    df:e6:ad:13:3f:0b:dd:c4:bf:55:36:5e:75:90:db:
                    88:db:f7:6b:3f:d8:1f:33:38:d6:79:57:e2:e3:91:
                    03:fc:47:06:03:cf:98:93:e2:50:29:00:8b:b5:18:
                    fe:97:05:a5:c1:47:33:41:20:eb:76:cb:d3:a7:36:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1F:51:4B:07:97:0B:AA:BB:E8:BA:CB:EE:99:A7:32:9F:4C:E4:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4ee3ab41-3902-3f92-a28e-0a15af229ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl

            X509v3 Authority Key Identifier:
                keyid:CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12c:8041::/48
                  2620:12c:8051::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d4:14:f4:09:0a:a9:a7:91:14:90:eb:1a:9a:be:57:b3:cf:
         b4:5d:4b:d1:79:a8:1f:51:c7:5a:5c:19:fa:eb:25:ee:08:99:
         c9:6b:97:0e:ef:b9:e1:6a:75:5f:af:62:eb:92:7f:a0:9d:2d:
         2f:68:67:3f:36:25:e5:9b:84:43:de:7a:2a:83:70:74:41:02:
         c1:bd:8b:81:23:d3:4f:f7:f8:2b:c4:37:8f:4d:5b:60:6e:d9:
         4b:af:c3:1d:cf:b0:e1:a3:e9:78:93:44:3a:9d:b0:6e:72:0f:
         4b:85:98:19:d6:e1:a3:a3:7e:2f:31:a4:fb:00:ce:bf:7f:d9:
         34:51:95:62:b9:21:b2:e4:7e:ba:0e:40:2a:bc:34:7b:49:eb:
         b0:16:5a:1b:80:e5:95:45:07:1b:b0:54:70:ff:bd:a6:1e:58:
         25:7f:c5:3d:7d:24:6c:d2:fa:ac:08:5f:56:e9:53:58:10:e5:
         15:e0:f1:f0:5b:ed:be:b6:36:14:61:74:80:6c:e7:02:ec:6a:
         34:6d:c9:b9:77:19:85:ff:80:5c:4f:97:51:07:0f:8a:68:e4:
         62:b8:13:d1:da:4f:a6:cc:44:fa:4e:f6:f1:75:b5:3b:89:53:
         0f:fd:93:4e:21:44:04:49:c2:51:38:b0:8f:fa:97:cf:6d:55:
         1f:f7:36:75
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE371iHWCukwi7CFl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTMwNTA2MGUtZDQ3OS00YThmLThlYmEtMjNiMzExMDZj
NzUwMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk
ZmZmYWQ4ZjYtNWNkMS00ZjE2LThkNmEtOWJlMTBmYTdjOGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL/RnT+ETuKeK45qQJX0/OUXar/A1tr7nz4c
2L2oLTndh83vR2oL+GpRl+aGst50/CAz7k52MzaxtTon3ea24zxMON4+gjLqz9QY
8HR5gVrT1q9zJ00JB+rlUJqvM5XHTKAZ4h65Y0INOnZZ0yo9LQ/9HCHyCpUS2dbz
CzcA6IpyP4HvdkHre2IPrArunXo7f/zpZbYtaEcDwl0WKA2s2pQC9Fua7V9rjoxq
RnRSuZ8K5T+u5ytg0BjRdqGhrDqKwF3f5q0TPwvdxL9VNl51kNuI2/drP9gfMzjW
eVfi45ED/EcGA8+Yk+JQKQCLtRj+lwWlwUczQSDrdsvTpzYXUQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFMsfUUsHlwuqu+i6y+6ZpzKfTORbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85MzA1
MDYwZS1kNDc5LTRhOGYtOGViYS0yM2IzMTEwNmM3NTAvNGVlM2FiNDEtMzkwMi0z
ZjkyLWEyOGUtMGExNWFmMjI5YWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTMwNTA2MGUtZDQ3OS00YThmLThl
YmEtMjNiMzExMDZjNzUwLzkzMDUwNjBlLWQ0NzktNGE4Zi04ZWJhLTIzYjMxMTA2
Yzc1MC5jcmwwHwYDVR0jBBgwFoAUzRCWmVrmSJONILPVSAqCYXP15AEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85MzA1MDYwZS1kNDc5LTRhOGYtOGViYS0yM2Iz
MTEwNmM3NTAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJiABLIBB
AwcAJiABLIBRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADfUFPQJCqmnkRSQ6xqavlezz7RdS9F5qB9Rx1pc
GfrrJe4Imclrlw7vueFqdV+vYuuSf6CdLS9oZz82JeWbhEPeeiqDcHRBAsG9i4Ej
00/3+CvEN49NW2Bu2Uuvwx3PsOGj6XiTRDqdsG5yD0uFmBnW4aOjfi8xpPsAzr9/
2TRRlWK5IbLkfroOQCq8NHtJ67AWWhuA5ZVFBxuwVHD/vaYeWCV/xT19JGzS+qwI
X1bpU1gQ5RXg8fBb7b62NhRhdIBs5wLsajRtybl3GYX/gFxPl1EHD4po5GK4E9Ha
T6bMRPpO9vF1tTuJUw/9k04hRARJwlE4sI/6l89tVR/3NnU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:35 2026 by rpki-client