Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/e5b5ba71-7fc6-3ef3-adc4-d889774d7cd5.roa
File:                     e5b5ba71-7fc6-3ef3-adc4-d889774d7cd5.roa (raw, json)
Hash identifier:          u2DO8rnk4Txs6ud/TMpy/XHF0BVXur4xqrmBac5GWPw=
Subject key identifier:   C4:1A:1E:CB:4C:5D:85:77:E0:AA:85:03:87:E8:57:3F:38:AD:3F:19
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584CBF172D8ED3313973825DE080
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/e5b5ba71-7fc6-3ef3-adc4-d889774d7cd5.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     15331
IP address blocks:        2001:1940:1800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:2d:8e:d3:31:39:73:82:5d:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=2d72f7bf-f741-4724-b915-e57dd9d9a5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:52:ce:9a:cc:0d:4d:8d:d9:b1:61:9f:49:
                    07:15:a6:76:73:51:f0:c1:fc:10:b1:67:90:91:03:
                    e6:cb:c8:36:30:77:89:70:9d:35:3b:d4:fe:5b:ea:
                    a7:7f:f9:da:71:b5:63:c8:2c:e4:71:38:57:a7:ed:
                    01:34:bc:64:d1:88:aa:41:9d:12:9d:71:4c:97:6a:
                    b7:89:a5:b3:b3:9a:69:a6:37:ba:75:8b:26:46:f9:
                    43:c0:07:4a:0b:6c:12:1f:e1:fa:31:d1:b5:50:ec:
                    86:5c:84:fa:a5:a2:3b:22:90:9d:fe:80:3c:2f:40:
                    64:43:7f:8d:86:1f:01:11:d4:fa:76:1c:ed:27:af:
                    6c:47:b9:dc:42:13:cb:1b:2a:2a:be:27:53:2c:af:
                    b2:4e:ec:45:5e:bc:f3:1b:47:3d:9d:03:40:59:da:
                    1b:fd:6c:55:b1:3d:a7:ba:b9:c2:bf:5d:84:3b:da:
                    41:d4:7a:f2:98:85:8b:10:37:64:d9:45:a2:05:8e:
                    43:bf:4a:7f:80:a2:82:0d:d6:82:8d:28:d8:fc:ec:
                    56:ca:9a:49:5f:ef:b0:21:53:91:25:78:e2:7e:5d:
                    a5:68:f0:74:08:d4:42:35:4f:b9:0f:1e:53:69:8f:
                    ba:6f:69:cb:a8:87:84:41:32:bb:db:27:81:87:43:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1A:1E:CB:4C:5D:85:77:E0:AA:85:03:87:E8:57:3F:38:AD:3F:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/e5b5ba71-7fc6-3ef3-adc4-d889774d7cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1940:1800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:35:87:85:45:ae:a6:87:d5:4f:63:90:fc:f9:48:b4:9c:
         c6:97:12:03:06:68:a1:91:f9:b4:ad:fb:d8:0e:86:6b:8c:13:
         18:ab:f8:87:db:19:05:c2:a5:30:0d:09:65:ee:00:af:a2:e7:
         de:c1:0b:ae:9f:be:05:79:73:c9:d5:55:7b:06:d2:34:28:9d:
         ec:37:49:37:6d:e8:20:c7:23:9a:b8:16:73:1b:55:66:c7:f9:
         3a:7b:52:4b:78:ab:fc:db:ca:6a:8b:83:e1:d7:b6:9a:ae:81:
         d9:cc:3a:7f:6e:a0:4d:08:94:11:25:5f:0c:4a:fe:1a:55:10:
         8c:0e:0e:ce:ec:4a:dd:8f:ad:6a:48:6b:71:be:60:9e:4d:07:
         29:20:34:15:57:7d:35:cb:3a:53:7f:5a:01:d4:ef:5e:e0:17:
         a8:e6:22:27:f4:d4:a7:04:5a:d4:ce:bf:43:9a:7d:df:03:ee:
         bb:2e:11:b0:62:ab:6e:97:d2:0b:5d:c0:67:c6:d8:cc:12:a9:
         77:99:45:a9:34:f5:6e:55:4c:39:8a:62:7f:c3:f2:ea:20:fa:
         41:88:41:07:54:69:84:00:60:3b:93:b4:7b:27:f9:b2:5a:90:
         1d:06:a3:d3:bf:89:61:b5:07:fd:83:5c:64:40:0a:c6:b0:18:
         78:60:f3:c1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEy/Fy2O0zE5c4Jd4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz
OGEzMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk
MmQ3MmY3YmYtZjc0MS00NzI0LWI5MTUtZTU3ZGQ5ZDlhNWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwklSzprMDU2N2bFhn0kHFaZ2c1HwwfwQsWeQ
kQPmy8g2MHeJcJ01O9T+W+qnf/nacbVjyCzkcThXp+0BNLxk0YiqQZ0SnXFMl2q3
iaWzs5pppje6dYsmRvlDwAdKC2wSH+H6MdG1UOyGXIT6paI7IpCd/oA8L0BkQ3+N
hh8BEdT6dhztJ69sR7ncQhPLGyoqvidTLK+yTuxFXrzzG0c9nQNAWdob/WxVsT2n
urnCv12EO9pB1HrymIWLEDdk2UWiBY5Dv0p/gKKCDdaCjSjY/OxWyppJX++wIVOR
JXjifl2laPB0CNRCNU+5Dx5TaY+6b2nLqIeEQTK72yeBh0NdTwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMQaHstMXYV34KqFA4foVz84rT8ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3
MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvZTViNWJhNzEtN2ZjNi0z
ZWYzLWFkYzQtZDg4OTc3NGQ3Y2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk
YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj
MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1
NDVlYzM4YTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEZQBgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAL9E1h4VFrqaH1U9jkPz5SLScxpcSAwZooZH5tK372A6Ga4wTGKv4
h9sZBcKlMA0JZe4Ar6Ln3sELrp++BXlzydVVewbSNCid7DdJN23oIMcjmrgWcxtV
Zsf5OntSS3ir/NvKaouD4de2mq6B2cw6f26gTQiUESVfDEr+GlUQjA4OzuxK3Y+t
akhrcb5gnk0HKSA0FVd9Ncs6U39aAdTvXuAXqOYiJ/TUpwRa1M6/Q5p93wPuuy4R
sGKrbpfSC13AZ8bYzBKpd5lFqTT1blVMOYpif8Py6iD6QYhBB1RphABgO5O0eyf5
slqQHQaj07+JYbUH/YNcZEAKxrAYeGDzwQ==
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:48:03 2026 by rpki-client