Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/93dcdc8d-52fd-33d8-b74d-9c67e6188df1.roa
File:                     93dcdc8d-52fd-33d8-b74d-9c67e6188df1.roa (raw, json)
Hash identifier:          +DcMyYPTLupBPjOZpEmEdZ2fm5QrpsKdXypaMh00zUg=
Subject key identifier:   48:D0:F8:07:7F:81:8F:18:9A:DE:F6:CA:9D:BE:C5:48:69:7A:C0:8D
Certificate issuer:       /CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
Certificate serial:       010D0C9F4328584CB121DE2B16EECFEDD9FB7B00
Authority key identifier: D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/93dcdc8d-52fd-33d8-b74d-9c67e6188df1.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        2604:f340:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:de:2b:16:ee:cf:ed:d9:fb:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=fe8baf42-72bd-4500-840c-de5e397de4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b7:c8:77:fd:88:ff:59:8f:a3:03:f0:d0:38:
                    b1:35:6e:56:31:c1:32:1f:dc:c6:2d:7e:ad:07:b1:
                    38:27:76:39:bf:e4:ef:82:e9:75:12:28:73:3c:49:
                    05:62:e3:3b:57:8f:58:1e:88:61:ce:58:45:8a:d5:
                    9c:5d:32:2b:d8:39:7d:e5:e6:b4:4f:54:8c:2e:bc:
                    fa:e6:95:1c:19:14:6d:23:cc:71:6f:f5:f9:ad:2e:
                    98:c4:a6:ec:93:d3:ae:85:1b:d6:19:24:2f:5f:12:
                    35:a9:04:f5:25:85:c3:79:b5:e8:bd:d4:2b:d2:ad:
                    b4:d4:c4:a1:f6:fc:8f:c1:97:d3:56:e8:18:61:ef:
                    ce:8e:1f:5f:9e:57:d6:bf:b4:65:82:b1:bc:e7:13:
                    49:43:2e:ba:0b:e5:33:fb:91:b7:80:db:89:c6:c7:
                    c9:05:0e:40:c0:c8:fe:88:27:89:12:ce:45:dd:47:
                    d2:3d:1d:ac:4e:72:52:5d:84:9f:38:12:c9:3d:99:
                    51:15:4e:42:7d:b8:19:dd:44:4e:2e:06:f0:b7:62:
                    97:31:73:ee:69:7f:df:5a:10:73:0e:4c:24:a1:2f:
                    83:2c:10:f2:d4:47:e3:da:48:5c:a0:d9:64:0d:68:
                    3c:eb:8d:13:69:73:c0:58:29:a3:36:73:c0:5c:5d:
                    28:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D0:F8:07:7F:81:8F:18:9A:DE:F6:CA:9D:BE:C5:48:69:7A:C0:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/93dcdc8d-52fd-33d8-b74d-9c67e6188df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl

            X509v3 Authority Key Identifier:
                keyid:D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f340:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:e9:eb:c1:d6:0e:3b:50:e1:ac:f5:72:66:be:c7:bb:92:9b:
         de:f4:6a:79:8f:d2:f9:1e:ea:12:2a:1c:ae:c9:ac:5c:71:00:
         0b:cd:00:77:af:b3:06:0e:95:fb:33:c8:c9:a7:0f:f4:9f:cf:
         a6:4c:18:6c:1f:f5:41:dc:81:8c:0f:ce:1b:34:fe:85:9f:c3:
         92:be:52:7a:2a:08:b3:3f:4b:ec:73:d9:68:e2:d4:37:a4:39:
         e2:77:c9:04:8f:95:ec:73:3c:b9:09:24:19:03:d3:44:09:e0:
         79:1e:25:7e:5c:96:2e:6c:92:a1:e5:90:86:89:e9:5b:70:4a:
         11:14:25:3e:2c:66:4f:9b:5e:df:4e:73:73:55:08:aa:ab:3a:
         08:e1:f4:0c:50:8e:c9:7b:a7:e3:79:53:04:e9:4d:a8:f3:dd:
         0c:06:8b:e8:9f:5d:e6:cd:9e:47:5c:c0:d2:ef:f0:aa:58:ec:
         5b:19:fe:1e:c0:e7:cf:06:7e:37:fe:ac:4b:0e:ce:f5:ac:fb:
         2d:89:c4:44:c0:f2:a8:84:71:b4:12:ee:f4:a4:74:ef:b8:ab:
         49:83:70:40:d8:bf:ad:9e:14:c7:43:82:37:02:ed:a3:e9:0b:
         a1:00:89:e4:39:5e:a2:73:ba:7b:3c:85:0c:b1:3a:1c:e1:02:
         6e:53:bb:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyxId4rFu7P7dn7ewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGE1YzE4NGUtMGY0Ni00MmNiLWE3N2QtM2YzZDgzNzY1
N2E1MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk
ZmU4YmFmNDItNzJiZC00NTAwLTg0MGMtZGU1ZTM5N2RlNGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67fId/2I/1mPowPw0DixNW5WMcEyH9zGLX6t
B7E4J3Y5v+Tvgul1EihzPEkFYuM7V49YHohhzlhFitWcXTIr2Dl95ea0T1SMLrz6
5pUcGRRtI8xxb/X5rS6YxKbsk9OuhRvWGSQvXxI1qQT1JYXDebXovdQr0q201MSh
9vyPwZfTVugYYe/Ojh9fnlfWv7RlgrG85xNJQy66C+Uz+5G3gNuJxsfJBQ5AwMj+
iCeJEs5F3UfSPR2sTnJSXYSfOBLJPZlRFU5CfbgZ3UROLgbwt2KXMXPuaX/fWhBz
DkwkoS+DLBDy1Efj2khcoNlkDWg8640TaXPAWCmjNnPAXF0oOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEjQ+Ad/gY8Ymt72yp2+xUhpesCNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTVj
MTg0ZS0wZjQ2LTQyY2ItYTc3ZC0zZjNkODM3NjU3YTUvOTNkY2RjOGQtNTJmZC0z
M2Q4LWI3NGQtOWM2N2U2MTg4ZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGE1YzE4NGUtMGY0Ni00MmNiLWE3
N2QtM2YzZDgzNzY1N2E1L2RhNWMxODRlLTBmNDYtNDJjYi1hNzdkLTNmM2Q4Mzc2
NTdhNS5jcmwwHwYDVR0jBBgwFoAU0oESifv6FC+XVnKdfx8Crg8pKY0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kYTVjMTg0ZS0wZjQ2LTQyY2ItYTc3ZC0zZjNk
ODM3NjU3YTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTzQAEB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG3p68HWDjtQ4az1cma+x7uSm970anmP0vke6hIqHK7JrFxxAAvN
AHevswYOlfszyMmnD/Sfz6ZMGGwf9UHcgYwPzhs0/oWfw5K+UnoqCLM/S+xz2Wji
1DekOeJ3yQSPlexzPLkJJBkD00QJ4HkeJX5cli5skqHlkIaJ6VtwShEUJT4sZk+b
Xt9Oc3NVCKqrOgjh9AxQjsl7p+N5UwTpTajz3QwGi+ifXebNnkdcwNLv8KpY7FsZ
/h7A588Gfjf+rEsOzvWs+y2JxETA8qiEcbQS7vSkdO+4q0mDcEDYv62eFMdDgjcC
7aPpC6EAieQ5XqJzuns8hQyxOhzhAm5Tu9s=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:43 2026 by rpki-client