Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/dcf6abac-3278-34ff-858f-216949196e32.roa
File:                     dcf6abac-3278-34ff-858f-216949196e32.roa (raw, json)
Hash identifier:          s5//cKbW3SXCUwZ8+ofxS+T/4BKFhm/VsGDTJQ599kA=
Subject key identifier:   BD:82:61:A8:14:1D:94:44:6B:2B:CA:73:46:BA:06:62:7E:A2:5D:E8
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584D80FFE7ED62A8914627D2DA00
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/dcf6abac-3278-34ff-858f-216949196e32.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     9009
IP address blocks:        2607:6b80:33::/48 maxlen: 48
                          2607:6b80:34::/48 maxlen: 48
                          2607:6b80:35::/48 maxlen: 48
                          2607:6b80:37::/48 maxlen: 48
                          2607:6b80:38::/48 maxlen: 48
                          2607:6b80:5c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:e7:ed:62:a8:91:46:27:d2:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=b364c51c-c76b-47d8-9bf3-06799cbdc1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:98:03:0f:34:43:f6:61:58:1f:6b:ac:02:99:
                    bc:09:1d:24:b4:26:ab:06:22:7e:fc:8b:c2:d1:43:
                    7c:3e:ac:ea:21:01:8a:cf:85:0d:a5:08:e4:27:00:
                    91:05:da:18:2e:8d:1e:a6:b3:85:80:c0:60:e3:93:
                    1b:6d:96:7d:92:3b:08:7f:10:78:6e:de:39:68:87:
                    a8:97:6a:ae:38:83:37:dc:47:5e:f6:19:62:2b:fd:
                    6e:c3:3f:37:40:39:04:b1:78:aa:47:6f:89:c2:a2:
                    15:b0:be:2a:8f:fc:6f:5f:1d:dd:2b:ff:c9:4c:fd:
                    fb:bd:c9:9e:c9:c2:27:1e:4e:2d:de:fc:78:8f:cd:
                    ff:d5:32:02:e6:d3:11:d1:3a:88:15:e3:2d:f8:00:
                    34:d0:3b:d7:15:1c:a0:7e:d1:1b:0d:ac:54:90:11:
                    c8:73:31:3b:90:cf:af:ca:67:ed:de:37:c9:6a:be:
                    6c:ca:59:5b:db:26:c4:7e:37:9d:f7:cf:69:ea:59:
                    8b:07:4c:0f:2a:c9:6a:50:07:e1:e1:b7:76:f8:52:
                    b6:45:4f:c9:06:3f:14:6d:0b:2e:8e:b4:88:2a:da:
                    b2:41:7f:0c:7b:52:a6:6c:80:d0:f5:f9:0a:61:5f:
                    be:12:2d:87:eb:6c:d1:8c:18:60:30:bf:01:cc:6c:
                    18:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:82:61:A8:14:1D:94:44:6B:2B:CA:73:46:BA:06:62:7E:A2:5D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/dcf6abac-3278-34ff-858f-216949196e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:33::-2607:6b80:35:ffff:ffff:ffff:ffff:ffff
                  2607:6b80:37::-2607:6b80:38:ffff:ffff:ffff:ffff:ffff
                  2607:6b80:5c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:40:b1:28:ca:b3:06:6c:2d:e8:6a:67:51:ee:39:8d:d2:ca:
         97:1d:34:4b:e1:3b:e7:de:dd:33:c0:a3:fb:73:a5:20:c8:ae:
         5b:fe:e0:b9:98:de:b5:4c:a0:99:dd:e0:5e:bf:56:36:1e:4c:
         e6:83:b9:01:fd:48:97:b4:8f:d7:9e:3f:11:75:10:1e:69:34:
         32:86:92:6a:19:4b:b7:a1:e1:12:95:52:7a:06:85:a4:a6:aa:
         73:d1:93:1d:6a:2e:13:c8:05:49:a7:88:2c:4f:51:7c:a7:01:
         d6:5c:83:d8:15:d8:2f:b4:e7:11:22:71:e5:a6:ad:4c:a0:0b:
         0e:55:2c:2c:60:92:85:bb:56:06:45:77:ca:51:87:44:ba:14:
         bd:69:58:9e:ef:ce:fa:51:18:f3:b2:33:fd:73:7d:60:4d:36:
         b8:f2:2a:39:f8:04:db:b5:c7:45:0a:bb:ac:28:b0:54:e6:b2:
         0a:02:a3:ac:d3:b1:a1:69:e3:86:37:6a:1e:32:7c:d0:c3:13:
         9d:88:5c:f3:88:c1:f5:9a:a9:9f:ed:16:97:f9:04:71:36:08:
         fd:b0:18:42:17:9f:ae:1d:00:1a:19:38:be:61:77:8d:a8:e1:
         38:9c:34:ee:94:b3:38:1a:8d:20:c1:9c:2a:8f:ef:bd:df:7b:
         b8:4c:dc:6d
-----BEGIN CERTIFICATE-----
MIIGbjCCBVagAwIBAgIUAQ0Mn0MoWE2A/+ftYqiRRifS2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
YjM2NGM1MWMtYzc2Yi00N2Q4LTliZjMtMDY3OTljYmRjMWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJgDDzRD9mFYH2usApm8CR0ktCarBiJ+/IvC
0UN8PqzqIQGKz4UNpQjkJwCRBdoYLo0eprOFgMBg45MbbZZ9kjsIfxB4bt45aIeo
l2quOIM33Ede9hliK/1uwz83QDkEsXiqR2+JwqIVsL4qj/xvXx3dK//JTP37vcme
ycInHk4t3vx4j83/1TIC5tMR0TqIFeMt+AA00DvXFRygftEbDaxUkBHIczE7kM+v
ymft3jfJar5syllb2ybEfjed989p6lmLB0wPKslqUAfh4bd2+FK2RU/JBj8UbQsu
jrSIKtqyQX8Me1KmbIDQ9fkKYV++Ei2H62zRjBhgML8BzGwYwQIDAQABo4IDgDCC
A3wwHQYDVR0OBBYEFL2CYagUHZREayvKc0a6BmJ+ol3oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvZGNmNmFiYWMtMzI3OC0z
NGZmLTg1OGYtMjE2OTQ5MTk2ZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxMBIDBwAmB2uA
ADMDBwEmB2uAADQwEgMHACYHa4AANwMHACYHa4AAOAMHACYHa4AAXDBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQAoQLEoyrMGbC3oamdR7jmN0sqXHTRL4Tvn3t0zwKP7c6UgyK5b/uC5mN61TKCZ
3eBev1Y2Hkzmg7kB/UiXtI/Xnj8RdRAeaTQyhpJqGUu3oeESlVJ6BoWkpqpz0ZMd
ai4TyAVJp4gsT1F8pwHWXIPYFdgvtOcRInHlpq1MoAsOVSwsYJKFu1YGRXfKUYdE
uhS9aVie7876URjzsjP9c31gTTa48io5+ATbtcdFCrusKLBU5rIKAqOs07GhaeOG
N2oeMnzQwxOdiFzziMH1mqmf7RaX+QRxNgj9sBhCF5+uHQAaGTi+YXeNqOE4nDTu
lLM4Go0gwZwqj++933u4TNxt
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:54 2026 by rpki-client