Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/bbca6172-f0f1-3299-8cdc-f3d17115c85b.roa
File:                     bbca6172-f0f1-3299-8cdc-f3d17115c85b.roa (raw, json)
Hash identifier:          Eoa9aKRxwLE64qh+DaQEl3jowiIXNT1FSpL6AXzw7Us=
Subject key identifier:   C9:D3:86:44:F2:4A:69:C3:A3:A8:68:91:E6:8F:F7:AD:AC:E9:09:DB
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584DC5659EE893BFFB5771C36080
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/bbca6172-f0f1-3299-8cdc-f3d17115c85b.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     22828
IP address blocks:        2607:f220:300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:9e:e8:93:bf:fb:57:71:c3:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=70c6db34-c789-4723-85ea-c4f5f84b8da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:c9:43:2e:12:5c:58:d7:46:94:d1:9f:9d:
                    db:77:41:8f:57:1e:ab:ef:3e:08:9f:73:5a:47:4a:
                    f5:e7:83:ae:bd:2b:42:0f:f2:6e:a7:87:af:8c:d0:
                    c9:22:cb:0b:13:ca:ed:30:8a:b2:0d:25:c1:21:0d:
                    91:ae:f3:86:08:45:8b:05:83:71:39:08:2a:40:26:
                    71:85:5a:a2:70:d9:59:fa:5b:77:4c:d8:1c:ee:46:
                    fe:30:07:6a:bf:56:f3:c8:52:8f:ca:ba:27:cb:1c:
                    05:cb:91:cd:5d:55:9d:42:5b:85:b4:41:47:67:22:
                    c7:73:34:8a:4f:6f:ac:0d:7d:99:3b:db:52:6d:9d:
                    fa:03:be:4f:79:c1:d3:f8:7e:c1:9e:bd:f3:2c:89:
                    6a:c4:5d:d7:61:92:2f:ab:6a:e9:26:02:4f:0a:f9:
                    8f:01:59:7f:32:f5:80:60:07:29:14:6e:7b:07:10:
                    54:c5:6d:e9:44:d5:8e:b2:d7:32:54:ca:1d:66:39:
                    83:31:07:47:8c:47:81:e0:a7:9b:a9:79:af:08:19:
                    f9:d0:fe:67:3a:97:a6:cc:09:32:94:e9:44:e3:01:
                    36:17:f6:55:96:86:2f:03:b3:0d:d0:f8:ad:ec:98:
                    b6:3c:4f:da:27:df:e0:4d:e2:b2:26:1e:7c:7a:cc:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D3:86:44:F2:4A:69:C3:A3:A8:68:91:E6:8F:F7:AD:AC:E9:09:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/bbca6172-f0f1-3299-8cdc-f3d17115c85b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f220:300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ae:53:b4:0e:9e:02:eb:9e:94:53:cd:42:66:9a:4b:2c:60:
         04:ed:7d:9d:70:5b:e5:77:df:82:e8:ee:db:b6:af:0e:95:97:
         2d:0a:0c:e3:bc:4e:32:f9:a9:6d:6f:23:15:25:41:13:3a:77:
         7b:2e:4d:d3:94:e1:cf:1f:c6:e8:0d:c7:ba:00:91:91:c2:50:
         58:1e:bb:72:72:2a:bb:31:d5:13:e8:8f:a8:34:9c:61:4a:a4:
         27:2a:83:fe:65:54:69:1a:bc:7c:21:bb:92:de:a5:65:1b:44:
         01:2a:c8:a4:57:44:22:84:0f:20:71:0a:0c:db:f7:e1:cd:d8:
         87:a1:7c:81:e6:9b:0a:a1:24:30:b2:f1:bf:e6:28:ee:0e:91:
         14:96:64:ba:8d:60:51:9c:c3:c4:89:df:6d:19:62:4f:56:5d:
         65:41:1c:71:3e:01:49:d6:82:fc:14:a8:33:51:44:9d:10:15:
         f5:cb:6d:7d:96:3b:d9:cd:4e:b7:3a:6c:95:07:d8:31:8c:8a:
         80:82:3c:e2:a2:9d:91:8a:69:98:c2:ea:79:cf:85:7f:35:79:
         7b:e7:e0:77:fe:fe:a9:56:54:4c:48:84:5c:f3:fa:16:59:7f:
         8d:04:7e:53:0a:9b:fd:9b:86:7e:78:45:90:92:57:98:83:8b:
         26:3a:69:64
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3FZZ7ok7/7V3HDYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmEzMGIyMDctZGUwNC00MjVmLTk0ZTktZWUxMmQ0NTI5
ZjU2MB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
NzBjNmRiMzQtYzc4OS00NzIzLTg1ZWEtYzRmNWY4NGI4ZGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7vJQy4SXFjXRpTRn53bd0GPVx6r7z4In3Na
R0r154OuvStCD/Jup4evjNDJIssLE8rtMIqyDSXBIQ2RrvOGCEWLBYNxOQgqQCZx
hVqicNlZ+lt3TNgc7kb+MAdqv1bzyFKPyronyxwFy5HNXVWdQluFtEFHZyLHczSK
T2+sDX2ZO9tSbZ36A75PecHT+H7Bnr3zLIlqxF3XYZIvq2rpJgJPCvmPAVl/MvWA
YAcpFG57BxBUxW3pRNWOstcyVModZjmDMQdHjEeB4KebqXmvCBn50P5nOpemzAky
lOlE4wE2F/ZVloYvA7MN0Pit7Ji2PE/aJ9/gTeKyJh58esyk6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMnThkTySmnDo6hokeaP962s6QnbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YTMw
YjIwNy1kZTA0LTQyNWYtOTRlOS1lZTEyZDQ1MjlmNTYvYmJjYTYxNzItZjBmMS0z
Mjk5LThjZGMtZjNkMTcxMTVjODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmEzMGIyMDctZGUwNC00MjVmLTk0
ZTktZWUxMmQ0NTI5ZjU2LzZhMzBiMjA3LWRlMDQtNDI1Zi05NGU5LWVlMTJkNDUy
OWY1Ni5jcmwwHwYDVR0jBBgwFoAUT/I+sSc3DCrh5M6hhc6s7CFLddYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YTMwYjIwNy1kZTA0LTQyNWYtOTRlOS1lZTEy
ZDQ1MjlmNTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfyIAMA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACmuU7QOngLrnpRTzUJmmkssYATtfZ1wW+V334Lo7tu2rw6Vly0K
DOO8TjL5qW1vIxUlQRM6d3suTdOU4c8fxugNx7oAkZHCUFgeu3JyKrsx1RPoj6g0
nGFKpCcqg/5lVGkavHwhu5LepWUbRAEqyKRXRCKEDyBxCgzb9+HN2IehfIHmmwqh
JDCy8b/mKO4OkRSWZLqNYFGcw8SJ320ZYk9WXWVBHHE+AUnWgvwUqDNRRJ0QFfXL
bX2WO9nNTrc6bJUH2DGMioCCPOKinZGKaZjC6nnPhX81eXvn4Hf+/qlWVExIhFzz
+hZZf40EflMKm/2bhn54RZCSV5iDiyY6aWQ=
-----END CERTIFICATE-----
Generated at Wed May 13 17:48:07 2026 by rpki-client