Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa
File:                     bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa (raw, json)
Hash identifier:          9BobB/A4JnjZPY+yUiPXVAs/Xp+6N5564oJA1D2tSN0=
Subject key identifier:   1B:AA:52:BE:AB:E8:25:27:61:FE:DA:DD:28:9C:E9:35:05:AC:AC:A1
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F4328584D44FA3E6E7552BD6E90BB5800
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     54113
IP address blocks:        2607:71c0:fff0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:3e:6e:75:52:bd:6e:90:bb:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=36011b8d-941a-4e99-84ba-5cc4d0f60c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c6:ab:90:3e:bb:a2:e0:71:2f:41:5b:71:cf:
                    d6:18:6a:68:70:2e:b9:d5:b8:28:21:19:92:83:ce:
                    e6:e3:55:87:24:3c:36:cd:40:c5:51:db:bf:41:05:
                    d6:c2:00:62:76:97:6d:60:d0:72:09:44:c5:7e:df:
                    86:40:cd:be:be:4c:e9:2b:8f:ef:af:3c:d8:e8:56:
                    6f:55:e2:94:48:66:c1:9b:4e:7b:12:03:81:75:13:
                    98:a2:60:f7:1e:4b:ab:7e:84:80:4b:7e:90:57:56:
                    0d:ae:36:87:dd:30:1a:1d:32:2c:42:75:01:e3:dc:
                    c0:0c:02:74:ae:31:b3:f4:7d:77:b3:d4:90:f3:3b:
                    b6:d5:fd:cc:8c:91:89:f7:d4:07:bc:58:9b:ea:49:
                    92:a0:92:aa:c7:b6:7e:af:82:d8:2f:53:9d:df:a4:
                    5c:52:db:42:14:a6:b6:d7:38:c3:03:b0:ee:cc:30:
                    fb:89:54:6c:47:0c:70:e3:62:8c:23:a6:51:90:1e:
                    52:9d:8b:a0:8b:25:88:c7:6b:cb:0f:d2:0e:de:47:
                    db:14:2c:11:90:44:a4:16:7a:b8:3e:dd:e9:25:97:
                    a6:c3:de:4c:58:76:f2:6d:5e:df:3c:41:bb:e6:3a:
                    b0:11:e4:56:7f:ed:bd:b6:c8:e4:9d:bd:f5:06:08:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AA:52:BE:AB:E8:25:27:61:FE:DA:DD:28:9C:E9:35:05:AC:AC:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:71c0:fff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:62:7e:c5:79:79:3f:ba:96:39:5a:08:3d:c7:eb:7b:d1:2f:
         c7:8f:b5:33:28:78:f1:af:99:8f:3a:96:22:26:63:8d:64:81:
         5c:09:fd:7e:c8:9f:36:b7:22:1c:c4:55:d0:e0:84:34:14:64:
         ec:7f:f8:97:43:60:c6:eb:06:e6:c6:87:dd:24:87:56:a2:49:
         99:8c:ea:c3:fe:00:97:0c:8e:6e:e1:32:cc:b6:ed:d4:30:f5:
         32:1c:19:33:66:55:d1:51:62:d4:2a:ed:b1:54:6a:f7:34:4f:
         87:e5:00:4b:76:26:32:ee:9f:23:b3:8f:73:07:01:b4:7c:0a:
         72:ea:1e:b3:1f:39:b2:78:f3:f0:ee:c0:2a:54:19:34:02:5d:
         35:e2:77:3d:28:df:cb:2a:f4:5e:00:21:be:d6:b7:09:05:fd:
         00:d2:4c:2e:84:27:8b:3b:d3:4d:e8:b7:99:eb:f4:b7:21:4c:
         b2:22:0d:71:1f:3c:c0:03:8d:35:c8:4f:70:47:a2:3f:16:a5:
         bc:3a:3b:0a:24:84:06:ee:a6:0d:dc:25:58:33:1b:88:35:76:
         68:69:54:46:8d:e2:8f:ec:7b:17:0e:a9:9d:80:e3:03:04:d9:
         08:3f:84:e7:3f:c3:53:cd:07:0f:a6:ed:1d:b7:d7:d7:ca:c7:
         3c:ea:51:8a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1E+j5udVK9bpC7WAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk
ZGI1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
MzYwMTFiOGQtOTQxYS00ZTk5LTg0YmEtNWNjNGQwZjYwYzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcarkD67ouBxL0Fbcc/WGGpocC651bgoIRmS
g87m41WHJDw2zUDFUdu/QQXWwgBidpdtYNByCUTFft+GQM2+vkzpK4/vrzzY6FZv
VeKUSGbBm057EgOBdROYomD3HkurfoSAS36QV1YNrjaH3TAaHTIsQnUB49zADAJ0
rjGz9H13s9SQ8zu21f3MjJGJ99QHvFib6kmSoJKqx7Z+r4LYL1Od36RcUttCFKa2
1zjDA7DuzDD7iVRsRwxw42KMI6ZRkB5SnYugiyWIx2vLD9IO3kfbFCwRkESkFnq4
Pt3pJZemw95MWHbybV7fPEG75jqwEeRWf+29tsjknb31Bgji0wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBuqUr6r6CUnYf7a3Sic6TUFrKyhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj
MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvYmYxYmI0OTgtYjhhMS0z
YjE5LTg3NmUtNDIzZjBkZjZkZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi
MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl
ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1
YWRkZWRkYjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgdxwP/w
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJtifsV5eT+6ljlaCD3H63vRL8ePtTMoePGvmY86liImY41kgVwJ
/X7Inza3IhzEVdDghDQUZOx/+JdDYMbrBubGh90kh1aiSZmM6sP+AJcMjm7hMsy2
7dQw9TIcGTNmVdFRYtQq7bFUavc0T4flAEt2JjLunyOzj3MHAbR8CnLqHrMfObJ4
8/DuwCpUGTQCXTXidz0o38sq9F4AIb7WtwkF/QDSTC6EJ4s7003ot5nr9LchTLIi
DXEfPMADjTXIT3BHoj8Wpbw6OwokhAbupg3cJVgzG4g1dmhpVEaN4o/sexcOqZ2A
4wME2Qg/hOc/w1PNBw+m7R2319fKxzzqUYo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:24 2026 by rpki-client