Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/eb013a9a-d801-3e69-8a6f-33ac66afb2f7.roa
File:                     eb013a9a-d801-3e69-8a6f-33ac66afb2f7.roa (raw, json)
Hash identifier:          Sct41gd8M1PbTrxEWN7l0/j0S5xr/cVIRgmv1od9f7w=
Subject key identifier:   BB:3F:45:21:8B:B1:C1:6E:B7:69:E1:D6:0E:49:4E:28:8F:06:D0:3B
Certificate issuer:       /CN=603ec9c3-6a7f-4455-baee-5999e253e735
Certificate serial:       010D0C9F4328584D3F64E932A8F7F01350F04D40
Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/eb013a9a-d801-3e69-8a6f-33ac66afb2f7.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     3676
IP address blocks:        2620:0:e50::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:e9:32:a8:f7:f0:13:50:f0:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=3aea75d1-0c6a-45b1-907a-227202473ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3f:c9:81:50:32:54:2c:23:c3:59:2a:3a:57:
                    ed:84:69:fe:8e:c2:0d:89:f1:c6:61:b2:44:31:37:
                    b4:3d:8b:b3:4d:29:2a:aa:78:3e:bf:ae:4b:66:9c:
                    0a:ff:15:96:06:3a:65:a7:2b:fa:19:d1:d5:96:fb:
                    18:da:fa:e0:a2:68:69:5f:f7:3f:b2:9d:cc:dc:a6:
                    c9:6c:fa:f6:ff:f2:e0:22:23:a1:d1:a0:28:af:9d:
                    a4:b4:e0:af:e8:ae:b0:d3:f7:ef:6c:69:a7:0b:b3:
                    0e:e5:5a:56:9a:f5:fc:da:98:0d:f9:53:9a:45:87:
                    4a:41:38:e0:58:2c:72:6a:88:27:75:64:06:a3:4a:
                    f4:39:a4:5d:9d:68:06:1b:9b:02:25:bb:29:99:61:
                    c8:fd:7c:d0:9e:32:3b:b1:be:74:53:5f:6c:da:ea:
                    68:e8:ee:6a:10:5d:64:3c:83:85:16:da:36:80:d4:
                    5a:c1:f2:8a:4b:2a:52:97:c7:ed:b1:fe:1f:6b:cc:
                    3a:93:60:b1:01:75:a3:31:c7:77:1f:9e:38:74:56:
                    3f:5c:36:9f:7b:da:09:19:ed:05:a8:7a:c6:82:9e:
                    5e:72:a1:f8:62:3e:5d:1d:e0:fc:6a:19:c7:09:aa:
                    fe:54:0c:f2:c8:b3:91:3d:8b:35:df:ed:66:95:b5:
                    17:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3F:45:21:8B:B1:C1:6E:B7:69:E1:D6:0E:49:4E:28:8F:06:D0:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/eb013a9a-d801-3e69-8a6f-33ac66afb2f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl

            X509v3 Authority Key Identifier:
                keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:e50::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:a9:ac:16:0c:f2:c0:ba:32:30:80:ad:42:8e:fe:01:4e:2b:
         a2:0f:e3:2c:68:ed:61:58:bf:56:1e:b6:a6:9c:e2:a6:b8:1c:
         d1:d1:99:63:5a:95:b9:49:fb:79:26:2a:88:92:de:94:db:29:
         db:b2:f0:aa:87:72:77:c7:c1:e9:5f:78:af:02:d2:c9:60:df:
         a4:7c:2e:75:cd:0c:43:99:ae:0f:42:e0:cb:1a:22:74:9f:b1:
         bd:4d:ef:8f:d1:f8:4b:de:af:fa:44:a9:4b:4b:9f:a6:f9:10:
         71:07:8e:79:65:74:ab:0d:fa:b4:55:cf:72:df:a3:65:7f:fc:
         17:df:eb:5a:2e:14:09:41:56:a9:97:5a:57:fd:34:5d:8a:31:
         1d:ca:6b:37:1f:1c:e4:ae:a0:4f:d6:6a:cc:cc:b5:4a:e4:fd:
         46:7c:34:e9:59:fc:25:f1:a2:b4:8f:c4:31:74:43:c8:44:e5:
         12:72:06:b2:68:00:27:d3:49:c1:bc:29:c7:9f:bb:86:56:a6:
         86:79:63:7f:ca:41:38:39:14:a6:ff:75:e3:e8:9e:f4:f7:86:
         8a:3b:7b:73:d7:5f:1d:b6:7b:83:e3:9c:f3:7e:49:d1:03:4c:
         6e:dc:42:cc:e7:f6:88:1c:5e:a1:e3:4d:1f:e7:96:18:e5:5f:
         5f:3b:42:4e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0/ZOkyqPfwE1DwTUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl
NzM1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
M2FlYTc1ZDEtMGM2YS00NWIxLTkwN2EtMjI3MjAyNDczZWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj/JgVAyVCwjw1kqOlfthGn+jsINifHGYbJE
MTe0PYuzTSkqqng+v65LZpwK/xWWBjplpyv6GdHVlvsY2vrgomhpX/c/sp3M3KbJ
bPr2//LgIiOh0aAor52ktOCv6K6w0/fvbGmnC7MO5VpWmvX82pgN+VOaRYdKQTjg
WCxyaogndWQGo0r0OaRdnWgGG5sCJbspmWHI/XzQnjI7sb50U19s2upo6O5qEF1k
PIOFFto2gNRawfKKSypSl8ftsf4fa8w6k2CxAXWjMcd3H544dFY/XDafe9oJGe0F
qHrGgp5ecqH4Yj5dHeD8ahnHCar+VAzyyLORPYs13+1mlbUXvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLs/RSGLscFut2nh1g5JTiiPBtA7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl
YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvZWIwMTNhOWEtZDgwMS0z
ZTY5LThhNmYtMzNhYzY2YWZiMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh
ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz
ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5
ZTI1M2U3MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiAAAA5Q
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJqprBYM8sC6MjCArUKO/gFOK6IP4yxo7WFYv1Yetqac4qa4HNHR
mWNalblJ+3kmKoiS3pTbKduy8KqHcnfHwelfeK8C0slg36R8LnXNDEOZrg9C4Msa
InSfsb1N74/R+Ever/pEqUtLn6b5EHEHjnlldKsN+rRVz3Lfo2V//Bff61ouFAlB
VqmXWlf9NF2KMR3KazcfHOSuoE/WaszMtUrk/UZ8NOlZ/CXxorSPxDF0Q8hE5RJy
BrJoACfTScG8Kcefu4ZWpoZ5Y3/KQTg5FKb/dePonvT3hoo7e3PXXx22e4PjnPN+
SdEDTG7cQszn9ogcXqHjTR/nlhjlX187Qk4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:48:02 2026 by rpki-client