Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/058155a4-ef5d-3eb3-aa26-358a05abf901.roa
File:                     058155a4-ef5d-3eb3-aa26-358a05abf901.roa (raw, json)
Hash identifier:          qHWk6FRFJJPyaq6CS75qiYRs+pLyq0GvlM+9kKmOXYw=
Subject key identifier:   A4:5D:7A:97:32:28:59:55:6E:82:04:8C:A4:F4:16:55:7E:21:DE:55
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584D300A4CCEED02E78A79F25580
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/058155a4-ef5d-3eb3-aa26-358a05abf901.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     32636
IP address blocks:        2604:4000:7000::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:4c:ce:ed:02:e7:8a:79:f2:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=0b902264-ece8-4221-97a8-9a232cd1d132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:4d:8f:c3:c1:f0:c9:b6:10:e8:d8:41:8a:
                    76:fe:0a:e4:a8:17:73:f5:f9:ca:8c:a9:07:44:db:
                    c5:ce:86:e6:9c:2d:ab:0d:9d:e0:d6:c6:a9:1b:e2:
                    20:14:1b:ad:36:fb:aa:55:80:29:98:9d:f7:40:22:
                    49:0a:6b:6e:8c:21:7e:24:32:84:05:a4:5d:8e:08:
                    30:e0:7f:b3:b6:70:66:c7:14:c9:91:43:7e:53:10:
                    38:16:6b:73:e0:7b:1e:90:1a:9f:cb:88:4f:45:d4:
                    1d:a2:55:3b:c1:26:54:e6:1e:2e:6b:92:46:95:df:
                    ff:c1:58:50:71:20:59:39:91:e6:e1:39:7c:62:bc:
                    0c:5a:57:c1:f7:37:9e:7e:12:59:fe:00:61:34:7c:
                    0a:52:b1:e9:15:e9:29:50:b3:f3:1e:ae:7b:b7:4a:
                    7a:33:cf:5f:5f:3b:7e:72:db:fe:72:32:60:c0:55:
                    69:43:05:76:8b:74:5a:1f:96:78:c5:3a:fd:9e:a8:
                    f6:22:40:b0:7a:28:8b:11:99:da:dd:cd:f8:7d:ad:
                    56:35:fd:7f:15:cf:b4:27:df:57:bc:41:1a:95:63:
                    87:33:d7:bc:f9:d2:aa:37:3b:24:66:d4:94:d9:e7:
                    28:8d:e8:16:f9:4b:21:02:a8:63:25:1c:fe:96:41:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5D:7A:97:32:28:59:55:6E:82:04:8C:A4:F4:16:55:7E:21:DE:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/058155a4-ef5d-3eb3-aa26-358a05abf901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4000:7000::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1b:2d:05:9d:dd:1d:74:e2:88:6f:1a:76:a9:bb:5e:34:bd:
         c0:ed:64:0e:64:b0:b7:5a:4e:59:23:b9:fc:fb:59:ed:a3:22:
         a5:19:a3:85:0d:6b:9b:73:a7:90:74:5f:b8:71:30:a5:cb:34:
         8a:72:d4:6a:f2:8a:f9:3f:fc:a0:a4:3d:14:51:0c:e9:43:d8:
         6e:d7:4c:06:89:9c:ee:3d:42:28:67:21:9c:10:24:ab:8a:9d:
         c4:2a:28:6b:da:26:aa:e7:f7:8f:a5:b6:db:18:a0:bc:cb:2d:
         47:9b:56:a4:a9:49:46:cb:f8:82:d2:6f:b8:06:a8:e5:57:26:
         1e:a1:b5:d3:b3:aa:04:f7:15:b8:15:93:e7:06:b8:b0:f2:eb:
         8e:f9:c4:0c:55:76:9b:97:10:a1:f9:44:c5:a5:2f:13:86:e1:
         50:1f:06:dc:0e:80:54:b1:fc:cd:10:36:2e:86:24:fa:75:f3:
         7d:d6:ab:00:69:60:dc:7c:cb:1b:33:d9:ba:b3:33:9d:12:2e:
         7a:be:43:a3:0a:69:22:c9:28:9e:61:2f:1f:c5:a6:df:4a:f6:
         5a:7a:4d:bd:61:d5:75:6c:55:25:a0:08:7b:7f:eb:4c:7d:6a:
         77:4c:78:91:19:43:e0:7e:3a:95:f4:82:1c:48:f8:67:3d:ea:
         96:a2:9e:10
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0wCkzO7QLninnyVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk
ZDBiMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
MGI5MDIyNjQtZWNlOC00MjIxLTk3YTgtOWEyMzJjZDFkMTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0xNj8PB8Mm2EOjYQYp2/grkqBdz9fnKjKkH
RNvFzobmnC2rDZ3g1sapG+IgFButNvuqVYApmJ33QCJJCmtujCF+JDKEBaRdjggw
4H+ztnBmxxTJkUN+UxA4Fmtz4HsekBqfy4hPRdQdolU7wSZU5h4ua5JGld//wVhQ
cSBZOZHm4Tl8YrwMWlfB9zeefhJZ/gBhNHwKUrHpFekpULPzHq57t0p6M89fXzt+
ctv+cjJgwFVpQwV2i3RaH5Z4xTr9nqj2IkCweiiLEZna3c34fa1WNf1/Fc+0J99X
vEEalWOHM9e8+dKqNzskZtSU2ecojegW+UshAqhjJRz+lkG1YwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKRdepcyKFlVboIEjKT0FlV+Id5VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5
MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvMDU4MTU1YTQtZWY1ZC0z
ZWIzLWFhMjYtMzU4YTA1YWJmOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy
YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3
ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy
M2VhN2RkMGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgRAAHAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAABstBZ3dHXTiiG8adqm7XjS9wO1kDmSwt1pOWSO5/PtZ7aMipRmj
hQ1rm3OnkHRfuHEwpcs0inLUavKK+T/8oKQ9FFEM6UPYbtdMBomc7j1CKGchnBAk
q4qdxCooa9omquf3j6W22xigvMstR5tWpKlJRsv4gtJvuAao5VcmHqG107OqBPcV
uBWT5wa4sPLrjvnEDFV2m5cQoflExaUvE4bhUB8G3A6AVLH8zRA2LoYk+nXzfdar
AGlg3HzLGzPZurMznRIuer5DowppIskonmEvH8Wm30r2WnpNvWHVdWxVJaAIe3/r
TH1qd0x4kRlD4H46lfSCHEj4Zz3qlqKeEA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:24 2026 by rpki-client