Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/f4d0c635-9f3f-3536-9e05-721aa1f7b612.roa
File:                     f4d0c635-9f3f-3536-9e05-721aa1f7b612.roa (raw, json)
Hash identifier:          BIdLnGAFeMarSfXKvv8ifQAddCv+E8r8dOtH7Z2kPG0=
Subject key identifier:   DA:85:66:55:8B:DA:9A:F8:4C:40:4A:5A:A8:E5:23:1E:7F:AF:22:7C
Certificate issuer:       /CN=4eea0cbf-ec94-4919-b99f-6365e69ae52e
Certificate serial:       010D0C9F4328584D143D7E9350D76053B0190C00
Authority key identifier: 91:B8:BA:92:6C:F7:F5:0A:07:79:D1:F9:8E:FC:DC:8D:3E:AC:0E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/f4d0c635-9f3f-3536-9e05-721aa1f7b612.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     13765
IP address blocks:        2606:4900::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:7e:93:50:d7:60:53:b0:19:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eea0cbf-ec94-4919-b99f-6365e69ae52e
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=4611722c-eb8d-49bf-bdb2-bc286171810e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fd:0f:2a:db:c3:06:14:9d:8c:a6:b0:11:a3:
                    6a:ae:32:1d:9a:ae:eb:8f:41:ef:0c:f5:5c:5c:00:
                    41:e4:f0:5f:cd:a8:df:33:8b:74:73:32:a8:b3:46:
                    28:f0:88:1c:2e:4f:7c:84:91:5d:37:8e:df:aa:7d:
                    41:87:72:ac:ba:94:74:0c:5f:88:68:44:47:13:91:
                    1e:65:1f:a6:d5:1e:d1:b1:32:ec:e8:a2:77:55:6d:
                    0d:29:5d:cd:87:67:31:6f:9b:f9:2c:bd:dc:0f:75:
                    49:d8:3b:ff:bd:99:2f:06:80:b7:ee:d5:24:e0:fc:
                    16:2a:fa:06:b7:36:d6:de:3a:ab:81:b1:8f:0f:7a:
                    9c:f7:e6:41:48:a7:c4:1c:0e:6c:29:85:3c:27:da:
                    d7:7b:26:71:22:a3:0c:66:e0:46:ad:ac:18:a2:51:
                    6b:ee:e2:26:29:ac:99:48:96:17:a4:07:a9:71:1d:
                    81:73:cd:ca:c8:09:92:1d:ef:61:ee:4d:6b:5b:08:
                    ad:a3:01:ec:98:78:5f:f2:97:2c:f2:b4:4e:0f:22:
                    64:b2:59:9c:60:b4:18:62:3a:d6:38:ad:6c:d8:d1:
                    2a:74:90:5c:ac:a6:26:77:f7:a1:22:49:4e:4a:15:
                    d1:61:f9:64:49:b7:7e:f4:85:65:3c:38:06:ed:e2:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:85:66:55:8B:DA:9A:F8:4C:40:4A:5A:A8:E5:23:1E:7F:AF:22:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/f4d0c635-9f3f-3536-9e05-721aa1f7b612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.crl

            X509v3 Authority Key Identifier:
                keyid:91:B8:BA:92:6C:F7:F5:0A:07:79:D1:F9:8E:FC:DC:8D:3E:AC:0E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:28:fe:9a:31:f8:b3:be:80:59:68:8e:6e:29:79:aa:44:fd:
         1d:5a:e2:c7:84:ac:11:d1:8d:47:7c:0e:8b:28:44:b9:05:ed:
         f5:b7:7f:1e:ec:11:df:bf:3c:e1:20:b5:f1:53:a6:86:ae:f9:
         30:2e:1b:50:59:7c:27:b1:4c:43:ad:c6:40:16:1e:74:1d:18:
         54:a1:d7:68:8e:41:30:74:e5:11:2f:c4:d9:c9:c5:07:47:42:
         b9:e3:d6:d0:99:b0:ae:a6:74:c9:33:bd:97:97:2e:86:60:09:
         a2:89:e9:8e:ea:0f:07:f5:b7:c2:24:15:fd:40:18:5c:a9:66:
         68:aa:f3:69:32:55:12:fe:8b:0d:92:60:04:5c:00:06:70:1f:
         d9:d9:81:be:1e:7a:47:2d:b7:88:dc:71:1e:48:28:aa:87:2e:
         50:c3:f8:f4:e5:b4:ee:77:08:a1:c3:5f:87:38:ed:5c:00:f7:
         04:ba:6d:99:5f:8b:6a:02:cc:be:b9:0c:49:02:84:93:9c:0f:
         28:51:c9:aa:8d:45:6c:f3:dc:8a:81:b2:bd:bd:df:d8:98:4c:
         a7:7b:c3:f6:e5:3f:60:02:f9:4f:30:65:d3:73:4d:6f:c4:5a:
         aa:9b:44:34:32:c0:04:1b:b7:20:93:ac:16:bb:c6:97:b0:08:
         f7:9a:87:b8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPX6TUNdgU7AZDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVlYTBjYmYtZWM5NC00OTE5LWI5OWYtNjM2NWU2OWFl
NTJlMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
NDYxMTcyMmMtZWI4ZC00OWJmLWJkYjItYmMyODYxNzE4MTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/0PKtvDBhSdjKawEaNqrjIdmq7rj0HvDPVc
XABB5PBfzajfM4t0czKos0Yo8IgcLk98hJFdN47fqn1Bh3KsupR0DF+IaERHE5Ee
ZR+m1R7RsTLs6KJ3VW0NKV3Nh2cxb5v5LL3cD3VJ2Dv/vZkvBoC37tUk4PwWKvoG
tzbW3jqrgbGPD3qc9+ZBSKfEHA5sKYU8J9rXeyZxIqMMZuBGrawYolFr7uImKayZ
SJYXpAepcR2Bc83KyAmSHe9h7k1rWwitowHsmHhf8pcs8rRODyJkslmcYLQYYjrW
OK1s2NEqdJBcrKYmd/ehIklOShXRYflkSbd+9IVlPDgG7eJBMwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNqFZlWL2pr4TEBKWqjlIx5/ryJ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80ZWVh
MGNiZi1lYzk0LTQ5MTktYjk5Zi02MzY1ZTY5YWU1MmUvZjRkMGM2MzUtOWYzZi0z
NTM2LTllMDUtNzIxYWExZjdiNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGVlYTBjYmYtZWM5NC00OTE5LWI5
OWYtNjM2NWU2OWFlNTJlLzRlZWEwY2JmLWVjOTQtNDkxOS1iOTlmLTYzNjVlNjlh
ZTUyZS5jcmwwHwYDVR0jBBgwFoAUkbi6kmz39QoHedH5jvzcjT6sDjcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80ZWVhMGNiZi1lYzk0LTQ5MTktYjk5Zi02MzY1
ZTY5YWU1MmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZJADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAEKP6aMfizvoBZaI5uKXmqRP0dWuLHhKwR0Y1HfA6LKES5Be31t38e
7BHfvzzhILXxU6aGrvkwLhtQWXwnsUxDrcZAFh50HRhUoddojkEwdOURL8TZycUH
R0K549bQmbCupnTJM72Xly6GYAmiiemO6g8H9bfCJBX9QBhcqWZoqvNpMlUS/osN
kmAEXAAGcB/Z2YG+HnpHLbeI3HEeSCiqhy5Qw/j05bTudwihw1+HOO1cAPcEum2Z
X4tqAsy+uQxJAoSTnA8oUcmqjUVs89yKgbK9vd/YmEyne8P25T9gAvlPMGXTc01v
xFqqm0Q0MsAEG7cgk6wWu8aXsAj3moe4
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:47 2026 by rpki-client