Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/79a75857-a8dd-342c-933c-947c4710fda2.roa
File:                     79a75857-a8dd-342c-933c-947c4710fda2.roa (raw, json)
Hash identifier:          T1ocPB0cxTrZqrWTuXrYfyrC+Nfd7c+h+e6ri3M4UJ0=
Subject key identifier:   4C:14:18:90:0E:9C:68:3F:9B:40:A8:84:C6:9A:0B:2A:91:9B:F0:D9
Certificate issuer:       /CN=0c3cf342-4337-44bf-ac45-d0772ad75854
Certificate serial:       010D0C9F4328584DCDC5ACE20D49A43AAB98AA00
Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/79a75857-a8dd-342c-933c-947c4710fda2.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     49791
IP address blocks:        2606:2040:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:ac:e2:0d:49:a4:3a:ab:98:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=05e8173c-0419-4b88-a939-a7b5b4d2b4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:0b:01:8f:3d:fc:b7:6c:73:8c:92:15:35:
                    30:2b:7c:3e:e4:30:6f:20:15:3f:ee:54:c8:77:ab:
                    f8:29:b1:2e:72:d2:ed:77:fd:37:11:67:60:db:48:
                    3c:35:ef:c4:11:39:ff:b0:a4:17:8e:68:14:b6:45:
                    d4:a9:20:cd:7e:5d:51:5c:9b:15:65:21:3e:4b:3a:
                    29:90:43:1e:d3:93:fd:00:20:d8:be:8a:0f:75:84:
                    17:71:37:1b:6f:35:00:a2:58:ac:da:e1:1e:5c:d6:
                    b3:66:84:d8:c3:2f:9b:b7:df:da:d1:cf:a1:b5:15:
                    5d:07:ec:ad:21:71:07:da:1c:7f:94:26:1c:4a:ba:
                    31:f4:46:e9:6f:46:a2:99:13:86:11:2c:91:ba:38:
                    9b:38:aa:c1:4d:6d:7d:62:19:9c:74:0f:ff:e4:85:
                    17:0b:fd:4b:9e:7e:f3:33:71:b4:8f:e9:d3:e6:a5:
                    4a:2d:16:19:c7:e6:9c:a1:9d:58:3d:bc:c4:3b:d5:
                    72:e5:d1:f7:5c:92:06:0c:db:c6:64:3c:ab:8d:b1:
                    dc:cb:3c:8c:9f:0c:0c:ce:51:76:ee:9c:89:84:ed:
                    57:12:1f:fd:42:c4:ba:25:0f:3e:2c:ab:ac:b1:9a:
                    00:b4:97:51:f1:e0:9c:36:ea:83:39:56:45:9a:d5:
                    58:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:14:18:90:0E:9C:68:3F:9B:40:A8:84:C6:9A:0B:2A:91:9B:F0:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/79a75857-a8dd-342c-933c-947c4710fda2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl

            X509v3 Authority Key Identifier:
                keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2040:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:88:4e:95:84:11:6f:d9:fe:78:20:8e:71:e3:85:cd:31:62:
         69:7f:da:ea:f5:cc:d4:e3:d0:9d:29:72:31:d5:3e:33:76:3d:
         e9:7b:2d:a2:af:af:c4:a2:d8:78:f8:2b:bb:06:d7:7e:a4:32:
         99:18:d7:25:07:d3:c7:ac:0b:86:5a:1e:63:7b:eb:3e:1d:e7:
         a8:53:51:82:50:e9:aa:39:3b:83:5d:f4:dc:46:8b:4a:34:3a:
         08:8e:dd:94:b6:bf:85:11:e2:cc:bf:b8:38:3a:6b:dd:e9:90:
         ec:52:c3:c2:0a:ba:10:c6:79:fd:db:c5:bb:99:9a:51:de:7c:
         85:b5:86:28:f3:8a:5b:21:e3:4a:d0:59:a0:ff:38:ab:fe:d4:
         ac:ae:f9:05:64:68:cc:9b:d9:41:30:8a:03:a5:a6:e4:46:9a:
         3c:6a:76:6b:78:67:f7:38:c6:bb:e3:ea:80:81:fa:3f:14:32:
         0e:30:9a:c9:23:1f:03:0d:75:7f:ed:65:d7:da:90:85:61:de:
         99:7e:9a:df:01:51:4f:17:c8:d9:c7:18:ab:44:8b:4c:fd:bc:
         15:84:a9:a7:80:25:9c:36:3e:0d:e0:56:d5:6a:22:34:a5:5e:
         1f:5f:e5:77:2e:80:73:77:19:07:c4:af:c7:b6:f7:47:b7:11:
         08:69:fa:4f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3NxaziDUmkOquYqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMzY2YzNDItNDMzNy00NGJmLWFjNDUtZDA3NzJhZDc1
ODU0MB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk
MDVlODE3M2MtMDQxOS00Yjg4LWE5MzktYTdiNWI0ZDJiNGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMILAY89/Ldsc4ySFTUwK3w+5DBvIBU/7lTI
d6v4KbEuctLtd/03EWdg20g8Ne/EETn/sKQXjmgUtkXUqSDNfl1RXJsVZSE+Szop
kEMe05P9ACDYvooPdYQXcTcbbzUAolis2uEeXNazZoTYwy+bt9/a0c+htRVdB+yt
IXEH2hx/lCYcSrox9Ebpb0aimROGESyRujibOKrBTW19YhmcdA//5IUXC/1Lnn7z
M3G0j+nT5qVKLRYZx+acoZ1YPbzEO9Vy5dH3XJIGDNvGZDyrjbHcyzyMnwwMzlF2
7pyJhO1XEh/9QsS6JQ8+LKussZoAtJdR8eCcNuqDOVZFmtVYlwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEwUGJAOnGg/m0CohMaaCyqRm/DZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNj
ZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFkNzU4NTQvNzlhNzU4NTctYThkZC0z
NDJjLTkzM2MtOTQ3YzQ3MTBmZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGMzY2YzNDItNDMzNy00NGJmLWFj
NDUtZDA3NzJhZDc1ODU0LzBjM2NmMzQyLTQzMzctNDRiZi1hYzQ1LWQwNzcyYWQ3
NTg1NC5jcmwwHwYDVR0jBBgwFoAUM+Vte7hq+1lyLTX3lZ0qh5UflWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3
MmFkNzU4NTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgYgQBAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAP4hOlYQRb9n+eCCOceOFzTFiaX/a6vXM1OPQnSlyMdU+M3Y96Xst
oq+vxKLYePgruwbXfqQymRjXJQfTx6wLhloeY3vrPh3nqFNRglDpqjk7g1303EaL
SjQ6CI7dlLa/hRHizL+4ODpr3emQ7FLDwgq6EMZ5/dvFu5maUd58hbWGKPOKWyHj
StBZoP84q/7UrK75BWRozJvZQTCKA6Wm5EaaPGp2a3hn9zjGu+PqgIH6PxQyDjCa
ySMfAw11f+1l19qQhWHemX6a3wFRTxfI2ccYq0SLTP28FYSpp4AlnDY+DeBW1Woi
NKVeH1/ldy6Ac3cZB8Svx7b3R7cRCGn6Tw==
-----END CERTIFICATE-----
Generated at Wed May 13 16:03:00 2026 by rpki-client