Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ee8f09fe-1b7b-3104-b2f6-ea18346f6f0f.roa
File:                     ee8f09fe-1b7b-3104-b2f6-ea18346f6f0f.roa (raw, json)
Hash identifier:          6zVTTCR9aEX4t5+hAB5TOvL+FFtN+oWDbKNRaBnUF0c=
Subject key identifier:   93:80:CB:54:1E:B5:E9:7C:30:28:E8:22:9B:73:C5:27:53:52:EF:69
Certificate issuer:       /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e
Certificate serial:       010D0C9F4328584D91C002470823751091B6C920
Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ee8f09fe-1b7b-3104-b2f6-ea18346f6f0f.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     7311
IP address blocks:        2605:8100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:02:47:08:23:75:10:91:b6:c9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=05a74e32-96b3-4324-ad05-a0dc1d44bc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:31:c4:bc:9c:75:f8:fc:2e:22:28:44:be:59:
                    09:18:52:06:04:dd:92:da:0b:82:93:2d:0b:66:9d:
                    9a:fa:64:e3:ae:92:13:04:39:6e:6e:31:cd:2a:27:
                    ea:06:ee:b5:89:1b:81:16:e0:2d:40:3d:2f:6c:79:
                    e0:b1:bc:88:35:cd:8b:28:36:01:3b:97:13:04:d8:
                    c8:1e:32:68:47:88:79:96:5d:53:cf:71:ec:f6:07:
                    91:55:35:1a:76:06:97:94:8b:dd:9f:8d:a0:22:1a:
                    c9:dd:8a:a3:be:f7:7a:c3:0d:44:87:b1:cb:10:c3:
                    65:81:25:c5:bb:7c:fa:78:56:57:05:cc:ce:cb:4a:
                    b3:41:13:4e:bf:8e:37:f6:f3:be:f9:82:e3:47:da:
                    d8:a9:1b:a6:02:17:0a:e3:11:fa:96:30:b2:6c:40:
                    60:29:39:6a:51:61:3e:8a:ee:5b:59:18:0b:dc:c1:
                    63:7d:4d:3a:a0:bb:3d:44:87:a6:aa:52:59:01:08:
                    5a:06:6b:90:1a:cd:00:38:8c:e9:95:aa:f1:5c:45:
                    ce:ff:d8:be:c6:23:5c:cf:13:43:fb:21:91:49:79:
                    ff:fc:b4:af:8c:3b:8b:75:01:25:37:43:03:4c:ea:
                    bf:99:a4:0e:7f:03:e2:b4:1a:74:6a:6d:f9:74:17:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:80:CB:54:1E:B5:E9:7C:30:28:E8:22:9B:73:C5:27:53:52:EF:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ee8f09fe-1b7b-3104-b2f6-ea18346f6f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl

            X509v3 Authority Key Identifier:
                keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:80:04:9a:c6:82:4d:8b:99:48:0b:5d:5f:b4:f1:38:85:9d:
         8d:53:ca:8c:25:17:1c:ef:43:93:14:70:87:68:cd:ad:b3:e2:
         54:e6:05:83:27:0f:95:89:38:c5:95:e6:f0:b0:4c:a7:65:9a:
         c5:9d:33:14:a1:1f:bf:18:8f:d7:51:4f:3c:5b:f0:3f:cc:8f:
         05:9b:3c:a0:c9:ca:39:26:6d:b3:c3:3f:80:37:98:cd:99:0f:
         d4:45:94:0e:04:b1:ef:3b:29:95:10:7e:25:1d:6b:b5:48:1a:
         4c:28:d5:6a:60:2d:3d:d2:65:be:28:5d:7f:d5:d4:cb:16:13:
         30:02:6b:0c:9f:39:21:d2:ce:92:fa:d2:74:a2:28:ad:0f:7a:
         4e:dd:c6:84:85:d3:74:8a:04:ad:cd:0d:92:ff:bc:8b:b6:36:
         4b:10:63:35:d9:e9:9d:f5:d7:47:de:f0:43:b3:88:e0:67:78:
         80:a0:03:4c:61:78:0c:ff:01:54:ea:84:7b:c9:f0:a1:7e:e7:
         15:42:44:20:20:f2:73:f0:76:4a:a5:1d:5d:9b:47:f8:3a:37:
         b7:8c:2f:a5:bc:78:79:3d:21:47:d9:0d:9e:04:38:b7:c5:1b:
         32:85:51:19:3e:2a:95:92:de:69:be:68:26:7f:fd:44:52:21:
         0b:22:6b:b5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2RwAJHCCN1EJG2ySAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5
NTBlMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
MDVhNzRlMzItOTZiMy00MzI0LWFkMDUtYTBkYzFkNDRiYzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zHEvJx1+PwuIihEvlkJGFIGBN2S2guCky0L
Zp2a+mTjrpITBDlubjHNKifqBu61iRuBFuAtQD0vbHngsbyINc2LKDYBO5cTBNjI
HjJoR4h5ll1Tz3Hs9geRVTUadgaXlIvdn42gIhrJ3Yqjvvd6ww1Eh7HLEMNlgSXF
u3z6eFZXBczOy0qzQRNOv4439vO++YLjR9rYqRumAhcK4xH6ljCybEBgKTlqUWE+
iu5bWRgL3MFjfU06oLs9RIemqlJZAQhaBmuQGs0AOIzplarxXEXO/9i+xiNczxND
+yGRSXn//LSvjDuLdQElN0MDTOq/maQOfwPitBp0am35dBf+oQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJOAy1Qetel8MCjoIptzxSdTUu9pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj
ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvZWU4ZjA5ZmUtMWI3Yi0z
MTA0LWIyZjYtZWExODM0NmY2ZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw
MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz
OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1
YjNlMzk1MGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWBADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCpgASaxoJNi5lIC11ftPE4hZ2NU8qMJRcc70OTFHCHaM2ts+JU5gWD
Jw+ViTjFlebwsEynZZrFnTMUoR+/GI/XUU88W/A/zI8Fmzygyco5Jm2zwz+AN5jN
mQ/URZQOBLHvOymVEH4lHWu1SBpMKNVqYC090mW+KF1/1dTLFhMwAmsMnzkh0s6S
+tJ0oiitD3pO3caEhdN0igStzQ2S/7yLtjZLEGM12emd9ddH3vBDs4jgZ3iAoANM
YXgM/wFU6oR7yfChfucVQkQgIPJz8HZKpR1dm0f4Oje3jC+lvHh5PSFH2Q2eBDi3
xRsyhVEZPiqVkt5pvmgmf/1EUiELImu1
-----END CERTIFICATE-----
Generated at Wed May 13 08:11:22 2026 by rpki-client