Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa
File:                     fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa (raw, json)
Hash identifier:          CDyYR+RaUg+4USOEmN9xH6MBMCSEYNJ22OAhPzXbP+o=
Subject key identifier:   29:75:CB:C6:AB:51:99:D1:31:E6:35:6B:DA:12:FB:51:80:67:DB:71
Certificate issuer:       /CN=eaf7df35-c67f-440d-9799-461e7a809ef3
Certificate serial:       010D0C9F4328584D9E500A744FCF6EC96E9B37C0
Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     62856
IP address blocks:        2620:130:f001::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:0a:74:4f:cf:6e:c9:6e:9b:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=4f8d4e31-5ff5-4633-bf2c-d807e99735a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:91:4d:ac:b1:4d:3a:0a:97:55:fa:b8:5f:5d:
                    b2:01:22:aa:96:08:55:10:1f:af:d7:d3:9d:18:b0:
                    73:6b:c6:c5:2e:a0:27:68:03:4a:92:b1:b7:c7:bf:
                    ed:90:b2:3d:f4:94:9e:12:ee:06:5e:28:a2:a0:3d:
                    92:20:76:1a:9a:fb:13:04:b9:79:2c:36:59:6f:75:
                    11:a7:6b:1f:7f:c4:48:ab:0d:04:a3:0d:5e:d8:31:
                    d8:f2:83:3b:e1:e8:3f:61:cc:ca:df:8e:90:33:a7:
                    92:a5:31:52:01:50:d6:5a:4e:cc:c4:b8:0c:0d:4d:
                    28:b4:70:17:d6:05:a5:7c:05:d2:21:37:62:20:7b:
                    02:48:77:aa:71:cb:26:de:ba:ea:f3:42:ad:f0:ad:
                    d3:d6:4a:de:5d:c3:fc:73:f9:1b:01:89:96:1f:b6:
                    39:43:d7:66:f2:4d:74:3c:2a:86:ef:62:e3:b2:fd:
                    63:c5:dc:80:e0:5b:89:db:38:a4:2b:88:a7:c8:1e:
                    0f:17:a9:5e:2f:11:57:53:c1:93:3b:d5:b8:aa:70:
                    d8:4a:5c:9c:78:a4:a1:84:c4:d3:e8:3d:66:1f:04:
                    2d:af:33:f4:8d:7a:01:bb:5a:7f:d0:34:d6:f6:ad:
                    4f:b5:fa:ba:63:4d:3b:c1:62:5d:7d:6f:68:b5:9e:
                    3b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:75:CB:C6:AB:51:99:D1:31:E6:35:6B:DA:12:FB:51:80:67:DB:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl

            X509v3 Authority Key Identifier:
                keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:130:f001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:97:3b:88:e7:fd:64:e6:6f:e8:23:92:55:10:d7:a1:4f:fa:
         3e:9f:fa:4f:97:a6:b4:8e:2e:df:52:b1:01:27:1d:62:df:6a:
         be:b0:eb:04:7c:69:84:16:8b:71:5d:78:5e:aa:24:27:83:43:
         f1:d5:00:5c:15:dd:62:ac:7a:40:92:c9:be:4f:6a:d1:3e:8f:
         55:b2:66:e7:1d:d3:92:0a:ad:46:77:18:80:3d:6a:1a:ce:f0:
         16:94:92:1e:06:0b:dd:5f:dc:33:72:f4:34:63:2f:45:23:7a:
         dd:ff:2e:51:e3:1d:49:e5:ba:c2:94:7a:b2:4b:fa:ba:e8:b7:
         63:5b:10:ea:5c:5b:38:c1:26:c4:96:9b:77:e3:68:e5:c6:94:
         55:2b:c7:7b:1a:0a:33:a0:15:50:0c:e0:19:b1:d4:5e:1d:91:
         8e:b2:38:f5:ec:de:5d:b2:3f:0d:67:36:a3:2b:53:83:e2:00:
         a9:39:fc:32:c8:89:a5:91:69:6f:d5:05:f4:93:d1:c0:a3:42:
         72:af:fa:16:92:b9:74:86:6a:ae:6e:a3:56:fc:30:57:6e:c9:
         93:46:07:d1:33:a1:f7:66:5f:02:f0:2b:2f:af:80:27:ce:78:
         48:46:88:10:67:06:a3:16:34:fe:46:51:d2:71:7d:84:7e:28:
         dc:b3:b0:e2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2eUAp0T89uyW6bN8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5
ZWYzMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk
NGY4ZDRlMzEtNWZmNS00NjMzLWJmMmMtZDgwN2U5OTczNWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZFNrLFNOgqXVfq4X12yASKqlghVEB+v19Od
GLBza8bFLqAnaANKkrG3x7/tkLI99JSeEu4GXiiioD2SIHYamvsTBLl5LDZZb3UR
p2sff8RIqw0Eow1e2DHY8oM74eg/YczK346QM6eSpTFSAVDWWk7MxLgMDU0otHAX
1gWlfAXSITdiIHsCSHeqccsm3rrq80Kt8K3T1kreXcP8c/kbAYmWH7Y5Q9dm8k10
PCqG72Ljsv1jxdyA4FuJ2zikK4inyB4PF6leLxFXU8GTO9W4qnDYSlyceKShhMTT
6D1mHwQtrzP0jXoBu1p/0DTW9q1Ptfq6Y007wWJdfW9otZ478wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCl1y8arUZnRMeY1a9oS+1GAZ9txMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3
ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvZmI0ZmE2YWQtNmE1OS0z
NWZjLWFlOWYtMTFlMTg4NzE5Y2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3
OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw
OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl
N2E4MDllZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABMPAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABGXO4jn/WTmb+gjklUQ16FP+j6f+k+XprSOLt9SsQEnHWLfar6w
6wR8aYQWi3FdeF6qJCeDQ/HVAFwV3WKsekCSyb5PatE+j1WyZucd05IKrUZ3GIA9
ahrO8BaUkh4GC91f3DNy9DRjL0Ujet3/LlHjHUnlusKUerJL+rrot2NbEOpcWzjB
JsSWm3fjaOXGlFUrx3saCjOgFVAM4Bmx1F4dkY6yOPXs3l2yPw1nNqMrU4PiAKk5
/DLIiaWRaW/VBfST0cCjQnKv+haSuXSGaq5uo1b8MFduyZNGB9EzofdmXwLwKy+v
gCfOeEhGiBBnBqMWNP5GUdJxfYR+KNyzsOI=
-----END CERTIFICATE-----
Generated at Wed May 13 03:37:07 2026 by rpki-client