Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/b2248719-73d6-3a59-a50f-c57913ea0f77.roa
File:                     b2248719-73d6-3a59-a50f-c57913ea0f77.roa (raw, json)
Hash identifier:          5P7z8YLMvM12s7xxqanuWsYb0yxerXZENYVr0AqXW0k=
Subject key identifier:   B1:C9:FD:C4:16:A6:90:00:7E:31:17:89:40:8C:72:AD:97:5C:D3:5C
Certificate issuer:       /CN=5f4c623c-0d0c-4995-9560-0507df4828e8
Certificate serial:       010D0C9F4328584D9FB571A47BF17E97A6649580
Authority key identifier: 0A:07:21:55:55:AD:C3:06:34:0F:EB:1F:20:ED:B2:BF:34:13:67:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/b2248719-73d6-3a59-a50f-c57913ea0f77.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     54900
IP address blocks:        2620:91:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:71:a4:7b:f1:7e:97:a6:64:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4c623c-0d0c-4995-9560-0507df4828e8
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=10784d35-daae-4239-9c7d-2dec6b2e6ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:c3:b0:2e:21:88:d6:b7:08:ae:50:3a:83:
                    0d:99:2a:13:55:e2:13:03:e1:b2:ab:d5:64:5f:24:
                    26:bf:1e:b2:40:a4:99:72:66:16:3f:4d:88:ca:96:
                    5d:c9:51:0e:1f:31:c9:6e:4e:25:9d:5f:67:02:4e:
                    3f:95:4e:7a:39:96:f0:0c:32:84:9c:da:bf:1d:b7:
                    35:cf:51:90:77:b3:89:a1:68:ce:9a:cd:79:7b:50:
                    43:43:b1:d5:43:06:6b:a8:8b:eb:88:af:05:4c:d7:
                    a5:22:91:4a:4e:b9:21:3f:f8:f4:79:d5:bd:99:d3:
                    6a:3f:80:24:3d:78:71:54:3d:df:bd:9e:4c:13:0a:
                    0f:13:47:6c:96:82:2d:4b:c1:06:3d:54:a9:2f:9a:
                    9f:76:19:59:1a:07:70:85:50:d8:fa:a5:11:4c:fa:
                    d3:e4:d4:be:c6:3d:aa:43:0a:be:c6:10:52:d6:cb:
                    4a:5a:b8:fa:8c:c4:b7:bd:78:11:9f:51:88:eb:6e:
                    7b:1c:d5:70:e0:e0:67:fe:2f:87:75:c0:7e:0e:83:
                    41:6b:97:e3:51:b5:83:3a:1f:d3:52:30:32:3b:bf:
                    57:9b:8d:e3:d3:61:d1:bd:59:0c:c7:2b:cf:bc:a6:
                    f4:81:c7:e9:08:60:95:02:a2:c4:dd:dd:8e:3c:8f:
                    97:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C9:FD:C4:16:A6:90:00:7E:31:17:89:40:8C:72:AD:97:5C:D3:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/b2248719-73d6-3a59-a50f-c57913ea0f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.crl

            X509v3 Authority Key Identifier:
                keyid:0A:07:21:55:55:AD:C3:06:34:0F:EB:1F:20:ED:B2:BF:34:13:67:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:91:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:0f:50:bf:88:b3:72:c1:38:78:6d:7a:13:43:52:40:ca:3e:
         49:24:8d:73:96:be:5c:da:22:b1:7a:8b:63:a6:67:09:4c:23:
         c1:f2:ef:5b:ce:ef:93:05:3b:0e:73:6d:40:be:55:18:5e:b7:
         e8:c9:e5:48:1a:80:57:20:47:2b:c7:8a:be:da:5f:81:7a:1d:
         bc:36:a8:cc:e9:2d:6a:5f:6e:5b:b6:9a:ac:be:63:05:7f:0d:
         1d:2c:9d:e2:2c:cf:16:4f:17:da:9e:59:9b:64:69:fe:15:9f:
         30:df:0c:9c:cd:2f:47:d7:fd:2a:31:42:6b:bb:b8:5c:51:65:
         2d:f3:a1:96:22:f5:e7:3d:37:e5:be:fc:dc:08:49:b7:fd:4a:
         ef:e4:b0:8d:fd:c3:0f:4b:90:a4:1e:ef:17:cb:fb:f5:f2:f7:
         e8:35:77:28:82:f3:c8:26:7b:f1:f6:c1:e1:04:d1:4d:be:23:
         71:c6:9a:a8:dc:f9:02:d4:d4:32:3f:a2:f9:39:86:f8:51:3f:
         06:21:52:7c:df:57:57:87:3b:e5:be:34:83:2b:f1:dd:34:53:
         ad:1c:34:a5:a1:6c:b6:cf:9c:f2:8d:c7:9d:46:f3:ea:f0:4b:
         a8:70:7e:2f:3d:1e:02:d8:c3:40:43:c8:02:1d:06:23:51:7a:
         4a:57:b6:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2ftXGke/F+l6ZklYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWY0YzYyM2MtMGQwYy00OTk1LTk1NjAtMDUwN2RmNDgy
OGU4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
MTA3ODRkMzUtZGFhZS00MjM5LTljN2QtMmRlYzZiMmU2YmE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mnDsC4hiNa3CK5QOoMNmSoTVeITA+Gyq9Vk
XyQmvx6yQKSZcmYWP02IypZdyVEOHzHJbk4lnV9nAk4/lU56OZbwDDKEnNq/Hbc1
z1GQd7OJoWjOms15e1BDQ7HVQwZrqIvriK8FTNelIpFKTrkhP/j0edW9mdNqP4Ak
PXhxVD3fvZ5MEwoPE0dsloItS8EGPVSpL5qfdhlZGgdwhVDY+qURTPrT5NS+xj2q
Qwq+xhBS1stKWrj6jMS3vXgRn1GI6257HNVw4OBn/i+HdcB+DoNBa5fjUbWDOh/T
UjAyO79Xm43j02HRvVkMxyvPvKb0gcfpCGCVAqLE3d2OPI+XpwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLHJ/cQWppAAfjEXiUCMcq2XXNNcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZjRj
NjIzYy0wZDBjLTQ5OTUtOTU2MC0wNTA3ZGY0ODI4ZTgvYjIyNDg3MTktNzNkNi0z
YTU5LWE1MGYtYzU3OTEzZWEwZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWY0YzYyM2MtMGQwYy00OTk1LTk1
NjAtMDUwN2RmNDgyOGU4LzVmNGM2MjNjLTBkMGMtNDk5NS05NTYwLTA1MDdkZjQ4
MjhlOC5jcmwwHwYDVR0jBBgwFoAUCgchVVWtwwY0D+sfIO2yvzQTZ3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZjRjNjIzYy0wZDBjLTQ5OTUtOTU2MC0wNTA3
ZGY0ODI4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAkcAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADwPUL+Is3LBOHhtehNDUkDKPkkkjXOWvlzaIrF6i2OmZwlMI8Hy
71vO75MFOw5zbUC+VRhet+jJ5UgagFcgRyvHir7aX4F6Hbw2qMzpLWpfblu2mqy+
YwV/DR0sneIszxZPF9qeWZtkaf4VnzDfDJzNL0fX/SoxQmu7uFxRZS3zoZYi9ec9
N+W+/NwISbf9Su/ksI39ww9LkKQe7xfL+/Xy9+g1dyiC88gme/H2weEE0U2+I3HG
mqjc+QLU1DI/ovk5hvhRPwYhUnzfV1eHO+W+NIMr8d00U60cNKWhbLbPnPKNx51G
8+rwS6hwfi89HgLYw0BDyAIdBiNRekpXtgU=
-----END CERTIFICATE-----
Generated at Wed May 13 07:54:24 2026 by rpki-client