Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa
File:                     fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa (raw, json)
Hash identifier:          miWGIqzV6KnV8jDWlhlvTgOO0prDR+pWLwPDANSFU6w=
Subject key identifier:   E3:87:43:D3:AF:55:52:11:3A:25:0F:8F:63:AD:58:0A:07:C1:C4:D7
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584DCDC5A92C48A0C49E17C95540
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     25697
IP address blocks:        2605:7380:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a9:2c:48:a0:c4:9e:17:c9:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=1c7453b9-b2f5-47cb-be04-616760041d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:db:42:17:08:38:05:ba:5b:e2:cf:25:76:ba:
                    f5:ac:82:97:8e:a2:2a:36:10:b8:92:1d:58:20:39:
                    c5:b1:93:99:88:f0:22:27:72:af:76:28:28:49:ee:
                    73:9c:12:c5:30:5a:a5:5c:65:64:71:88:58:de:f0:
                    85:bd:22:cc:37:83:54:8e:d3:9c:17:7c:80:92:c4:
                    7f:4b:c4:dc:b3:9f:a2:42:96:80:38:a9:5d:f3:04:
                    74:4b:e9:4c:bb:b5:9e:a5:f9:48:ef:d3:da:45:39:
                    cf:6d:3f:66:f0:8f:d7:b5:c7:ac:f7:6a:88:98:62:
                    9b:58:60:7b:bd:ac:99:1c:ab:08:56:e1:2f:fb:67:
                    c3:6a:6b:56:b6:32:6a:4f:e7:63:6b:84:10:85:2b:
                    14:f1:e2:e4:80:26:d8:67:44:67:80:f6:0e:38:1b:
                    9a:64:13:8a:56:de:f5:b1:15:96:08:ab:97:be:19:
                    08:19:69:2e:f2:6d:da:87:ef:08:50:11:43:2f:e9:
                    7b:49:0f:00:e6:d4:f7:e2:4e:c9:c1:ae:41:fa:11:
                    2a:b7:f9:45:02:86:d0:df:42:6f:7e:bc:31:26:23:
                    28:4f:d7:b5:fa:4f:e3:8f:16:30:e1:2b:10:89:c6:
                    f5:81:54:0c:72:1d:41:51:ee:a7:f1:74:1b:15:9d:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:87:43:D3:AF:55:52:11:3A:25:0F:8F:63:AD:58:0A:07:C1:C4:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7380:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:ee:43:ff:87:64:0b:fd:24:9d:56:2a:64:d0:cb:88:b5:
         1f:81:7f:63:2d:8d:65:8c:f0:4b:a6:6f:9d:1d:13:f3:2d:cb:
         bc:d6:8d:c0:93:0b:43:80:01:b0:0b:e0:01:cf:00:7d:fa:b6:
         36:ca:94:65:e9:30:5b:a5:45:a2:67:92:8b:36:3a:67:27:c4:
         e9:51:20:b2:58:14:fb:83:1c:aa:58:f9:48:d1:e7:ad:dc:50:
         aa:38:86:ea:2e:be:c8:a8:a3:2f:5a:39:01:9c:84:c6:3b:ac:
         17:90:81:89:8a:82:48:d9:54:8d:03:f4:13:fa:7c:43:f7:7d:
         45:df:a0:35:04:81:ed:a3:69:8e:eb:58:08:64:98:b8:d9:62:
         07:71:5a:9e:fb:76:72:6a:a8:00:7f:9c:aa:9b:44:26:71:51:
         6d:8a:83:83:80:0d:8d:6d:2c:52:3a:0d:27:7f:95:cb:b1:7c:
         56:1e:bf:11:96:fe:b8:30:bf:4b:d4:2c:4b:df:cd:f0:05:21:
         f3:b8:82:d2:6a:74:27:24:f5:b0:64:7d:f3:1d:ed:c2:71:a7:
         34:6d:8e:82:20:2a:1b:8b:9c:4a:2d:6e:b0:1d:42:b5:db:ec:
         f0:39:bc:9c:53:ff:7f:72:08:85:66:d8:97:76:e8:51:74:67:
         93:c8:30:7b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3NxaksSKDEnhfJVUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx
MzExMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk
MWM3NDUzYjktYjJmNS00N2NiLWJlMDQtNjE2NzYwMDQxZDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdtCFwg4Bbpb4s8ldrr1rIKXjqIqNhC4kh1Y
IDnFsZOZiPAiJ3KvdigoSe5znBLFMFqlXGVkcYhY3vCFvSLMN4NUjtOcF3yAksR/
S8Tcs5+iQpaAOKld8wR0S+lMu7WepflI79PaRTnPbT9m8I/Xtces92qImGKbWGB7
vayZHKsIVuEv+2fDamtWtjJqT+dja4QQhSsU8eLkgCbYZ0RngPYOOBuaZBOKVt71
sRWWCKuXvhkIGWku8m3ah+8IUBFDL+l7SQ8A5tT34k7Jwa5B+hEqt/lFAobQ30Jv
frwxJiMoT9e1+k/jjxYw4SsQicb1gVQMch1BUe6n8XQbFZ3wDQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOOHQ9OvVVIROiUPj2OtWAoHwcTXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi
YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvZmM3ZTFhYjgtZjVhNi0z
NGFhLTk4MzItNjQ2MmNmNTQ0ODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl
NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2
MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy
Y2M4NjEzMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgVzgIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAO33uQ/+HZAv9JJ1WKmTQy4i1H4F/Yy2NZYzwS6ZvnR0T8y3LvNaN
wJMLQ4ABsAvgAc8Affq2NsqUZekwW6VFomeSizY6ZyfE6VEgslgU+4Mcqlj5SNHn
rdxQqjiG6i6+yKijL1o5AZyExjusF5CBiYqCSNlUjQP0E/p8Q/d9Rd+gNQSB7aNp
jutYCGSYuNliB3Fanvt2cmqoAH+cqptEJnFRbYqDg4ANjW0sUjoNJ3+Vy7F8Vh6/
EZb+uDC/S9QsS9/N8AUh87iC0mp0JyT1sGR98x3twnGnNG2OgiAqG4ucSi1usB1C
tdvs8Dm8nFP/f3IIhWbYl3boUXRnk8gwew==
-----END CERTIFICATE-----
Generated at Wed May 13 05:32:48 2026 by rpki-client