Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/35210763-57db-34de-b330-cad02dbdd9ae.roa
File:                     35210763-57db-34de-b330-cad02dbdd9ae.roa (raw, json)
Hash identifier:          /A02SPkhCWYV+cSqyhk+29NacqeRYTnEsHk8eEWlb6A=
Subject key identifier:   1C:7D:19:98:D3:2E:B3:9A:1D:89:B8:19:3E:3F:67:E1:2C:3F:F4:65
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584DBBA054CA3AA9D629C8E15980
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/35210763-57db-34de-b330-cad02dbdd9ae.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     945
IP address blocks:        2605:f440:9800::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:54:ca:3a:a9:d6:29:c8:e1:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=6759b258-cda9-4717-8cb6-9724a82dfaef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6a:22:2c:24:13:5a:2a:ae:a0:88:f1:0d:00:
                    bd:d8:40:22:9d:8c:f1:5b:9d:cd:f3:c2:5a:f4:8b:
                    6a:64:72:96:65:d5:23:45:bb:b6:bb:7d:1f:cd:b3:
                    c9:14:a5:37:12:e2:c3:ec:f3:36:fa:3d:d1:1b:41:
                    ff:35:36:b9:24:01:c3:bb:1f:63:ea:5f:b1:44:07:
                    2e:72:04:fa:0d:3b:00:65:0a:8c:6e:f6:7f:96:8b:
                    40:4e:69:59:27:f7:6c:d2:74:f0:b4:90:70:3a:7d:
                    62:06:9b:0d:32:13:61:9f:a5:6b:30:e2:14:27:69:
                    96:e8:0c:aa:0d:c1:c4:06:50:d9:7e:ae:d2:aa:f7:
                    82:99:d7:1a:cc:6c:0f:f0:31:f7:c2:c6:16:d2:d0:
                    1b:6a:01:71:5e:90:f7:44:59:53:36:f4:f2:7c:ca:
                    14:96:ef:02:9c:a8:4c:18:fa:3e:96:f1:95:7f:6d:
                    a8:6d:91:ce:7a:93:e1:9e:c1:d7:ca:7f:25:34:bd:
                    fb:4b:33:e1:3a:5b:2d:1b:a5:cc:f6:cf:fe:2a:64:
                    9b:df:78:a3:06:d6:58:84:54:e9:12:31:4c:c3:b2:
                    0d:48:32:53:c3:7b:11:ef:66:51:f3:31:35:1d:ed:
                    af:08:e4:17:18:df:eb:4c:1f:f6:32:82:74:e4:04:
                    63:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7D:19:98:D3:2E:B3:9A:1D:89:B8:19:3E:3F:67:E1:2C:3F:F4:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/35210763-57db-34de-b330-cad02dbdd9ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:9800::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f5:b8:51:1d:78:45:05:d3:b5:20:fd:19:aa:00:91:c1:84:
         60:12:a9:0e:d6:35:59:55:c9:05:4b:ec:bf:64:60:e0:4e:a5:
         7b:f5:7a:08:c7:a2:6e:44:17:bf:c1:75:d1:b9:e8:38:7d:96:
         9b:32:fb:f4:ac:8c:d6:c5:40:dc:60:3c:7a:b1:f7:95:04:92:
         26:6a:70:98:6a:36:9a:d2:b2:96:e9:5f:b1:33:7d:a5:88:06:
         41:f6:b9:62:c3:e5:09:1c:cb:f3:be:cc:09:05:22:67:41:23:
         9a:9c:45:45:99:71:10:04:3f:fd:48:23:a5:c0:8d:a9:e5:d4:
         92:46:77:c5:40:fb:34:77:21:82:04:a6:6e:01:4b:7f:d7:1a:
         b1:99:c3:07:41:6f:09:6a:81:b2:a4:c2:57:3d:c1:76:1c:a1:
         bb:53:59:af:cb:a4:ce:ef:85:92:1f:fb:ca:4e:64:6b:95:e6:
         fd:ca:82:07:6a:79:5e:3b:a2:e7:64:ed:54:bb:75:18:d9:73:
         e0:88:b1:61:44:c7:d0:f8:8d:35:9c:68:1f:7c:27:64:a2:f6:
         f1:44:0f:ae:22:c2:7e:57:23:fc:9c:c9:f2:89:fb:5b:a8:f0:
         17:22:14:33:d2:91:88:ce:b9:5e:e7:9a:37:3e:6d:b8:93:fd:
         3d:7c:a8:47
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE27oFTKOqnWKcjhWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4
ZjcyMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk
Njc1OWIyNTgtY2RhOS00NzE3LThjYjYtOTcyNGE4MmRmYWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2oiLCQTWiquoIjxDQC92EAinYzxW53N88Ja
9ItqZHKWZdUjRbu2u30fzbPJFKU3EuLD7PM2+j3RG0H/NTa5JAHDux9j6l+xRAcu
cgT6DTsAZQqMbvZ/lotATmlZJ/ds0nTwtJBwOn1iBpsNMhNhn6VrMOIUJ2mW6Ayq
DcHEBlDZfq7SqveCmdcazGwP8DH3wsYW0tAbagFxXpD3RFlTNvTyfMoUlu8CnKhM
GPo+lvGVf22obZHOepPhnsHXyn8lNL37SzPhOlstG6XM9s/+KmSb33ijBtZYhFTp
EjFMw7INSDJTw3sR72ZR8zE1He2vCOQXGN/rTB/2MoJ05ARj4wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBx9GZjTLrOaHYm4GT4/Z+EsP/RlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk
MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvMzUyMTA3NjMtNTdkYi0z
NGRlLWIzMzAtY2FkMDJkYmRkOWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4
NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw
OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2
N2JmMDhmNzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgX0QJgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAi/W4UR14RQXTtSD9GaoAkcGEYBKpDtY1WVXJBUvsv2Rg4E6le/V6
CMeibkQXv8F10bnoOH2WmzL79KyM1sVA3GA8erH3lQSSJmpwmGo2mtKylulfsTN9
pYgGQfa5YsPlCRzL877MCQUiZ0EjmpxFRZlxEAQ//UgjpcCNqeXUkkZ3xUD7NHch
ggSmbgFLf9casZnDB0FvCWqBsqTCVz3Bdhyhu1NZr8ukzu+Fkh/7yk5ka5Xm/cqC
B2p5Xjui52TtVLt1GNlz4IixYUTH0PiNNZxoH3wnZKL28UQPriLCflcj/JzJ8on7
W6jwFyIUM9KRiM65XueaNz5tuJP9PXyoRw==
-----END CERTIFICATE-----
Generated at Wed May 13 18:29:44 2026 by rpki-client