Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/55698ea4-408f-3d9a-90da-19ac81b0e5fe.roa
File:                     55698ea4-408f-3d9a-90da-19ac81b0e5fe.roa (raw, json)
Hash identifier:          mkdSTeZmTdbntrUFReF5TEWPV1bPOtj3TQUe4plJb0I=
Subject key identifier:   CA:48:90:3B:94:FF:2A:01:72:A5:D9:2E:13:71:23:3E:3D:CD:43:D9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC80E235CAEFB63716F00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/55698ea4-408f-3d9a-90da-19ac81b0e5fe.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:80ce::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c8:0e:23:5c:ae:fb:63:71:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=f30c4698-d9ec-4149-8638-5e07057f9d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:fc:a6:7e:9c:24:e6:b0:8a:53:df:93:83:
                    7f:9d:0a:bb:b3:07:18:34:48:25:2c:45:69:87:10:
                    13:13:e2:fc:77:45:83:e4:aa:27:62:95:71:57:55:
                    32:19:25:98:e0:34:52:c0:3b:d2:02:7d:76:60:5c:
                    63:eb:8f:94:22:f5:08:c0:44:89:c3:18:fd:d8:c1:
                    a1:b1:c2:69:8f:ce:80:88:f2:3a:46:09:ef:69:58:
                    91:72:e1:f3:bc:01:7d:85:72:30:d5:b9:22:bc:ce:
                    8f:fb:09:33:8a:d6:40:af:d5:22:80:2a:91:ee:4f:
                    a4:07:4b:88:f9:90:7f:ec:e6:25:48:f2:4b:86:39:
                    c1:c8:8d:76:1d:6f:0c:cc:15:b9:98:44:e0:f5:9e:
                    2c:d2:1a:49:44:65:1a:5e:fb:c7:2b:95:63:26:47:
                    1d:5a:0d:e8:38:39:fa:2e:6d:15:5d:45:4a:99:09:
                    14:0b:e0:dc:44:6d:99:3e:b4:56:54:ac:fe:5e:9e:
                    cf:72:37:f4:e9:f6:fe:1d:25:55:0f:b2:f0:64:7e:
                    8c:94:65:61:28:f5:0a:8b:1c:bb:1d:56:42:e0:20:
                    37:d4:a2:93:d3:27:6f:40:55:25:71:a9:e6:e6:36:
                    10:61:36:9f:32:55:2a:8c:37:18:36:35:7b:44:ec:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:48:90:3B:94:FF:2A:01:72:A5:D9:2E:13:71:23:3E:3D:CD:43:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/55698ea4-408f-3d9a-90da-19ac81b0e5fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80ce::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:11:e3:44:ca:6b:35:3f:22:30:ed:fd:3b:6b:53:c9:7a:48:
         9b:2a:e5:88:8e:87:95:9f:44:f5:09:cb:68:71:47:94:35:aa:
         28:4b:a7:46:d2:57:2a:9e:8c:b3:e0:04:e0:a3:5b:a7:11:c3:
         d8:b4:86:b9:b1:77:ea:16:95:4c:48:ef:5e:c2:0c:e8:04:e4:
         57:dc:ce:03:86:27:d5:7c:bd:e2:b1:1c:88:62:7a:ed:95:f8:
         26:14:e2:b9:86:9c:19:db:92:c9:4f:3e:9e:a4:13:ce:48:37:
         5c:72:ea:ea:a3:3e:3b:17:66:b1:39:bf:7a:67:cf:57:64:7d:
         d8:61:21:5f:68:9d:29:ad:8a:e9:ab:2f:cf:91:a4:9c:76:82:
         f2:56:cb:6a:2f:0e:86:34:d7:c1:b1:44:09:b9:83:22:45:0b:
         3c:e8:92:e2:3d:5f:42:a8:4d:23:53:bb:c6:14:6b:80:08:57:
         0e:cd:25:73:03:95:49:6c:a9:f4:15:7d:14:44:87:4a:fa:b5:
         1a:86:93:88:df:4f:b5:67:24:df:27:3a:c8:60:51:84:a0:f7:
         74:50:6e:99:8e:e5:c2:58:d4:98:38:62:7f:d1:62:95:07:61:
         ac:22:1f:45:a8:3e:6c:a8:ba:19:41:f6:73:26:59:80:99:17:
         83:72:5d:a2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09/8gOI1yu+2NxbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZjMwYzQ2OTgtZDllYy00MTQ5LTg2MzgtNWUwNzA1N2Y5ZDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlj8pn6cJOawilPfk4N/nQq7swcYNEglLEVp
hxATE+L8d0WD5KonYpVxV1UyGSWY4DRSwDvSAn12YFxj64+UIvUIwESJwxj92MGh
scJpj86AiPI6RgnvaViRcuHzvAF9hXIw1bkivM6P+wkzitZAr9UigCqR7k+kB0uI
+ZB/7OYlSPJLhjnByI12HW8MzBW5mETg9Z4s0hpJRGUaXvvHK5VjJkcdWg3oODn6
Lm0VXUVKmQkUC+DcRG2ZPrRWVKz+Xp7Pcjf06fb+HSVVD7LwZH6MlGVhKPUKixy7
HVZC4CA31KKT0ydvQFUlcanm5jYQYTafMlUqjDcYNjV7ROw3ewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMpIkDuU/yoBcqXZLhNxIz49zUPZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNTU2OThlYTQtNDA4Zi0z
ZDlhLTkwZGEtMTlhYzgxYjBlNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYDO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJER40TKazU/IjDt/TtrU8l6SJsq5YiOh5WfRPUJy2hxR5Q1qihL
p0bSVyqejLPgBOCjW6cRw9i0hrmxd+oWlUxI717CDOgE5FfczgOGJ9V8veKxHIhi
eu2V+CYU4rmGnBnbkslPPp6kE85IN1xy6uqjPjsXZrE5v3pnz1dkfdhhIV9onSmt
iumrL8+RpJx2gvJWy2ovDoY018GxRAm5gyJFCzzokuI9X0KoTSNTu8YUa4AIVw7N
JXMDlUlsqfQVfRREh0r6tRqGk4jfT7VnJN8nOshgUYSg93RQbpmO5cJY1Jg4Yn/R
YpUHYawiH0WoPmyouhlB9nMmWYCZF4NyXaI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:46 2026 by rpki-client