Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/57006f51-1686-3873-a7f6-b159cd90b27d.roa
File:                     57006f51-1686-3873-a7f6-b159cd90b27d.roa (raw, json)
Hash identifier:          gC/LHtL+tiUhm6EiLIJIeOoCc+7GvOBmOF2ymZ/+azg=
Subject key identifier:   35:BA:38:68:AA:3E:5A:C1:4F:42:A5:EC:FD:F1:87:B1:18:7F:41:AC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D975553E00E0099D83541E280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/57006f51-1686-3873-a7f6-b159cd90b27d.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     33363
IP address blocks:        2607:f098:3100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:53:e0:0e:00:99:d8:35:41:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=878f6b72-73d6-41b6-9262-2c8de25a7fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e2:be:d4:66:03:75:3a:8c:95:73:b5:b2:ea:
                    85:f5:34:4b:10:74:d5:47:84:34:93:72:d1:98:ed:
                    bd:14:59:c4:d6:90:4c:6e:f7:eb:49:f0:af:64:33:
                    39:c1:76:0e:0c:48:a8:41:07:ab:35:3d:79:1f:a2:
                    33:4c:53:59:18:c3:d9:19:98:de:30:07:c5:b6:39:
                    2c:fd:f1:b9:64:e1:6a:b0:c9:ca:2a:6c:79:66:99:
                    16:d2:f0:ea:b8:cc:c2:c9:b4:81:50:30:a0:37:9c:
                    87:e8:50:bb:11:cb:03:4a:0b:db:11:33:17:a5:81:
                    55:3b:df:39:e1:6a:13:7e:10:fb:97:5a:92:46:41:
                    3b:d9:e4:e4:6f:9e:16:f3:da:d1:2d:6f:7f:90:88:
                    b3:a2:e9:21:bd:4c:e6:08:8b:8d:d5:35:05:93:92:
                    34:aa:ab:9c:1e:0c:89:88:22:3b:c1:8f:29:99:cf:
                    43:4f:c5:67:81:8b:cc:b0:a2:65:d3:3e:96:fb:7d:
                    04:f6:4d:b6:8e:1b:fd:98:70:cd:f0:80:d6:5f:a3:
                    8c:75:f5:a9:ef:d6:ce:50:25:6b:e7:80:08:2f:f2:
                    f3:49:7a:d8:24:07:7c:92:e9:39:e2:bb:4d:7e:d0:
                    92:8d:cd:df:b3:e4:1b:31:1e:22:46:25:92:8d:dd:
                    46:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BA:38:68:AA:3E:5A:C1:4F:42:A5:EC:FD:F1:87:B1:18:7F:41:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/57006f51-1686-3873-a7f6-b159cd90b27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:3100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:75:65:9b:14:3d:1c:21:f7:40:b7:5f:67:49:8b:b3:99:16:
         84:d6:81:26:65:07:db:77:24:2a:b7:ad:5e:93:1f:55:76:55:
         33:48:26:a5:65:69:61:d3:c5:3f:e8:4e:09:17:01:a0:a8:67:
         18:2f:25:68:8f:27:1f:5e:d2:25:4e:21:d2:96:53:e1:e2:70:
         2d:1e:9d:f7:9d:16:28:65:22:95:6a:de:2f:fc:0f:fd:74:47:
         fa:7c:50:7e:3f:87:8a:52:dd:95:52:c7:03:96:63:c1:05:17:
         89:93:a1:79:53:e3:2f:1d:5d:4e:25:e5:e2:90:2a:5f:c6:c3:
         7d:8c:44:3e:c8:12:67:00:6d:9b:45:ab:9c:52:d4:6f:d3:6c:
         b4:d3:9c:4a:e6:80:35:08:50:d1:e0:59:c4:3f:a1:2d:46:b4:
         f4:f6:32:88:7f:89:16:86:cc:35:bf:e8:94:96:a9:e8:05:11:
         ac:62:19:f4:1d:10:df:92:64:3c:95:d1:b5:6a:5b:1e:b6:1e:
         cc:82:ae:a9:29:eb:f7:3d:b7:a2:fc:59:c5:25:4c:fe:98:8f:
         80:44:de:57:33:bd:23:f2:22:cb:01:e7:d3:f2:7e:cb:b4:fd:
         03:4d:4c:dc:55:50:c1:18:00:ea:91:62:09:50:f9:2c:7e:09:
         cc:70:64:6c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2XVVPgDgCZ2DVB4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk
ODc4ZjZiNzItNzNkNi00MWI2LTkyNjItMmM4ZGUyNWE3ZmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuK+1GYDdTqMlXO1suqF9TRLEHTVR4Q0k3LR
mO29FFnE1pBMbvfrSfCvZDM5wXYODEioQQerNT15H6IzTFNZGMPZGZjeMAfFtjks
/fG5ZOFqsMnKKmx5ZpkW0vDquMzCybSBUDCgN5yH6FC7EcsDSgvbETMXpYFVO985
4WoTfhD7l1qSRkE72eTkb54W89rRLW9/kIizoukhvUzmCIuN1TUFk5I0qqucHgyJ
iCI7wY8pmc9DT8VngYvMsKJl0z6W+30E9k22jhv9mHDN8IDWX6OMdfWp79bOUCVr
54AIL/LzSXrYJAd8kuk54rtNftCSjc3fs+QbMR4iRiWSjd1GBwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDW6OGiqPlrBT0Kl7P3xh7EYf0GsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNTcwMDZmNTEtMTY4Ni0z
ODczLWE3ZjYtYjE1OWNkOTBiMjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgfwmDEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAC3VlmxQ9HCH3QLdfZ0mLs5kWhNaBJmUH23ckKretXpMfVXZVM0gm
pWVpYdPFP+hOCRcBoKhnGC8laI8nH17SJU4h0pZT4eJwLR6d950WKGUilWreL/wP
/XRH+nxQfj+HilLdlVLHA5ZjwQUXiZOheVPjLx1dTiXl4pAqX8bDfYxEPsgSZwBt
m0WrnFLUb9NstNOcSuaANQhQ0eBZxD+hLUa09PYyiH+JFobMNb/olJap6AURrGIZ
9B0Q35JkPJXRtWpbHrYezIKuqSnr9z23ovxZxSVM/piPgETeVzO9I/IiywHn0/J+
y7T9A01M3FVQwRgA6pFiCVD5LH4JzHBkbA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:01:56 2026 by rpki-client