Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65d136f5-59f2-3612-beda-18d07da1101d.roa
File:                     65d136f5-59f2-3612-beda-18d07da1101d.roa (raw, json)
Hash identifier:          8+eXJGsmNp1K4BRzeu771L/OMlG3zX2dUW/I8KswPMI=
Subject key identifier:   0A:72:87:A3:36:3C:94:3E:65:A6:5C:1A:9F:EE:BC:84:4D:5F:78:28
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFF3AAB418AC679C94B580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65d136f5-59f2-3612-beda-18d07da1101d.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2607:f098:40ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:f3:aa:b4:18:ac:67:9c:94:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=03df6533-abb1-45ed-82f4-3ba28aa3940e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:20:83:8d:47:26:9a:c7:83:74:25:67:d3:91:
                    1b:ad:e9:bc:64:ac:61:a9:03:eb:30:1a:4b:a9:9a:
                    51:6b:5b:f3:f0:cb:5f:63:d7:35:75:24:00:b6:7f:
                    19:4c:a1:a5:b7:c4:0b:d2:5b:97:ca:23:dd:e7:ac:
                    9e:63:7e:68:58:84:07:5d:d7:cf:bb:58:7b:c1:34:
                    81:bd:87:9b:5f:ee:8d:38:46:d5:65:bb:6d:cf:7b:
                    b3:90:d5:3b:4a:8a:19:68:ad:54:6f:7c:52:47:74:
                    0d:d8:d7:cb:72:15:97:66:b7:ac:59:2c:79:bb:94:
                    06:cd:82:02:60:c1:f9:e0:41:22:b2:c4:87:93:b6:
                    e2:2d:91:37:be:34:bb:ba:09:f3:c6:0c:84:62:78:
                    52:e3:48:79:20:20:8e:69:e0:f7:dd:dd:43:a7:17:
                    64:03:b2:55:2e:6c:c3:76:1c:95:17:8b:59:42:52:
                    88:ac:c9:f4:83:61:b2:59:5a:8a:91:e6:78:7d:1d:
                    bb:d4:7d:f9:06:32:c1:a8:bd:e5:a9:81:a3:f4:a1:
                    36:18:71:74:33:12:53:21:bd:e0:a8:2d:c6:ac:48:
                    f3:05:a6:aa:9d:71:89:ce:20:6b:21:f4:95:c7:b1:
                    0a:27:89:1e:8e:d7:fa:4d:b8:3d:f2:5a:02:c2:d8:
                    52:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:72:87:A3:36:3C:94:3E:65:A6:5C:1A:9F:EE:BC:84:4D:5F:78:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65d136f5-59f2-3612-beda-18d07da1101d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:40ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f1:93:03:1f:ea:1f:84:56:ac:3c:99:c2:74:d1:30:9e:0c:
         a2:5c:11:c7:78:47:b0:b5:91:27:6c:90:c7:f0:4c:2b:93:dc:
         52:f3:ec:c2:d6:d5:b7:ca:5f:0c:13:04:91:42:b2:16:80:ca:
         36:46:a6:b2:6f:f3:27:ef:86:5d:6e:d5:6d:c3:11:88:c1:44:
         87:df:06:bb:76:da:af:3e:aa:68:c6:5b:42:73:87:cd:45:42:
         1f:ee:73:ff:d9:24:eb:6d:d2:a0:42:c6:4c:02:54:e4:bd:68:
         1f:f8:20:91:4f:bf:23:1d:35:f9:b7:fb:50:a2:8f:43:80:e3:
         56:82:c3:4c:cf:44:0e:4c:e8:6b:31:de:5f:24:99:21:fa:4c:
         09:f1:5d:b4:22:a8:b2:6b:e9:a6:b3:90:a9:b6:f7:4a:0a:5b:
         11:ca:90:f3:a3:89:09:1b:b4:0d:7e:89:20:55:04:67:dd:2d:
         0f:a0:9e:44:7d:93:03:98:3d:d0:f9:4e:87:89:8e:68:7b:88:
         66:60:3b:c3:62:4f:3d:77:89:b0:4b:c0:19:26:ce:9f:0a:17:
         32:85:d2:45:18:18:c4:03:1a:95:60:0d:f0:0e:94:0c:f0:ff:
         a0:2c:8e:ec:55:fa:d9:c1:75:19:bf:35:14:ae:b2:5f:ea:69:
         ca:ce:b9:f4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09//OqtBisZ5yUtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
MDNkZjY1MzMtYWJiMS00NWVkLTgyZjQtM2JhMjhhYTM5NDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiCDjUcmmseDdCVn05Ebrem8ZKxhqQPrMBpL
qZpRa1vz8MtfY9c1dSQAtn8ZTKGlt8QL0luXyiPd56yeY35oWIQHXdfPu1h7wTSB
vYebX+6NOEbVZbttz3uzkNU7SooZaK1Ub3xSR3QN2NfLchWXZresWSx5u5QGzYIC
YMH54EEissSHk7biLZE3vjS7ugnzxgyEYnhS40h5ICCOaeD33d1DpxdkA7JVLmzD
dhyVF4tZQlKIrMn0g2GyWVqKkeZ4fR271H35BjLBqL3lqYGj9KE2GHF0MxJTIb3g
qC3GrEjzBaaqnXGJziBrIfSVx7EKJ4kejtf6Tbg98loCwthSwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFApyh6M2PJQ+ZaZcGp/uvIRNX3goMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNjVkMTM2ZjUtNTlmMi0z
NjEyLWJlZGEtMThkMDdkYTExMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwmED/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFvxkwMf6h+EVqw8mcJ00TCeDKJcEcd4R7C1kSdskMfwTCuT3FLz
7MLW1bfKXwwTBJFCshaAyjZGprJv8yfvhl1u1W3DEYjBRIffBrt22q8+qmjGW0Jz
h81FQh/uc//ZJOtt0qBCxkwCVOS9aB/4IJFPvyMdNfm3+1Cij0OA41aCw0zPRA5M
6Gsx3l8kmSH6TAnxXbQiqLJr6aazkKm290oKWxHKkPOjiQkbtA1+iSBVBGfdLQ+g
nkR9kwOYPdD5ToeJjmh7iGZgO8NiTz13ibBLwBkmzp8KFzKF0kUYGMQDGpVgDfAO
lAzw/6AsjuxV+tnBdRm/NRSusl/qacrOufQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:29 2026 by rpki-client