Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6b997278-2a81-3a43-9ad7-f906ffea2a68.roa
File:                     6b997278-2a81-3a43-9ad7-f906ffea2a68.roa (raw, json)
Hash identifier:          FIVA2Gf5sqCSYaKOq7xCd2sZVMNxekd/X+XZrPPir20=
Subject key identifier:   4B:66:93:70:26:1F:F0:54:A5:63:A4:4C:F3:0D:55:E0:87:F3:9C:C0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFFFB141042BE1B85F9A78
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6b997278-2a81-3a43-9ad7-f906ffea2a68.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8999::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ff:b1:41:04:2b:e1:b8:5f:9a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=0c2c3da8-88bb-4a58-9fcf-d376bf2bd54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:81:73:a8:5d:52:00:be:27:89:49:82:bc:
                    c2:61:36:8f:a1:ee:db:1c:0b:e9:fe:e1:e9:4c:1c:
                    28:6c:cc:2b:1e:7a:fa:c2:cb:7b:62:1e:f5:5f:b9:
                    74:3d:e3:dd:4c:5e:45:1b:f9:bf:8c:02:f4:e3:6d:
                    63:cb:15:e7:42:1d:78:7e:cb:25:3c:13:6f:5f:ba:
                    d4:68:be:3a:dc:1a:a0:e2:2a:1b:03:b8:5b:b9:74:
                    12:0b:a0:ff:3a:ae:fc:af:a0:97:0a:97:af:ab:7c:
                    93:d4:8b:e3:80:c5:95:be:78:e0:d9:2d:47:08:bf:
                    71:d3:2e:aa:dc:e9:97:f5:45:89:6c:82:75:42:96:
                    cc:cc:25:b9:43:ea:c2:17:9d:fd:de:97:26:83:c5:
                    59:40:70:4e:19:5c:a6:cd:81:52:2c:9c:2d:d1:8c:
                    03:6f:24:c7:67:3b:70:21:dd:0b:8e:fe:30:b3:e0:
                    4a:5c:12:05:ae:5c:4c:8c:de:1e:3e:63:61:83:15:
                    2e:06:63:46:b9:0c:1f:54:24:94:37:04:82:3e:3e:
                    01:bd:c9:f6:12:31:a2:30:73:70:32:f4:b9:8f:99:
                    9d:fb:2d:b9:7f:6f:39:66:63:63:62:16:01:dd:a9:
                    29:8e:ab:ea:5e:93:5e:8a:b6:ed:24:31:2b:75:1f:
                    1d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:66:93:70:26:1F:F0:54:A5:63:A4:4C:F3:0D:55:E0:87:F3:9C:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6b997278-2a81-3a43-9ad7-f906ffea2a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8999::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c7:5f:4a:2e:9c:fa:ff:42:fa:07:69:2d:cd:c2:c9:ff:a7:
         f7:7c:50:3a:6c:77:27:9d:0a:f1:44:26:67:b8:55:91:d1:5e:
         a2:fd:77:49:b8:22:f4:2a:49:04:86:75:12:d8:5f:70:36:2b:
         f5:97:50:97:15:39:4e:7a:6e:0a:5f:00:34:e8:b8:aa:6d:29:
         59:81:2a:28:3e:8e:5a:ba:70:2a:22:28:22:77:59:70:23:96:
         ed:16:4f:ce:12:bb:97:a9:13:c3:e3:b2:19:b3:ed:a2:35:57:
         72:33:83:aa:3f:0e:7c:3a:9f:5f:be:f6:4e:fc:76:db:68:4f:
         70:eb:e8:bb:fc:78:ee:07:80:96:9b:00:d3:c2:7e:b3:d9:62:
         21:45:4c:63:ba:3d:a0:13:64:ff:b8:f7:ca:d6:fc:f5:d7:e4:
         a4:cc:03:f5:51:ea:eb:d5:02:67:5b:ee:d1:eb:e3:ed:ed:fe:
         a7:75:d9:b6:be:51:2f:9d:c0:fe:ae:da:02:91:53:32:b6:92:
         dc:85:ce:d9:2c:a7:74:a6:f2:42:53:94:ff:4d:db:73:c3:d0:
         55:7c:22:c4:aa:d9:f8:a3:80:ce:78:4d:39:b9:22:a2:e1:be:
         25:c3:0a:5b:2d:03:a4:c5:2c:22:d4:57:c6:4e:52:69:5e:45:
         df:bc:39:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09//+xQQQr4bhfmngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
MGMyYzNkYTgtODhiYi00YTU4LTlmY2YtZDM3NmJmMmJkNTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxeBc6hdUgC+J4lJgrzCYTaPoe7bHAvp/uHp
TBwobMwrHnr6wst7Yh71X7l0PePdTF5FG/m/jAL0421jyxXnQh14fsslPBNvX7rU
aL463Bqg4iobA7hbuXQSC6D/Oq78r6CXCpevq3yT1IvjgMWVvnjg2S1HCL9x0y6q
3OmX9UWJbIJ1QpbMzCW5Q+rCF5393pcmg8VZQHBOGVymzYFSLJwt0YwDbyTHZztw
Id0Ljv4ws+BKXBIFrlxMjN4ePmNhgxUuBmNGuQwfVCSUNwSCPj4Bvcn2EjGiMHNw
MvS5j5md+y25f285ZmNjYhYB3akpjqvqXpNeirbtJDErdR8dpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEtmk3AmH/BUpWOkTPMNVeCH85zAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNmI5OTcyNzgtMmE4MS0z
YTQzLTlhZDctZjkwNmZmZWEyYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYmZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF7HX0ounPr/QvoHaS3Nwsn/p/d8UDpsdyedCvFEJme4VZHRXqL9
d0m4IvQqSQSGdRLYX3A2K/WXUJcVOU56bgpfADTouKptKVmBKig+jlq6cCoiKCJ3
WXAjlu0WT84Su5epE8Pjshmz7aI1V3Izg6o/Dnw6n1++9k78dttoT3Dr6Lv8eO4H
gJabANPCfrPZYiFFTGO6PaATZP+498rW/PXX5KTMA/VR6uvVAmdb7tHr4+3t/qd1
2ba+US+dwP6u2gKRUzK2ktyFztksp3Sm8kJTlP9N23PD0FV8IsSq2fijgM54TTm5
IqLhviXDClstA6TFLCLUV8ZOUmleRd+8OVY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:52:56 2026 by rpki-client