Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/947ec108-e649-31a9-899e-e100cba3d44b.roa
File:                     947ec108-e649-31a9-899e-e100cba3d44b.roa (raw, json)
Hash identifier:          F8q/4r35W1sxYNRd/UuibaE1tYXE8C+PLc0WvbgACi0=
Subject key identifier:   65:D5:E3:88:AF:C1:5D:47:59:FA:0C:A2:70:79:44:BF:43:A0:0B:5E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC00CF2C888FC08E8C538
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/947ec108-e649-31a9-899e-e100cba3d44b.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:802d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c0:0c:f2:c8:88:fc:08:e8:c5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=1e752174-f462-446d-9e27-0f491baf17f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:21:0a:28:85:fa:dc:96:dd:94:3c:49:60:89:
                    f2:c4:58:4c:b9:5d:24:8b:24:e1:65:4e:6d:5e:d1:
                    01:be:da:b8:19:ba:8e:84:9d:61:c1:34:b6:a0:73:
                    c8:05:38:a7:78:73:7a:94:85:27:54:bd:e6:db:61:
                    c7:09:62:d8:35:9f:14:09:95:da:b9:dc:79:14:5e:
                    e2:2c:40:b6:4c:1a:c6:46:d1:7c:6f:5f:ba:fd:c7:
                    05:ff:1e:5a:4b:76:35:3c:4f:49:88:ac:ca:0c:c8:
                    b4:b9:76:21:aa:be:a9:ab:98:75:5c:5b:42:85:16:
                    d3:24:39:68:a3:2c:28:b4:0b:0e:2e:f7:45:b7:cf:
                    87:bf:3e:93:5d:bf:4a:a5:b8:c7:0b:bc:76:05:05:
                    61:c2:3b:8f:62:9f:be:ad:f3:d0:34:2d:4c:a1:2d:
                    59:cb:24:7f:eb:9b:2f:ad:e1:b4:7c:c9:d6:d0:21:
                    79:ca:9d:32:5c:b7:7a:ba:3f:9a:51:1c:2f:7a:d4:
                    61:a7:50:5c:e5:35:12:58:45:eb:78:f3:55:39:b0:
                    71:c2:08:13:1c:fc:6c:81:c7:82:93:1c:0d:47:25:
                    f0:3f:aa:79:65:56:8e:c4:7c:04:da:34:19:5c:86:
                    7b:78:64:ba:0c:90:04:1d:3e:76:c6:b7:2c:14:dd:
                    88:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D5:E3:88:AF:C1:5D:47:59:FA:0C:A2:70:79:44:BF:43:A0:0B:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/947ec108-e649-31a9-899e-e100cba3d44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:802d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:0c:07:4b:da:78:95:f2:92:67:44:81:fc:20:10:e5:1e:5c:
         4c:1b:72:e0:1b:94:ed:39:bc:d3:54:56:f5:c2:18:dc:0f:5b:
         b8:ce:07:16:6f:8e:bd:a7:91:15:dc:e3:52:d9:e0:a7:6d:79:
         f6:39:f1:be:0e:e6:f2:39:1c:20:11:de:01:3f:41:24:2d:da:
         c7:fb:0f:78:9f:4b:a7:b6:b7:c6:92:78:6c:29:8b:a1:08:26:
         f1:2f:4a:87:52:2a:0a:47:1f:48:ca:0d:1d:72:35:c2:aa:1c:
         5f:a1:ab:5d:0f:b3:64:52:24:f5:fe:cd:10:87:11:fe:bf:e8:
         7e:bf:94:00:50:e3:ee:eb:1e:b3:fa:af:67:31:d3:53:b4:1a:
         69:e1:ed:f1:36:08:09:26:56:72:b2:bb:95:2d:b3:ed:ea:75:
         63:c5:6e:44:c6:ef:a3:59:a6:8d:3f:2f:38:1d:fc:74:11:c4:
         b0:61:f2:83:4f:f1:03:4b:db:d9:3e:40:9d:ae:fd:c9:dc:ac:
         ef:55:97:41:5b:d5:68:6f:4c:92:ca:c9:f1:2d:d1:bb:e8:87:
         b7:07:73:f9:45:d3:bf:44:a7:38:68:31:76:5f:65:99:b7:9d:
         48:be:10:a1:df:db:76:7c:bb:09:17:a4:ab:a1:de:d2:7b:eb:
         1d:80:60:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09/8AM8siI/AjoxTgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
MWU3NTIxNzQtZjQ2Mi00NDZkLTllMjctMGY0OTFiYWYxN2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CEKKIX63JbdlDxJYInyxFhMuV0kiyThZU5t
XtEBvtq4GbqOhJ1hwTS2oHPIBTineHN6lIUnVL3m22HHCWLYNZ8UCZXaudx5FF7i
LEC2TBrGRtF8b1+6/ccF/x5aS3Y1PE9JiKzKDMi0uXYhqr6pq5h1XFtChRbTJDlo
oywotAsOLvdFt8+Hvz6TXb9KpbjHC7x2BQVhwjuPYp++rfPQNC1MoS1ZyyR/65sv
reG0fMnW0CF5yp0yXLd6uj+aURwvetRhp1Bc5TUSWEXrePNVObBxwggTHPxsgceC
kxwNRyXwP6p5ZVaOxHwE2jQZXIZ7eGS6DJAEHT52xrcsFN2I6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGXV44ivwV1HWfoMonB5RL9DoAteMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOTQ3ZWMxMDgtZTY0OS0z
MWE5LTg5OWUtZTEwMGNiYTNkNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYAt
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADIMB0vaeJXykmdEgfwgEOUeXEwbcuAblO05vNNUVvXCGNwPW7jO
BxZvjr2nkRXc41LZ4KdtefY58b4O5vI5HCAR3gE/QSQt2sf7D3ifS6e2t8aSeGwp
i6EIJvEvSodSKgpHH0jKDR1yNcKqHF+hq10Ps2RSJPX+zRCHEf6/6H6/lABQ4+7r
HrP6r2cx01O0Gmnh7fE2CAkmVnKyu5Uts+3qdWPFbkTG76NZpo0/Lzgd/HQRxLBh
8oNP8QNL29k+QJ2u/cncrO9Vl0Fb1WhvTJLKyfEt0bvoh7cHc/lF079EpzhoMXZf
ZZm3nUi+EKHf23Z8uwkXpKuh3tJ76x2AYFY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:02 2026 by rpki-client