Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af75499f-b1bf-3457-87dd-6cd7353b32a6.roa
File:                     af75499f-b1bf-3457-87dd-6cd7353b32a6.roa (raw, json)
Hash identifier:          SeK8ZsPB/0xHWEfxt5RaB+NQ5L+QLB7bdEd4wbQ8FVQ=
Subject key identifier:   B1:D5:A5:45:56:48:E0:4E:72:FF:CE:94:EA:4E:1F:83:B5:1C:67:C6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC74AF31DD69FF0A13C00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af75499f-b1bf-3457-87dd-6cd7353b32a6.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:807b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c7:4a:f3:1d:d6:9f:f0:a1:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=b21575f5-9ac1-4ff1-9552-6b9745ff3e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5c:49:5e:75:75:f9:9b:e7:71:da:d4:29:64:
                    49:13:5e:1f:0c:a1:9c:9f:13:19:53:e9:7b:7d:ae:
                    e0:56:c8:eb:6d:43:9c:76:96:7a:12:94:66:98:ca:
                    b5:f2:6b:44:7e:df:ec:3a:9e:69:87:74:4c:c3:79:
                    0c:84:88:92:c8:5a:dd:eb:52:e0:6b:2e:07:0a:62:
                    72:8b:3e:9d:e7:fe:a0:88:f9:bc:5d:c0:02:b8:0b:
                    fc:82:2f:3f:1f:aa:48:a4:15:d7:1c:5a:b0:08:c0:
                    dd:53:b0:6c:11:2c:3c:b3:cb:1b:a7:d7:1e:92:78:
                    7d:18:4b:61:5d:51:8f:3b:45:c4:40:21:ac:b8:58:
                    a4:7c:af:ec:22:c1:74:14:69:44:70:8b:2b:4f:d9:
                    6a:40:ae:78:24:59:37:2b:7d:20:8e:52:7c:83:aa:
                    62:70:81:aa:d3:88:16:af:cd:d8:3a:14:3e:1e:9c:
                    73:a0:70:25:26:a8:d0:d6:fb:eb:97:db:14:b4:e8:
                    a7:28:69:98:d5:39:7e:a3:06:db:c2:b5:d0:d8:03:
                    b9:d7:3c:5c:76:5e:89:5f:f7:89:0c:cc:62:9d:1a:
                    06:7c:75:31:89:8c:d3:d8:f0:96:a4:df:18:af:40:
                    4a:d7:4c:dc:a7:15:b8:e8:7a:9d:bd:e0:18:27:aa:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D5:A5:45:56:48:E0:4E:72:FF:CE:94:EA:4E:1F:83:B5:1C:67:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af75499f-b1bf-3457-87dd-6cd7353b32a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:807b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9d:a2:7b:b7:8c:4d:60:23:bb:69:e1:a5:32:2f:44:16:e3:
         be:45:55:5e:1f:44:73:92:58:eb:3e:cf:22:88:56:bc:2c:59:
         0a:12:a6:5c:81:2c:e3:16:22:ec:a2:fc:2f:8c:4b:c4:05:a6:
         0c:0c:ac:0e:d3:f0:f8:57:1f:59:69:0c:74:82:0c:d3:48:d4:
         85:ea:cc:fb:04:ae:d0:c6:9b:23:70:29:ce:11:71:ef:04:56:
         dd:09:bf:3b:b7:82:f1:31:fd:54:ce:84:96:dc:22:60:55:53:
         c4:44:d4:5c:7d:9d:4d:d0:a0:8b:76:a7:85:2a:73:90:e7:36:
         b1:8b:39:c6:ca:b6:bd:91:40:3a:a7:8e:43:4a:81:b7:e2:00:
         d0:2a:10:56:86:4a:ed:0f:7f:b4:3b:4e:0a:23:17:ee:72:bc:
         8e:88:a7:54:1c:07:eb:f9:44:88:2f:8a:a2:d1:98:2a:25:fd:
         aa:32:26:c4:26:6b:90:e3:3c:d8:e5:3f:7e:a0:24:00:1d:e7:
         d8:ec:48:06:41:10:3f:dc:f5:ad:fd:a6:f9:98:3a:23:98:96:
         af:6e:aa:fc:e3:f3:d7:f6:b3:3b:69:40:1a:17:db:33:ab:3d:
         25:21:af:88:79:51:30:4f:b9:15:86:63:56:dd:e8:71:c8:20:
         43:ba:ab:3e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09/8dK8x3Wn/ChPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
YjIxNTc1ZjUtOWFjMS00ZmYxLTk1NTItNmI5NzQ1ZmYzZTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VxJXnV1+ZvncdrUKWRJE14fDKGcnxMZU+l7
fa7gVsjrbUOcdpZ6EpRmmMq18mtEft/sOp5ph3RMw3kMhIiSyFrd61Lgay4HCmJy
iz6d5/6giPm8XcACuAv8gi8/H6pIpBXXHFqwCMDdU7BsESw8s8sbp9ceknh9GEth
XVGPO0XEQCGsuFikfK/sIsF0FGlEcIsrT9lqQK54JFk3K30gjlJ8g6picIGq04gW
r83YOhQ+HpxzoHAlJqjQ1vvrl9sUtOinKGmY1Tl+owbbwrXQ2AO51zxcdl6JX/eJ
DMxinRoGfHUxiYzT2PCWpN8Yr0BK10zcpxW46HqdveAYJ6oydQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLHVpUVWSOBOcv/OlOpOH4O1HGfGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYWY3NTQ5OWYtYjFiZi0z
NDU3LTg3ZGQtNmNkNzM1M2IzMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYB7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFqdonu3jE1gI7tp4aUyL0QW475FVV4fRHOSWOs+zyKIVrwsWQoS
plyBLOMWIuyi/C+MS8QFpgwMrA7T8PhXH1lpDHSCDNNI1IXqzPsErtDGmyNwKc4R
ce8EVt0Jvzu3gvEx/VTOhJbcImBVU8RE1Fx9nU3QoIt2p4Uqc5DnNrGLOcbKtr2R
QDqnjkNKgbfiANAqEFaGSu0Pf7Q7TgojF+5yvI6Ip1QcB+v5RIgviqLRmCol/aoy
JsQma5DjPNjlP36gJAAd59jsSAZBED/c9a39pvmYOiOYlq9uqvzj89f2sztpQBoX
2zOrPSUhr4h5UTBPuRWGY1bd6HHIIEO6qz4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:25 2026 by rpki-client