Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e685fa36-6954-3303-8141-e6cb758abc87.roa
File:                     e685fa36-6954-3303-8141-e6cb758abc87.roa (raw, json)
Hash identifier:          i8ie0ibA52nYLLHz6Ei3/Kh8JXAmov9f3DSzOrZtQMg=
Subject key identifier:   45:1A:28:EA:AD:D9:99:BD:D0:0D:0C:F9:AD:7D:46:6D:6C:21:FE:81
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFF6C8A9AFBCADDFD98100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e685fa36-6954-3303-8141-e6cb758abc87.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8096::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:f6:c8:a9:af:bc:ad:df:d9:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=cc68829c-8cc1-45e3-827d-e3dfbe1b2c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9f:f1:7f:19:16:88:ed:d3:18:02:3b:e3:e4:
                    97:74:76:d1:4f:d6:08:59:eb:99:ab:61:24:47:74:
                    26:d6:e7:08:97:ec:60:aa:33:8b:70:e6:ff:10:5c:
                    66:5a:47:5b:fb:0b:bf:9d:99:72:5a:c0:96:b8:18:
                    9f:b5:6e:26:22:65:3d:31:32:66:1c:81:1e:69:90:
                    21:ae:c5:61:b8:b3:7e:9e:da:4f:22:39:39:d4:2e:
                    ab:e7:71:9e:48:d7:85:b0:16:d8:06:4d:d6:ca:c5:
                    83:1c:f0:80:5f:c4:c8:1b:e9:cc:79:67:05:d1:81:
                    cf:2f:d9:57:34:74:bb:3f:57:9b:97:06:d1:68:09:
                    31:ca:e9:e4:e9:1e:e0:d1:95:59:c6:10:dd:57:45:
                    27:5c:29:7f:4a:2c:1b:74:ee:55:67:e5:48:24:02:
                    66:cc:3e:3f:1c:a9:f9:76:07:64:3f:c6:f2:52:70:
                    0d:72:69:5c:7d:24:0b:e7:74:35:bd:fb:5f:1b:39:
                    b3:e9:c6:93:e6:3f:ed:f9:d5:96:98:9d:de:96:a4:
                    66:3c:26:7d:71:ad:c8:5b:f4:30:f8:97:07:73:08:
                    7a:f6:aa:b6:05:49:cf:df:94:98:52:fb:9c:d2:73:
                    79:9c:72:1f:d7:25:e0:29:65:4f:f4:39:c1:7e:88:
                    ba:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1A:28:EA:AD:D9:99:BD:D0:0D:0C:F9:AD:7D:46:6D:6C:21:FE:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e685fa36-6954-3303-8141-e6cb758abc87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8096::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:9b:b2:b3:ee:f2:83:4d:df:2e:69:3e:09:f3:40:25:b8:b8:
         1e:56:f5:21:f8:c1:37:d0:9e:7c:70:2a:6d:f9:de:72:24:51:
         f5:01:61:75:67:72:aa:3b:f7:8e:f9:9e:96:96:a2:20:c7:14:
         de:07:f1:0b:2a:0f:08:a1:3c:2c:54:1f:d2:87:b2:09:ee:88:
         9b:50:95:9c:1d:da:90:c0:58:ad:30:91:7b:3c:a9:d1:af:2b:
         27:03:7f:53:b6:a8:96:1c:c8:c7:3b:0f:61:0f:dc:40:6a:d4:
         7e:dc:c7:8f:34:80:a0:9d:8d:91:5b:a2:af:3f:c5:dd:62:77:
         6d:37:de:0b:74:83:ee:c9:24:71:6e:fd:65:80:5d:90:51:41:
         48:f1:bc:52:7b:ff:08:f3:1b:a7:a4:79:d2:72:56:02:6d:3f:
         12:da:b2:36:dd:f4:31:66:86:78:1f:2c:f2:69:13:62:b4:21:
         99:8d:60:f4:b9:c4:44:ac:71:5d:b7:11:93:92:98:65:c9:cd:
         79:d5:a4:c3:02:ae:f1:97:bc:b4:4e:1c:45:46:04:64:cf:6c:
         ce:79:ed:d5:e4:91:99:51:90:a9:3f:24:59:9a:06:ae:2e:28:
         88:b6:5f:0b:b3:ab:88:60:b1:1f:c9:a2:de:73:d0:8e:5f:23:
         d7:c5:a8:18
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09//bIqa+8rd/ZgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
Y2M2ODgyOWMtOGNjMS00NWUzLTgyN2QtZTNkZmJlMWIyYzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5/xfxkWiO3TGAI74+SXdHbRT9YIWeuZq2Ek
R3Qm1ucIl+xgqjOLcOb/EFxmWkdb+wu/nZlyWsCWuBiftW4mImU9MTJmHIEeaZAh
rsVhuLN+ntpPIjk51C6r53GeSNeFsBbYBk3WysWDHPCAX8TIG+nMeWcF0YHPL9lX
NHS7P1eblwbRaAkxyunk6R7g0ZVZxhDdV0UnXCl/SiwbdO5VZ+VIJAJmzD4/HKn5
dgdkP8byUnANcmlcfSQL53Q1vftfGzmz6caT5j/t+dWWmJ3elqRmPCZ9ca3IW/Qw
+JcHcwh69qq2BUnP35SYUvuc0nN5nHIf1yXgKWVP9DnBfoi6fwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEUaKOqt2Zm90A0M+a19Rm1sIf6BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZTY4NWZhMzYtNjk1NC0z
MzAzLTgxNDEtZTZjYjc1OGFiYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYCW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFubsrPu8oNN3y5pPgnzQCW4uB5W9SH4wTfQnnxwKm353nIkUfUB
YXVncqo79475npaWoiDHFN4H8QsqDwihPCxUH9KHsgnuiJtQlZwd2pDAWK0wkXs8
qdGvKycDf1O2qJYcyMc7D2EP3EBq1H7cx480gKCdjZFboq8/xd1id2033gt0g+7J
JHFu/WWAXZBRQUjxvFJ7/wjzG6ekedJyVgJtPxLasjbd9DFmhngfLPJpE2K0IZmN
YPS5xESscV23EZOSmGXJzXnVpMMCrvGXvLROHEVGBGTPbM557dXkkZlRkKk/JFma
Bq4uKIi2Xwuzq4hgsR/Jot5z0I5fI9fFqBg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:49 2026 by rpki-client