Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f394829b-effe-3e90-b850-33357a563db4.roa
File:                     f394829b-effe-3e90-b850-33357a563db4.roa (raw, json)
Hash identifier:          SM2T/83xhgd6nZWQDkvguSAjCi/arG3jPW//v32THKk=
Subject key identifier:   D2:BD:7B:F9:C7:2F:00:B4:57:22:43:10:9E:96:9F:1F:09:03:26:9F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFC5EA90BE42DAF07B2B6C
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f394829b-effe-3e90-b850-33357a563db4.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:800d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:c5:ea:90:be:42:da:f0:7b:2b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=5563d868-0e22-4e1d-abb4-33c71052457c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:7b:b0:d9:ea:43:67:0f:5c:03:98:2e:ee:
                    d6:2e:d5:ef:5e:0a:a2:03:14:65:8e:c9:d4:e4:82:
                    f5:39:9d:1a:09:cb:94:43:f9:e3:82:fa:b3:e0:a8:
                    d9:87:65:f7:72:51:61:f5:4e:99:60:f3:68:19:94:
                    fe:e5:0f:a9:f1:f8:b7:e1:d1:6a:5e:ef:6d:59:c2:
                    47:65:22:33:37:ab:8b:12:43:a1:7f:7e:9b:eb:a6:
                    4f:ab:3c:fd:14:1a:90:ec:a6:b3:b0:11:b6:12:f1:
                    d6:32:39:77:e3:aa:25:69:81:a3:64:2d:59:f9:de:
                    29:d7:5f:d4:99:99:44:41:6d:a8:aa:ef:62:70:4d:
                    45:20:a4:b7:8f:d1:23:db:a1:d4:dc:88:a6:c8:dd:
                    48:fc:be:f4:b7:66:bd:cf:01:f3:0e:91:5a:59:24:
                    6f:e8:ae:7e:53:37:23:b2:36:f2:b5:3e:c0:c5:af:
                    39:eb:30:05:fc:ea:e3:e9:df:21:69:00:b3:d4:76:
                    99:56:eb:d8:47:0d:31:58:0f:3a:9a:0e:35:75:11:
                    13:27:96:6a:4c:49:78:4e:16:31:26:b4:21:27:7e:
                    5d:eb:66:cf:d6:73:c7:ed:b9:cc:2e:71:dc:51:15:
                    90:52:26:59:e1:eb:61:7c:56:43:8c:ff:32:5c:ca:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BD:7B:F9:C7:2F:00:B4:57:22:43:10:9E:96:9F:1F:09:03:26:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f394829b-effe-3e90-b850-33357a563db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:800d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f6:90:b3:e8:25:19:5b:a9:6f:12:a8:f0:7f:b2:cc:8e:b0:
         41:c0:3b:9b:b1:05:5c:6e:17:b0:be:3e:a9:43:2d:31:4c:16:
         df:17:15:8e:c9:3a:77:a6:3d:c7:2c:8a:4b:6e:ff:83:e4:f9:
         92:8f:e3:02:25:a0:fb:97:82:6a:50:04:ba:0c:32:bc:a4:ea:
         88:0e:43:06:e5:72:a3:48:8b:14:52:c4:9b:f1:35:3f:6a:ec:
         60:e4:10:19:27:a7:93:70:78:28:87:49:4b:bb:ea:37:9c:e6:
         e6:5a:b8:64:16:c7:25:7f:a1:82:c1:8f:14:88:1e:f6:f8:90:
         0a:2d:98:1f:88:ac:21:a8:91:7b:d8:46:d5:be:d8:db:66:9d:
         d7:c5:e9:ba:3a:bd:9b:c6:00:eb:c2:50:4b:68:00:9a:ed:dc:
         61:8a:fc:cb:ce:18:be:9b:dc:66:33:a0:b8:0b:2d:cb:bb:fa:
         c3:a0:e8:b8:03:cb:63:2f:dc:21:65:0f:ed:bd:7e:bd:33:f3:
         cd:aa:0a:27:43:5b:68:2d:3f:4f:6f:37:a3:f3:e0:75:99:15:
         5b:13:8f:e6:2d:56:13:a2:26:31:81:ba:c9:b4:cd:0c:da:9f:
         74:89:57:e8:60:bf:92:4b:b0:17:3c:9f:0a:f4:90:df:e3:7d:
         de:e7:ac:2a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09/8XqkL5C2vB7K2wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
NTU2M2Q4NjgtMGUyMi00ZTFkLWFiYjQtMzNjNzEwNTI0NTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYZ7sNnqQ2cPXAOYLu7WLtXvXgqiAxRljsnU
5IL1OZ0aCcuUQ/njgvqz4KjZh2X3clFh9U6ZYPNoGZT+5Q+p8fi34dFqXu9tWcJH
ZSIzN6uLEkOhf36b66ZPqzz9FBqQ7KazsBG2EvHWMjl346olaYGjZC1Z+d4p11/U
mZlEQW2oqu9icE1FIKS3j9Ej26HU3IimyN1I/L70t2a9zwHzDpFaWSRv6K5+Uzcj
sjbytT7Axa856zAF/Orj6d8haQCz1HaZVuvYRw0xWA86mg41dRETJ5ZqTEl4ThYx
JrQhJ35d62bP1nPH7bnMLnHcURWQUiZZ4ethfFZDjP8yXMqFyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNK9e/nHLwC0VyJDEJ6Wnx8JAyafMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZjM5NDgyOWItZWZmZS0z
ZTkwLWI4NTAtMzMzNTdhNTYzZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYAN
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABD2kLPoJRlbqW8SqPB/ssyOsEHAO5uxBVxuF7C+PqlDLTFMFt8X
FY7JOnemPccsiktu/4Pk+ZKP4wIloPuXgmpQBLoMMryk6ogOQwblcqNIixRSxJvx
NT9q7GDkEBknp5NweCiHSUu76jec5uZauGQWxyV/oYLBjxSIHvb4kAotmB+IrCGo
kXvYRtW+2NtmndfF6bo6vZvGAOvCUEtoAJrt3GGK/MvOGL6b3GYzoLgLLcu7+sOg
6LgDy2Mv3CFlD+29fr0z882qCidDW2gtP09vN6Pz4HWZFVsTj+YtVhOiJjGBusm0
zQzan3SJV+hgv5JLsBc8nwr0kN/jfd7nrCo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:07:26 2026 by rpki-client