Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa
File:                     3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa (raw, json)
Hash identifier:          PkmW1emZFJKN0pQuGXvJ6I9P31f7U7Fg0EdslQ6OWH0=
Subject key identifier:   63:18:97:C8:97:62:19:10:B6:CD:1A:50:CC:00:AB:06:3A:B8:82:A1
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F4328584D3DFFA8EC2806432CBDF68000
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     32982
IP address blocks:        2607:f368:a004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:a8:ec:28:06:43:2c:bd:f6:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=66c34f1b-c371-4585-8cea-41769931befa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:aa:16:7b:37:28:fc:2b:f2:24:ac:ef:06:5d:
                    5c:6a:f8:69:d0:94:88:d3:7d:f2:e4:39:14:15:ad:
                    e3:2c:24:47:56:af:b5:7d:3f:14:d2:b4:4d:bb:d9:
                    95:c5:2b:1e:3a:82:96:06:0f:15:c3:e5:ed:3d:b2:
                    8d:ee:59:c6:ac:13:7a:33:94:df:66:60:57:0f:94:
                    64:17:7e:6a:76:ca:92:85:5f:12:e4:df:23:1d:ec:
                    4d:62:52:2a:5b:26:70:8e:26:44:cf:0d:ed:bb:93:
                    45:42:53:f4:89:6b:0d:46:cd:12:51:20:cc:64:3f:
                    b7:ec:a7:24:32:f5:69:73:36:dd:f9:22:bd:f7:92:
                    8d:ad:b4:0d:27:43:9f:d3:43:35:76:bb:ae:d2:7f:
                    39:46:34:58:88:28:67:02:5a:80:56:29:5f:73:aa:
                    76:f8:d3:dc:85:21:fe:78:64:c1:0a:66:dd:87:4a:
                    35:71:27:1b:c6:8d:11:b7:93:0d:58:fa:bb:3c:db:
                    2d:18:8c:e7:63:95:9d:39:29:d3:21:e0:10:27:f6:
                    34:08:e4:f9:c1:27:cf:b2:b7:f1:a4:80:54:9a:68:
                    05:11:b9:57:9d:57:82:9a:83:fa:33:30:a9:15:c6:
                    fb:51:0a:3b:f1:ea:78:8e:1f:e3:05:bd:61:21:a7:
                    e3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:18:97:C8:97:62:19:10:B6:CD:1A:50:CC:00:AB:06:3A:B8:82:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:95:69:31:a8:25:c5:63:a1:e6:c7:d2:c5:48:9f:7d:8e:8d:
         00:cb:60:a5:4b:41:c5:e3:bc:db:3d:32:80:7c:14:87:13:5c:
         8f:0b:85:f7:5f:9d:43:43:58:1e:58:c5:d7:c0:b0:a8:a6:71:
         16:10:60:a7:dd:d8:0a:dc:30:05:cb:ed:6f:00:9f:c0:56:7a:
         6d:1c:c8:6b:34:97:0f:71:a2:82:6a:55:9d:a0:4e:e9:a8:d5:
         e1:13:91:a0:b3:b8:5b:1e:39:ee:ef:2b:8a:6e:82:29:e9:0b:
         c4:0f:2d:ae:8e:d1:12:ac:86:bc:50:86:86:81:38:4b:b7:f4:
         b1:1d:6e:f6:b2:98:6a:ca:42:03:6f:63:c9:31:76:e2:03:68:
         41:93:4a:5b:7a:42:e3:ce:55:f9:6b:bb:54:95:f4:65:d3:c7:
         07:fc:3a:d1:78:e9:7b:9c:c7:50:e3:2a:69:ec:8c:ad:65:e3:
         7f:41:f8:93:ab:81:33:d4:47:7d:52:07:bc:91:5f:e3:34:37:
         e6:8a:39:3c:d8:38:2b:67:b9:f3:20:9d:88:b8:cd:51:95:4e:
         0d:aa:95:b9:72:1e:32:61:e8:47:17:b2:25:7c:6b:12:a2:fc:
         58:07:bd:bd:2c:5d:78:f4:67:dc:3c:51:8e:e7:c5:fd:86:47:
         df:64:19:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09/6jsKAZDLL32gAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwMWI2OTQtNjI0Mi00YjFjLWE4NDEtZDBhNzIxNGNk
OWM3MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
NjZjMzRmMWItYzM3MS00NTg1LThjZWEtNDE3Njk5MzFiZWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKoWezco/CvyJKzvBl1cavhp0JSI033y5DkU
Fa3jLCRHVq+1fT8U0rRNu9mVxSseOoKWBg8Vw+XtPbKN7lnGrBN6M5TfZmBXD5Rk
F35qdsqShV8S5N8jHexNYlIqWyZwjiZEzw3tu5NFQlP0iWsNRs0SUSDMZD+37Kck
MvVpczbd+SK995KNrbQNJ0Of00M1druu0n85RjRYiChnAlqAVilfc6p2+NPchSH+
eGTBCmbdh0o1cScbxo0Rt5MNWPq7PNstGIznY5WdOSnTIeAQJ/Y0COT5wSfPsrfx
pIBUmmgFEblXnVeCmoP6MzCpFcb7UQo78ep4jh/jBb1hIafjyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGMYl8iXYhkQts0aUMwAqwY6uIKhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjAx
YjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3MjE0Y2Q5YzcvM2Q1MWZmOTYtMmY4OC0z
NGZkLTk3NWItMWEzMmNmMmYxZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYwMWI2OTQtNjI0Mi00YjFjLWE4
NDEtZDBhNzIxNGNkOWM3L2U2MDFiNjk0LTYyNDItNGIxYy1hODQxLWQwYTcyMTRj
ZDljNy5jcmwwHwYDVR0jBBgwFoAUlnqmOy7TqmVEC36L9Uu68e2VUAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjAxYjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3
MjE0Y2Q5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfzaKAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHWVaTGoJcVjoebH0sVIn32OjQDLYKVLQcXjvNs9MoB8FIcTXI8L
hfdfnUNDWB5YxdfAsKimcRYQYKfd2ArcMAXL7W8An8BWem0cyGs0lw9xooJqVZ2g
Tumo1eETkaCzuFseOe7vK4puginpC8QPLa6O0RKshrxQhoaBOEu39LEdbvaymGrK
QgNvY8kxduIDaEGTSlt6QuPOVflru1SV9GXTxwf8OtF46Xucx1DjKmnsjK1l439B
+JOrgTPUR31SB7yRX+M0N+aKOTzYOCtnufMgnYi4zVGVTg2qlblyHjJh6EcXsiV8
axKi/FgHvb0sXXj0Z9w8UY7nxf2GR99kGXM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:28:21 2026 by rpki-client