Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa
File:                     f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa (raw, json)
Hash identifier:          /Cs1WF4/rcWajmpewBJ8WHK8/dwA7PYGkTFcY95U248=
Subject key identifier:   27:46:FD:F2:15:EA:5E:46:D0:A4:31:D2:E7:33:79:40:27:AC:D3:29
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584D32D4D456C1DB5E28FD019E80
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa
Signing time:             Tue 17 Mar 2026 13:00:41 +0000
ROA not before:           Tue 17 Mar 2026 13:00:41 +0000
ROA not after:            Mon 15 Jun 2026 13:00:41 +0000
asID:                     65012
IP address blocks:        2607:9bc0:1020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:d4:d4:56:c1:db:5e:28:fd:01:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Mar 17 13:00:41 2026 GMT
            Not After : Jun 15 13:00:41 2026 GMT
        Subject: CN=5d80bc4f-e0b6-4b4a-90a2-760831b391f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:af:ab:5a:c7:f5:4e:2f:8d:12:fa:cc:21:
                    20:f7:63:7d:44:32:61:83:60:15:2f:72:bd:b9:54:
                    cc:15:f7:72:57:10:8b:e5:18:38:e8:08:fa:df:6f:
                    0e:13:fe:1a:02:b2:22:65:4b:51:f5:f6:df:55:73:
                    a8:5f:fa:6d:fa:a7:a1:f4:77:8d:f8:09:d0:86:3a:
                    0d:d4:af:49:27:1c:78:39:16:72:59:aa:1d:26:13:
                    91:1e:29:8b:57:b4:e2:25:8d:c3:9b:3e:6a:88:e7:
                    fe:ff:36:0b:5b:04:f9:b6:fc:3d:37:6d:b8:21:e5:
                    e6:92:4e:e6:c6:32:38:4c:34:51:24:ba:e3:8a:ea:
                    d6:17:9e:c2:16:5e:33:96:15:3e:5d:78:f3:ee:d8:
                    22:86:f7:64:57:f7:0c:cc:0e:79:e3:93:dc:b7:03:
                    4b:e7:7e:6a:39:8f:64:d4:63:f5:0c:d2:ae:97:92:
                    09:f6:97:12:ea:74:0d:53:4e:32:85:44:a3:99:d5:
                    53:b2:fc:eb:c6:0d:85:64:a7:08:55:35:4f:d4:5a:
                    c1:6a:49:31:32:6a:4d:95:f6:d4:32:36:21:f8:e9:
                    50:d2:df:61:a4:2a:0f:57:aa:fc:d7:15:ec:cb:50:
                    f1:74:c8:a1:5e:31:27:d2:ac:2a:b6:d4:61:fc:af:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:46:FD:F2:15:EA:5E:46:D0:A4:31:D2:E7:33:79:40:27:AC:D3:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:3a:c7:02:f4:4c:1f:a1:4e:92:10:7b:53:5f:c8:b6:8d:53:
         c9:43:0a:a7:4e:e3:c8:7d:b9:61:52:6f:a3:cf:1d:54:c9:b9:
         37:20:78:92:87:c1:c9:43:ab:3e:1d:af:e8:7d:c3:e7:f8:e5:
         4b:6d:6a:f1:26:bb:fc:29:57:b2:09:19:39:a1:4e:d9:0d:1d:
         f1:7e:0f:ce:a2:5b:e9:b7:0e:55:d7:94:76:6a:05:f4:05:1f:
         1d:94:c5:f2:ba:41:83:ae:cb:ed:04:9a:7f:d7:0a:74:9c:e3:
         d1:5b:3a:eb:2a:3b:13:b8:94:a1:77:90:00:c2:64:c5:e6:56:
         d5:b5:a0:88:34:88:b3:b7:72:d7:ec:1b:57:ef:52:5f:68:fa:
         08:7d:e4:12:63:ad:d2:04:03:2c:1c:bc:1e:9e:2e:ef:ac:68:
         16:f7:5c:3f:2f:2a:bd:e0:61:78:54:a4:e8:55:bf:10:e6:e4:
         fe:76:2a:d7:3b:e7:2a:8c:5e:6e:8e:ed:3f:47:47:6e:e6:f1:
         74:3a:76:b1:ea:09:6e:0b:b4:d9:93:9b:b2:56:a8:2d:90:e7:
         9c:be:ef:39:24:39:34:08:e6:4b:be:7f:e3:b7:88:64:3c:af:
         9f:cb:08:8e:64:48:9b:8d:a4:08:42:35:45:80:14:01:3c:9c:
         cd:7f:0e:81
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y1NRWwdteKP0BnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGJkYThlYTItYTE2OC00YThiLWIwMWItMjFhNDIxZTcx
MzBlMB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk
NWQ4MGJjNGYtZTBiNi00YjRhLTkwYTItNzYwODMxYjM5MWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjWvq1rH9U4vjRL6zCEg92N9RDJhg2AVL3K9
uVTMFfdyVxCL5Rg46Aj6328OE/4aArIiZUtR9fbfVXOoX/pt+qeh9HeN+AnQhjoN
1K9JJxx4ORZyWaodJhORHimLV7TiJY3Dmz5qiOf+/zYLWwT5tvw9N224IeXmkk7m
xjI4TDRRJLrjiurWF57CFl4zlhU+XXjz7tgihvdkV/cMzA5545PctwNL535qOY9k
1GP1DNKul5IJ9pcS6nQNU04yhUSjmdVTsvzrxg2FZKcIVTVP1FrBakkxMmpNlfbU
MjYh+OlQ0t9hpCoPV6r81xXsy1DxdMihXjEn0qwqttRh/K+Y+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCdG/fIV6l5G0KQx0uczeUAnrNMpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRh
OGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0MjFlNzEzMGUvZjcxMzZjYzctZDJiZC0z
YmY0LTkzNDEtNmEzYmNlODdmYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGJkYThlYTItYTE2OC00YThiLWIw
MWItMjFhNDIxZTcxMzBlL2RiZGE4ZWEyLWExNjgtNGE4Yi1iMDFiLTIxYTQyMWU3
MTMwZS5jcmwwHwYDVR0jBBgwFoAUr/w7HHl4MT3z8v6+TaRLIToIXqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRhOGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0
MjFlNzEzMGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgebwBAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJI6xwL0TB+hTpIQe1NfyLaNU8lDCqdO48h9uWFSb6PPHVTJuTcg
eJKHwclDqz4dr+h9w+f45UttavEmu/wpV7IJGTmhTtkNHfF+D86iW+m3DlXXlHZq
BfQFHx2UxfK6QYOuy+0Emn/XCnSc49FbOusqOxO4lKF3kADCZMXmVtW1oIg0iLO3
ctfsG1fvUl9o+gh95BJjrdIEAywcvB6eLu+saBb3XD8vKr3gYXhUpOhVvxDm5P52
Ktc75yqMXm6O7T9HR27m8XQ6drHqCW4LtNmTm7JWqC2Q55y+7zkkOTQI5ku+f+O3
iGQ8r5/LCI5kSJuNpAhCNUWAFAE8nM1/DoE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:36 2026 by rpki-client