Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/fa3db38d-2973-332b-9416-9816f962db4c.roa
File:                     fa3db38d-2973-332b-9416-9816f962db4c.roa (raw, json)
Hash identifier:          Kk7ELmci20axgejWepJl03Ro0juIQ82EpZuFmtgQHEQ=
Subject key identifier:   C2:5A:B6:60:A6:90:71:BE:C5:B1:D7:92:A4:65:B0:74:0B:F3:6D:1D
Certificate issuer:       /CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
Certificate serial:       010D0C9F4328584DBA3B20BE4E4E1B5115EE2900
Authority key identifier: E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/fa3db38d-2973-332b-9416-9816f962db4c.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     3599
IP address blocks:        2607:fee0:a000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:20:be:4e:4e:1b:51:15:ee:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=113e767f-974e-4566-9d34-57cf7b906059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:43:01:f1:c8:2a:f7:92:3a:d2:5d:a6:a2:48:
                    4d:54:8f:71:21:e3:b1:5d:e1:02:e9:7a:f6:bf:96:
                    47:45:60:fb:a0:92:55:75:c1:15:29:52:74:fc:c1:
                    1a:de:02:c3:0d:ad:b1:ae:a3:70:07:02:80:21:cc:
                    42:b5:d3:7d:8e:80:42:a0:d8:da:41:75:99:67:b5:
                    7c:60:d7:2d:5e:2d:70:44:38:60:c1:c4:b1:0a:57:
                    63:35:6b:4e:34:2f:1b:b5:af:55:1d:85:48:ef:cb:
                    73:b2:7c:21:02:4f:62:46:b6:45:42:88:8b:a5:e9:
                    91:9b:97:a3:8f:43:8e:46:a1:fd:06:07:e2:87:e3:
                    1b:91:e4:94:c2:1d:89:d7:f6:b9:de:a5:2d:97:0e:
                    5b:09:ec:2c:78:cf:0c:1f:1a:cc:c7:d1:ec:9b:c4:
                    ff:cb:4b:67:b6:bf:2f:ce:bf:ed:0d:56:21:62:5f:
                    f0:e5:0b:4b:61:1f:f3:94:71:2e:54:b9:99:8a:fa:
                    e0:88:35:13:f8:73:9c:b3:66:89:5a:31:89:b8:fa:
                    81:79:bf:69:fb:67:c3:b4:8f:0a:24:39:91:49:52:
                    16:74:ec:a4:e3:7b:24:3d:0a:dd:49:5e:fe:60:fa:
                    64:6f:ac:ee:f1:a6:7d:d1:5e:97:8f:42:7d:45:e6:
                    2a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5A:B6:60:A6:90:71:BE:C5:B1:D7:92:A4:65:B0:74:0B:F3:6D:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/fa3db38d-2973-332b-9416-9816f962db4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fee0:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:8a:8b:be:b9:c7:47:3d:2d:30:43:43:0a:05:1a:5d:1c:d8:
         73:6f:c1:87:0b:87:d0:81:ea:a4:50:9c:b2:3d:a0:ba:3a:0a:
         9a:ff:3c:33:53:f9:fd:5a:f0:46:42:ea:b0:89:3f:db:c7:3a:
         a0:8f:77:27:79:85:c5:a2:e8:3f:2e:54:fa:b5:13:bd:3c:25:
         a3:16:1a:4e:8d:29:d4:f9:a3:12:a2:32:01:98:65:11:a2:2b:
         09:e8:8c:fc:09:38:c7:32:56:13:77:5e:ad:b1:bf:3a:85:4a:
         79:06:cf:6e:a1:b5:50:83:ee:dd:1a:aa:0b:64:1b:26:06:c3:
         9d:44:53:07:84:f5:92:09:68:e8:ad:86:87:6f:c4:03:b1:b5:
         5e:58:52:5a:fc:23:b0:cf:01:65:15:d7:70:3a:a5:6b:da:d5:
         d4:50:1b:80:98:3b:57:fb:03:50:f1:4e:67:3b:ae:6f:b8:45:
         5c:95:fc:2c:8e:1b:af:4d:f2:21:b8:ca:3f:80:a5:51:a4:2f:
         02:d3:9b:04:e7:65:a2:a5:2d:60:87:4f:5e:9f:8f:c0:c9:0c:
         2f:84:cb:e5:9c:2e:4d:fc:76:d1:6a:7d:8f:cd:c5:87:33:52:
         fe:d4:b3:6d:51:af:71:8c:f9:df:d8:14:be:3c:41:fc:05:25:
         f8:b5:32:c0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE26OyC+Tk4bURXuKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDhkMTRhOWItMGRjZS00NTc2LThkMjAtOGRhNGJjMTVm
YjdhMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
MTEzZTc2N2YtOTc0ZS00NTY2LTlkMzQtNTdjZjdiOTA2MDU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokMB8cgq95I60l2mokhNVI9xIeOxXeEC6Xr2
v5ZHRWD7oJJVdcEVKVJ0/MEa3gLDDa2xrqNwBwKAIcxCtdN9joBCoNjaQXWZZ7V8
YNctXi1wRDhgwcSxCldjNWtONC8bta9VHYVI78tzsnwhAk9iRrZFQoiLpemRm5ej
j0OORqH9Bgfih+MbkeSUwh2J1/a53qUtlw5bCewseM8MHxrMx9Hsm8T/y0tntr8v
zr/tDVYhYl/w5QtLYR/zlHEuVLmZivrgiDUT+HOcs2aJWjGJuPqBeb9p+2fDtI8K
JDmRSVIWdOyk43skPQrdSV7+YPpkb6zu8aZ90V6Xj0J9ReYqlwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMJatmCmkHG+xbHXkqRlsHQL820dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGQx
NGE5Yi0wZGNlLTQ1NzYtOGQyMC04ZGE0YmMxNWZiN2EvZmEzZGIzOGQtMjk3My0z
MzJiLTk0MTYtOTgxNmY5NjJkYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDhkMTRhOWItMGRjZS00NTc2LThk
MjAtOGRhNGJjMTVmYjdhLzA4ZDE0YTliLTBkY2UtNDU3Ni04ZDIwLThkYTRiYzE1
ZmI3YS5jcmwwHwYDVR0jBBgwFoAU518BJuVvelX+TBq3q+e776PO3jMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGQxNGE5Yi0wZGNlLTQ1NzYtOGQyMC04ZGE0
YmMxNWZiN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf+4KAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAoIqLvrnHRz0tMENDCgUaXRzYc2/BhwuH0IHqpFCcsj2gujoKmv88
M1P5/VrwRkLqsIk/28c6oI93J3mFxaLoPy5U+rUTvTwloxYaTo0p1PmjEqIyAZhl
EaIrCeiM/Ak4xzJWE3derbG/OoVKeQbPbqG1UIPu3RqqC2QbJgbDnURTB4T1kglo
6K2Gh2/EA7G1XlhSWvwjsM8BZRXXcDqla9rV1FAbgJg7V/sDUPFOZzuub7hFXJX8
LI4br03yIbjKP4ClUaQvAtObBOdloqUtYIdPXp+PwMkML4TL5ZwuTfx20Wp9j83F
hzNS/tSzbVGvcYz539gUvjxB/AUl+LUywA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:00:29 2026 by rpki-client