Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7292203b-eab6-3535-a002-7041af5896a7.roa
File:                     7292203b-eab6-3535-a002-7041af5896a7.roa (raw, json)
Hash identifier:          GJ5FzGMhmz4zlzb09hLghpNgR4bqFS7LB55iLt5I8e8=
Subject key identifier:   EF:71:FE:D3:6A:B5:9A:AB:94:D1:FE:1E:FC:A2:11:75:5C:97:BF:5F
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584F963865270AD201E7D6506780
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7292203b-eab6-3535-a002-7041af5896a7.roa
Signing time:             Thu 22 Oct 2026 13:00:13 +0000
ROA not before:           Thu 22 Oct 2026 13:00:13 +0000
ROA not after:            Wed 20 Jan 2027 14:00:13 +0000
asID:                     54994
IP address blocks:        2607:3f40:ff2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:96:38:65:27:0a:d2:01:e7:d6:50:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Oct 22 13:00:13 2026 GMT
            Not After : Jan 20 14:00:13 2027 GMT
        Subject: CN=19618ce9-8c80-4238-86d9-4af7de418858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:ec:bf:27:41:e8:7f:72:3c:01:19:60:99:
                    f8:63:52:0b:61:4a:e1:84:96:54:d2:6d:13:90:72:
                    2f:ee:72:3c:83:9a:92:80:56:a3:c2:c9:f6:e5:6e:
                    d5:c6:cb:5d:0e:1f:b6:95:d5:3f:9a:eb:53:cc:fc:
                    fd:0f:26:95:e0:2c:cf:52:62:de:25:4a:37:a9:df:
                    76:28:3b:1b:9d:bc:13:ef:70:bd:c9:7d:ca:df:ff:
                    49:8c:b4:45:81:e6:48:90:43:b0:c5:03:b1:da:4b:
                    4e:05:0f:b0:c5:76:a5:26:d4:10:63:9f:34:0a:03:
                    87:a1:88:ac:0f:87:7d:58:31:63:70:37:8f:c7:be:
                    79:26:a9:2d:fe:f1:93:56:07:11:1c:00:6d:21:73:
                    b8:4a:dc:9f:69:8f:17:2f:fb:50:33:41:f0:8c:b5:
                    13:f8:b8:83:86:a5:67:35:2f:aa:07:25:6b:9d:14:
                    54:30:c3:44:00:00:38:2d:b0:12:3f:57:29:35:51:
                    f1:8c:23:2b:2f:e8:eb:e0:cb:f1:e7:b7:a8:38:de:
                    92:29:a4:6e:cd:7e:4c:b0:c9:2d:81:cc:e1:0d:81:
                    06:ef:49:ff:6b:cf:bd:73:bd:37:02:df:26:3c:30:
                    fc:e0:76:41:fb:61:a5:ec:5e:0e:11:6c:5e:4d:0d:
                    c3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:71:FE:D3:6A:B5:9A:AB:94:D1:FE:1E:FC:A2:11:75:5C:97:BF:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7292203b-eab6-3535-a002-7041af5896a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3f40:ff2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:74:f3:8a:48:da:87:1b:04:b6:8b:e3:73:ea:c9:3c:ed:fa:
         7b:9d:fa:26:50:f3:61:50:19:eb:b1:66:85:24:b3:30:d3:a7:
         8d:0c:a5:e0:5c:8f:c6:05:71:5d:95:55:43:16:11:8a:8f:a8:
         8e:53:41:be:22:f5:2c:a7:ab:b7:a5:71:6a:d7:b9:29:67:4b:
         06:b8:f0:9f:5b:1c:d7:e2:40:64:5a:e0:c9:1b:a7:82:88:ef:
         12:88:11:4d:6a:21:7d:6c:5f:18:a8:c0:70:6b:91:89:34:11:
         68:44:78:63:ba:0f:7d:21:51:e9:f6:31:6d:8b:bc:2a:e6:75:
         84:68:9c:c8:a0:fc:39:f5:02:86:c0:ad:77:5a:c2:ac:77:21:
         a7:b3:e1:b4:56:50:aa:d1:27:4c:1b:c5:42:27:91:f3:c1:75:
         90:e0:83:79:c4:ed:82:4f:e6:78:21:8b:d2:aa:ba:fb:53:a8:
         50:4e:40:ce:a7:81:ca:93:e7:c6:a3:43:d4:cd:ce:2f:c7:3b:
         bf:aa:50:c7:82:9a:e3:a0:ed:1c:2c:7f:a0:1a:a3:84:8a:2d:
         b0:83:1b:6b:e8:af:78:24:fa:af:aa:7f:79:6b:da:f4:df:75:
         e3:46:0e:05:06:df:22:b5:26:4d:0b:0e:29:42:9f:9a:41:7e:
         1c:fd:31:c0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+WOGUnCtIB59ZQZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk
MTk2MThjZTktOGM4MC00MjM4LTg2ZDktNGFmN2RlNDE4ODU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjILsvydB6H9yPAEZYJn4Y1ILYUrhhJZU0m0T
kHIv7nI8g5qSgFajwsn25W7VxstdDh+2ldU/mutTzPz9DyaV4CzPUmLeJUo3qd92
KDsbnbwT73C9yX3K3/9JjLRFgeZIkEOwxQOx2ktOBQ+wxXalJtQQY580CgOHoYis
D4d9WDFjcDePx755Jqkt/vGTVgcRHABtIXO4StyfaY8XL/tQM0HwjLUT+LiDhqVn
NS+qByVrnRRUMMNEAAA4LbASP1cpNVHxjCMrL+jr4Mvx57eoON6SKaRuzX5MsMkt
gczhDYEG70n/a8+9c703At8mPDD84HZB+2Gl7F4OEWxeTQ3DjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO9x/tNqtZqrlNH+HvyiEXVcl79fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNzI5MjIwM2ItZWFiNi0z
NTM1LWEwMDItNzA0MWFmNTg5NmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP8r
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADh084pI2ocbBLaL43PqyTzt+nud+iZQ82FQGeuxZoUkszDTp40M
peBcj8YFcV2VVUMWEYqPqI5TQb4i9Synq7elcWrXuSlnSwa48J9bHNfiQGRa4Mkb
p4KI7xKIEU1qIX1sXxiowHBrkYk0EWhEeGO6D30hUen2MW2LvCrmdYRonMig/Dn1
AobArXdawqx3Iaez4bRWUKrRJ0wbxUInkfPBdZDgg3nE7YJP5nghi9KquvtTqFBO
QM6ngcqT58ajQ9TNzi/HO7+qUMeCmuOg7Rwsf6Aao4SKLbCDG2vor3gk+q+qf3lr
2vTfdeNGDgUG3yK1Jk0LDilCn5pBfhz9McA=
-----END CERTIFICATE-----
Generated at Tue Oct 27 18:43:28 2026 by rpki-client