Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/de25c7d4-d2c5-3b64-88d7-1bd1f662cafe.roa
File:                     de25c7d4-d2c5-3b64-88d7-1bd1f662cafe.roa (raw, json)
Hash identifier:          sec8QzrD3phofixjejsajxLYsP5zX9JVpP5turOr2RI=
Subject key identifier:   4D:CF:D5:AC:79:F2:33:8A:79:28:89:4F:5F:97:54:22:27:66:79:E0
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E08223E7A7C7FD3134B898C00
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/de25c7d4-d2c5-3b64-88d7-1bd1f662cafe.roa
Signing time:             Mon 01 Jun 2026 22:43:59 +0000
ROA not before:           Mon 01 Jun 2026 22:43:59 +0000
ROA not after:            Sun 30 Aug 2026 22:43:59 +0000
asID:                     8075
IP address blocks:        2620:147:d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:22:3e:7a:7c:7f:d3:13:4b:89:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jun  1 22:43:59 2026 GMT
            Not After : Aug 30 22:43:59 2026 GMT
        Subject: CN=700dc480-ccc2-4e6f-bb69-37267db4f988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:0e:3e:bc:ea:b1:8d:b6:04:72:45:32:fd:
                    4d:e8:3a:a9:39:9a:1b:f6:3b:6d:cc:8c:75:a3:3a:
                    3c:dd:ce:4a:6f:e0:e5:a3:68:4e:b9:dd:6c:af:44:
                    73:47:cd:0d:5a:d5:f1:1d:44:4f:9e:37:61:6d:15:
                    6d:72:e0:e4:93:d2:e2:ee:f3:7e:13:b7:00:6c:d9:
                    d4:32:dd:35:a9:eb:fc:1e:24:77:fa:0b:32:bd:27:
                    42:4b:0b:2f:b5:02:96:d5:ca:f5:42:7a:51:db:c3:
                    9c:2f:84:7f:26:0e:30:e2:1f:06:31:6a:bc:60:e6:
                    4d:90:40:92:7a:dd:ee:7d:5f:17:f7:1d:1d:34:c9:
                    b6:6c:ba:8a:69:cf:ff:e6:b5:d5:52:43:e9:0f:e1:
                    f7:58:d7:7c:bc:95:9a:e7:c4:0a:19:bd:ed:11:5b:
                    39:54:88:80:43:ea:00:f2:d8:a1:8a:ac:9f:55:2e:
                    c9:94:43:b6:ec:3b:ad:55:b4:ea:7b:47:6d:7e:de:
                    2c:8a:6f:7f:52:dc:03:8f:b1:4e:69:37:ae:4b:3b:
                    fd:57:14:8b:9b:57:75:f6:f3:d4:54:24:d5:de:9c:
                    4c:1e:3e:67:aa:a7:6f:5a:12:35:cb:82:7b:6d:89:
                    07:eb:64:a4:5f:68:5d:a3:a3:09:b9:ff:74:ba:da:
                    92:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CF:D5:AC:79:F2:33:8A:79:28:89:4F:5F:97:54:22:27:66:79:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/de25c7d4-d2c5-3b64-88d7-1bd1f662cafe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:61:e3:3c:6c:07:ef:41:18:ae:dd:7c:59:d6:dd:e1:79:04:
         19:7c:cd:5e:c1:54:86:0a:2e:b6:b7:30:fd:e7:e0:c4:96:64:
         5d:aa:37:45:70:4d:9a:39:f9:31:94:8e:f2:90:e1:91:2d:df:
         2b:80:54:6b:d9:c3:87:5a:55:d6:48:93:d9:7a:89:8d:57:9d:
         96:a7:df:be:ea:0b:29:d2:dd:7f:32:11:6c:19:35:2e:13:e8:
         5a:b5:dd:4e:88:1e:60:02:71:59:85:14:98:9d:57:36:42:97:
         4e:50:43:de:7c:2e:2b:02:15:bc:57:8b:e3:9d:5d:41:fa:30:
         b0:1f:a2:bd:c1:a5:a3:4f:4b:55:ff:61:5b:1b:36:58:02:f7:
         58:9c:da:f9:6f:41:7e:1c:88:9e:fc:1a:8e:63:3f:f5:d2:2e:
         f1:c8:a1:38:3d:88:dc:bb:f6:8a:56:39:14:94:f2:aa:00:78:
         d0:67:23:2e:e1:30:b0:e3:1c:40:fa:96:db:67:68:cd:10:1e:
         18:78:c6:28:a1:f4:1a:ad:0e:e7:08:0f:0d:57:9f:1c:ec:f4:
         b1:d0:68:e3:bc:f0:87:1c:f8:8c:0f:cb:fa:df:aa:ff:a1:e2:
         f6:3f:df:a1:55:e0:26:15:a3:b0:50:ec:3f:d3:1c:6b:98:f3:
         03:8c:67:15
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4IIj56fH/TE0uJjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDYwMTIyNDM1OVoXDTI2MDgzMDIyNDM1OVowLzEtMCsGA1UEAxMk
NzAwZGM0ODAtY2NjMi00ZTZmLWJiNjktMzcyNjdkYjRmOTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsUOPrzqsY22BHJFMv1N6DqpOZob9jttzIx1
ozo83c5Kb+Dlo2hOud1sr0RzR80NWtXxHURPnjdhbRVtcuDkk9Li7vN+E7cAbNnU
Mt01qev8HiR3+gsyvSdCSwsvtQKW1cr1QnpR28OcL4R/Jg4w4h8GMWq8YOZNkECS
et3ufV8X9x0dNMm2bLqKac//5rXVUkPpD+H3WNd8vJWa58QKGb3tEVs5VIiAQ+oA
8tihiqyfVS7JlEO27DutVbTqe0dtft4sim9/UtwDj7FOaTeuSzv9VxSLm1d19vPU
VCTV3pxMHj5nqqdvWhI1y4J7bYkH62SkX2hdo6MJuf90utqSYwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE3P1ax58jOKeSiJT1+XVCInZnngMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvZGUyNWM3ZDQtZDJjNS0z
YjY0LTg4ZDctMWJkMWY2NjJjYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABRw0w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAP2HjPGwH70EYrt18Wdbd4XkEGXzNXsFUhgoutrcw/efgxJZkXao3
RXBNmjn5MZSO8pDhkS3fK4BUa9nDh1pV1kiT2XqJjVedlqffvuoLKdLdfzIRbBk1
LhPoWrXdTogeYAJxWYUUmJ1XNkKXTlBD3nwuKwIVvFeL451dQfowsB+ivcGlo09L
Vf9hWxs2WAL3WJza+W9BfhyInvwajmM/9dIu8cihOD2I3Lv2ilY5FJTyqgB40Gcj
LuEwsOMcQPqW22dozRAeGHjGKKH0Gq0O5wgPDVefHOz0sdBo47zwhxz4jA/L+t+q
/6Hi9j/foVXgJhWjsFDsP9Mca5jzA4xnFQ==
-----END CERTIFICATE-----
Generated at Wed Jun 3 19:44:55 2026 by rpki-client