Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f053e8d3-b059-3c90-90ae-933fd26f0f4b.roa
File:                     f053e8d3-b059-3c90-90ae-933fd26f0f4b.roa (raw, json)
Hash identifier:          aRlBkLanoXtDnYRa/VDCCztxn3B5f/dyO6kYrpmOqnU=
Subject key identifier:   30:17:B4:14:07:3B:A5:7C:5F:61:85:A3:7C:A9:11:36:5F:8C:08:C5
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584DA3E55E2829091C82B5709000
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f053e8d3-b059-3c90-90ae-933fd26f0f4b.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2605:4300:2c13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:5e:28:29:09:1c:82:b5:70:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=7a80783e-3abc-4c2a-b3fa-ad560f160ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bb:f0:a6:31:0d:38:17:21:91:12:b5:81:e8:
                    26:32:92:3b:00:65:f2:40:b7:fc:27:97:6d:98:fc:
                    d0:0e:e2:eb:97:40:52:c0:58:75:fa:9f:cf:f9:a8:
                    eb:45:b8:a4:eb:1e:ad:e0:07:b9:0e:c3:04:e3:17:
                    cb:25:71:d2:26:ab:37:54:2e:d9:c5:da:b8:f4:e3:
                    16:4f:3e:e3:3a:c6:b7:2d:c5:f4:ee:92:11:f6:0c:
                    59:2b:4b:05:f0:c4:8e:b0:9b:c9:70:2d:7b:4a:61:
                    70:10:0d:13:db:1f:bb:f7:60:6d:6d:3a:d7:f8:38:
                    07:1a:62:82:d6:2a:74:87:2b:08:9a:d5:a2:e6:3b:
                    c9:c2:f6:44:9d:b8:00:59:a7:46:c2:01:78:df:d5:
                    62:51:e8:a0:46:f3:e1:1a:ee:b8:e3:f3:45:0c:ff:
                    65:ec:02:fc:50:d8:27:3a:f9:f6:98:19:e5:51:ed:
                    08:55:60:f2:cd:69:22:60:08:bb:81:d9:4b:75:2d:
                    03:ea:10:3f:97:b7:7a:f7:ae:68:2b:4a:bb:72:4d:
                    ac:4d:d3:61:20:0d:eb:5b:30:93:8e:b9:df:9a:93:
                    c5:af:60:b5:d3:a4:5b:c6:32:eb:ec:41:cc:49:26:
                    09:bc:9d:9e:e3:cb:05:f5:a6:c8:36:df:52:a3:2f:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:17:B4:14:07:3B:A5:7C:5F:61:85:A3:7C:A9:11:36:5F:8C:08:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f053e8d3-b059-3c90-90ae-933fd26f0f4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ab:df:5a:3d:28:9e:0d:62:24:bc:48:32:fb:98:03:b0:64:
         01:d8:1c:1e:4d:5f:15:2e:6e:b6:eb:dd:c9:5a:ce:71:69:87:
         df:3e:4d:db:db:b5:60:f4:80:03:3f:08:f2:87:c4:53:19:91:
         f5:89:f2:88:58:e9:aa:bd:2f:91:cc:23:07:74:1b:3e:7e:64:
         31:c5:5c:c4:07:e2:ef:8c:72:69:35:0f:b4:23:e7:f7:98:3f:
         56:69:71:2e:b2:66:c3:32:8b:2b:c5:d8:2f:23:d1:72:0b:57:
         18:29:81:fb:d2:83:9c:6f:25:83:e4:53:04:14:7d:9e:16:68:
         5e:50:02:29:37:39:82:5d:f1:0c:67:18:a9:b8:81:aa:2b:d1:
         05:85:29:37:4c:eb:9f:c1:dc:67:16:f7:82:86:4a:40:c9:ca:
         39:1b:22:28:63:f0:44:52:2c:ac:80:41:93:ed:4f:4d:7c:00:
         4c:12:93:69:d7:02:0e:f5:c6:9c:95:91:02:ba:3c:13:bb:80:
         a4:77:27:74:e0:a9:ff:d2:9b:6c:b0:47:49:48:a6:e7:fe:f7:
         c9:0a:68:dd:64:4e:99:34:a2:16:05:a1:a1:52:e8:7f:b7:2f:
         73:e2:2e:ea:ca:a1:19:8b:58:55:40:64:b3:08:02:df:88:72:
         58:c8:06:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2j5V4oKQkcgrVwkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk
N2E4MDc4M2UtM2FiYy00YzJhLWIzZmEtYWQ1NjBmMTYwYWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLvwpjENOBchkRK1gegmMpI7AGXyQLf8J5dt
mPzQDuLrl0BSwFh1+p/P+ajrRbik6x6t4Ae5DsME4xfLJXHSJqs3VC7Zxdq49OMW
Tz7jOsa3LcX07pIR9gxZK0sF8MSOsJvJcC17SmFwEA0T2x+792BtbTrX+DgHGmKC
1ip0hysImtWi5jvJwvZEnbgAWadGwgF439ViUeigRvPhGu644/NFDP9l7AL8UNgn
Ovn2mBnlUe0IVWDyzWkiYAi7gdlLdS0D6hA/l7d6965oK0q7ck2sTdNhIA3rWzCT
jrnfmpPFr2C106RbxjLr7EHMSSYJvJ2e48sF9abINt9Soy94IQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDAXtBQHO6V8X2GFo3ypETZfjAjFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjA1M2U4ZDMtYjA1OS0z
YzkwLTkwYWUtOTMzZmQyNmYwZjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHir31o9KJ4NYiS8SDL7mAOwZAHYHB5NXxUubrbr3claznFph98+
TdvbtWD0gAM/CPKHxFMZkfWJ8ohY6aq9L5HMIwd0Gz5+ZDHFXMQH4u+Mcmk1D7Qj
5/eYP1ZpcS6yZsMyiyvF2C8j0XILVxgpgfvSg5xvJYPkUwQUfZ4WaF5QAik3OYJd
8QxnGKm4gaor0QWFKTdM65/B3GcW94KGSkDJyjkbIihj8ERSLKyAQZPtT018AEwS
k2nXAg71xpyVkQK6PBO7gKR3J3Tgqf/Sm2ywR0lIpuf+98kKaN1kTpk0ohYFoaFS
6H+3L3PiLurKoRmLWFVAZLMIAt+IcljIBoY=
-----END CERTIFICATE-----
Generated at Wed Apr 29 11:16:56 2026 by rpki-client