Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b48fc4ec-9c53-3345-9340-6afbc244668b.roa
File:                     b48fc4ec-9c53-3345-9340-6afbc244668b.roa (raw, json)
Hash identifier:          fQBQpdVrdP1k7+jtzUXKtIDVfqmNSlXfcI/Mf2vEkvg=
Subject key identifier:   E1:DA:07:6E:1E:0A:B1:AA:6F:63:C1:BA:BA:C4:E0:FD:2A:23:6A:21
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584D386A4DE389381E9E4A7C5C30
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b48fc4ec-9c53-3345-9340-6afbc244668b.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     11164
IP address blocks:        2001:468:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:4d:e3:89:38:1e:9e:4a:7c:5c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=42ca7963-877d-4439-8dcc-ca07eaf183d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:9b:a5:65:a0:98:70:2a:ee:4d:f1:61:e5:
                    44:00:c6:c0:0a:27:49:3e:2e:f0:18:2f:be:15:a1:
                    a0:10:45:a0:90:6b:bb:92:ca:1c:de:fc:50:a5:f6:
                    3a:2d:8b:06:d9:93:0d:ee:07:61:41:c4:de:6e:d9:
                    49:1b:3a:a6:2b:97:a4:22:ba:d5:51:bd:88:c2:79:
                    70:ad:58:f1:a3:bf:d5:ca:58:77:b7:28:48:48:9c:
                    dc:23:9c:27:de:ab:ed:60:c8:ab:66:f3:d5:30:87:
                    a5:50:32:61:52:1a:c5:b1:2b:ab:8e:53:96:78:50:
                    47:a7:cc:7a:08:7c:db:21:da:5c:b0:79:d1:85:ca:
                    a1:6d:4f:52:e1:c2:fb:1d:91:4e:19:de:35:01:89:
                    06:33:61:56:fa:18:2e:c6:84:d0:d0:af:7d:8a:57:
                    7e:fe:82:d5:f6:b5:f1:83:c0:2c:4a:b8:12:04:b7:
                    a8:ad:5d:ee:9f:24:7c:18:1f:35:40:f8:93:90:43:
                    36:4b:71:9b:f7:6a:0d:c5:06:cb:ae:cb:78:e4:86:
                    2d:f6:27:d5:7d:ba:fd:16:0d:21:ae:2a:28:4c:d0:
                    0e:8b:6b:1f:dc:88:a7:49:7e:ec:c9:58:6c:6c:e1:
                    bd:15:f1:87:24:db:77:96:66:0d:89:ac:54:23:89:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DA:07:6E:1E:0A:B1:AA:6F:63:C1:BA:BA:C4:E0:FD:2A:23:6A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b48fc4ec-9c53-3345-9340-6afbc244668b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e1:d6:7e:36:e6:44:c9:73:1d:30:c1:91:76:6a:7c:44:da:
         57:3d:61:06:b0:58:98:23:a9:20:80:d5:a7:24:70:31:24:53:
         52:19:af:b4:3d:21:33:13:bc:e1:3c:02:3a:70:13:97:5e:c2:
         ad:16:e8:c4:1b:bd:cc:fa:90:0b:1f:f6:c2:c1:da:61:53:b7:
         0d:b5:62:11:50:78:44:1c:d1:b7:c0:f1:dd:41:cc:c1:b0:3c:
         97:ef:ca:85:06:0b:96:f2:87:53:fd:27:5c:1e:88:1f:98:a8:
         c2:1d:98:8d:8f:d8:e7:46:88:cd:62:00:36:7b:cb:57:c2:32:
         3d:86:f5:1a:46:da:c6:4d:de:76:39:ed:d3:a1:ea:eb:06:f3:
         e3:43:a9:8b:bb:c8:b2:f0:4e:83:bc:24:2e:95:14:c7:68:72:
         37:c8:1b:48:7d:58:21:c6:0c:3a:8a:ec:ec:a2:8e:03:96:8a:
         cc:e7:8c:d5:1d:25:a5:d9:3a:12:18:5e:2a:89:25:40:c0:b8:
         6e:7b:af:ce:17:5c:a1:77:7a:b9:41:20:aa:30:21:56:37:8a:
         c0:93:53:50:65:00:e2:e9:ee:3a:3a:5a:4d:54:a4:a0:db:62:
         c7:90:42:cb:13:67:8b:70:32:4d:45:4f:86:ad:12:20:24:bd:
         d8:c6:7e:81
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE04ak3jiTgenkp8XDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk
NDJjYTc5NjMtODc3ZC00NDM5LThkY2MtY2EwN2VhZjE4M2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd+bpWWgmHAq7k3xYeVEAMbACidJPi7wGC++
FaGgEEWgkGu7ksoc3vxQpfY6LYsG2ZMN7gdhQcTebtlJGzqmK5ekIrrVUb2Iwnlw
rVjxo7/Vylh3tyhISJzcI5wn3qvtYMirZvPVMIelUDJhUhrFsSurjlOWeFBHp8x6
CHzbIdpcsHnRhcqhbU9S4cL7HZFOGd41AYkGM2FW+hguxoTQ0K99ild+/oLV9rXx
g8AsSrgSBLeorV3unyR8GB81QPiTkEM2S3Gb92oNxQbLrst45IYt9ifVfbr9Fg0h
riooTNAOi2sf3IinSX7syVhsbOG9FfGHJNt3lmYNiaxUI4l15wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOHaB24eCrGqb2PBurrE4P0qI2ohMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYjQ4ZmM0ZWMtOWM1My0z
MzQ1LTkzNDAtNmFmYmMyNDQ2NjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEEaA8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANeHWfjbmRMlzHTDBkXZqfETaVz1hBrBYmCOpIIDVpyRwMSRTUhmv
tD0hMxO84TwCOnATl17CrRboxBu9zPqQCx/2wsHaYVO3DbViEVB4RBzRt8Dx3UHM
wbA8l+/KhQYLlvKHU/0nXB6IH5iowh2YjY/Y50aIzWIANnvLV8IyPYb1Gkbaxk3e
djnt06Hq6wbz40Opi7vIsvBOg7wkLpUUx2hyN8gbSH1YIcYMOors7KKOA5aKzOeM
1R0lpdk6EhheKoklQMC4bnuvzhdcoXd6uUEgqjAhVjeKwJNTUGUA4unuOjpaTVSk
oNtix5BCyxNni3AyTUVPhq0SICS92MZ+gQ==
-----END CERTIFICATE-----
Generated at Tue Mar 24 22:17:15 2026 by rpki-client