Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa
File:                     f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa (raw, json)
Hash identifier:          t8GtARV/e0b0jD5QDGXgF/IkSmoBDSbAnSsg+NyidOM=
Subject key identifier:   07:A5:CD:45:AD:AB:A5:B3:E5:1F:00:44:6E:4A:28:AA:4C:A2:66:A6
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584D237A75E8E206DF895F56EA00
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     268624
IP address blocks:        2600:3500:c24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:75:e8:e2:06:df:89:5f:56:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=eee4bc03-3238-4728-9b1d-d33171aeb238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:16:3e:9b:68:c6:3f:6a:4a:9e:57:f6:d5:
                    54:1a:a4:7e:e0:9d:7b:e1:e1:bc:d1:79:8e:a1:09:
                    17:ab:80:48:d6:1f:ed:a0:d4:81:00:a7:39:61:54:
                    27:74:fd:dd:95:f5:ad:e9:07:62:fa:51:2a:aa:aa:
                    f9:53:b1:65:a9:9f:42:41:61:99:6a:c5:03:72:92:
                    b8:0a:46:f9:9d:cc:f2:f7:66:ab:02:03:31:ef:e4:
                    eb:09:bb:1d:37:21:ff:d0:7b:eb:8b:a4:00:f6:2f:
                    5c:83:ed:2d:e3:e6:29:5c:82:7c:4c:f8:86:24:8a:
                    9c:b0:69:65:3a:ee:af:45:80:65:09:7f:92:0b:74:
                    6c:97:6f:52:87:9f:1f:6b:04:4a:c7:e6:cc:f7:2d:
                    07:66:92:86:4b:ea:63:a2:7f:29:6f:a1:ad:bd:33:
                    9e:de:da:c9:cf:cc:7e:91:25:2a:16:9f:40:c4:e1:
                    5c:2e:43:ee:8d:3e:15:b2:83:3e:44:17:67:33:53:
                    50:db:30:76:f7:b3:0b:b3:dc:b2:4a:d1:f0:28:8d:
                    72:b1:cb:f6:57:ed:41:a8:19:b6:53:17:88:5e:ff:
                    cc:8d:e4:ed:d8:28:95:f5:a7:81:c2:ad:2c:bb:24:
                    61:f8:d4:d1:15:82:14:2a:7d:37:47:fd:07:35:bd:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A5:CD:45:AD:AB:A5:B3:E5:1F:00:44:6E:4A:28:AA:4C:A2:66:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3500:c24::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:93:f3:76:af:9c:1d:91:11:d0:a0:47:cb:c2:3c:8c:09:f7:
         99:78:aa:5b:bf:80:7d:5f:88:df:62:e5:db:b1:3e:95:eb:22:
         88:49:1d:08:cf:97:2e:18:ee:33:0e:76:48:0f:c4:fc:59:c8:
         6b:87:4b:6b:3b:34:8f:b0:df:5f:31:a2:16:08:b1:41:d5:4b:
         43:f3:70:7a:07:50:88:c3:69:13:7d:6d:c8:08:e7:96:35:68:
         18:c8:72:5f:40:f7:78:50:55:86:0b:68:6f:7e:2d:53:dd:2f:
         07:c1:4d:30:36:bc:52:2c:52:20:3c:f1:7f:e5:66:ab:4d:df:
         25:47:96:58:7d:f5:b0:37:85:a8:6f:2c:f3:d8:a5:06:7b:17:
         2f:5d:6e:c7:05:03:9e:fc:57:f8:b0:05:db:f3:81:f0:9d:df:
         b4:8a:88:15:6f:4a:d6:11:f5:34:24:94:23:a6:05:16:50:1c:
         08:71:46:ba:47:09:c1:5f:67:00:ed:8b:9c:32:72:d9:7e:56:
         cf:ad:3e:28:b1:b0:62:aa:8f:85:d5:c7:f2:d5:b8:54:2c:45:
         c1:92:b0:06:75:d3:a3:d6:d5:e5:71:62:ed:cf:65:10:c1:0a:
         82:e9:16:1f:c3:af:47:81:9a:6f:ec:94:4b:b9:52:10:e0:95:
         1d:cb:21:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jenXo4gbfiV9W6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4
ZjNjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
ZWVlNGJjMDMtMzIzOC00NzI4LTliMWQtZDMzMTcxYWViMjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0MWPptoxj9qSp5X9tVUGqR+4J174eG80XmO
oQkXq4BI1h/toNSBAKc5YVQndP3dlfWt6Qdi+lEqqqr5U7FlqZ9CQWGZasUDcpK4
Ckb5nczy92arAgMx7+TrCbsdNyH/0Hvri6QA9i9cg+0t4+YpXIJ8TPiGJIqcsGll
Ou6vRYBlCX+SC3Rsl29Sh58fawRKx+bM9y0HZpKGS+pjon8pb6GtvTOe3trJz8x+
kSUqFp9AxOFcLkPujT4VsoM+RBdnM1NQ2zB297MLs9yyStHwKI1yscv2V+1BqBm2
UxeIXv/MjeTt2CiV9aeBwq0suyRh+NTRFYIUKn03R/0HNb04zQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAelzUWtq6Wz5R8ARG5KKKpMomamMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi
MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvZjAzNmUwMWItYTBjNi0z
ZWM4LTljOTAtNjliOTkyMDJkYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz
ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi
OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1
NDkwYjhmM2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgA1AAwk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABmT83avnB2REdCgR8vCPIwJ95l4qlu/gH1fiN9i5duxPpXrIohJ
HQjPly4Y7jMOdkgPxPxZyGuHS2s7NI+w318xohYIsUHVS0PzcHoHUIjDaRN9bcgI
55Y1aBjIcl9A93hQVYYLaG9+LVPdLwfBTTA2vFIsUiA88X/lZqtN3yVHllh99bA3
hahvLPPYpQZ7Fy9dbscFA578V/iwBdvzgfCd37SKiBVvStYR9TQklCOmBRZQHAhx
RrpHCcFfZwDti5wyctl+Vs+tPiixsGKqj4XVx/LVuFQsRcGSsAZ106PW1eVxYu3P
ZRDBCoLpFh/Dr0eBmm/slEu5UhDglR3LIRQ=
-----END CERTIFICATE-----
Generated at Thu Mar 12 19:09:15 2026 by rpki-client