Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/fd4deffe-6f36-3083-b387-f5ec48e98c94.roa
File:                     fd4deffe-6f36-3083-b387-f5ec48e98c94.roa (raw, json)
Hash identifier:          aYtxtN0jfkRJ2Vo41AuZ+DYFjQ4pGne4oBth916/qrw=
Subject key identifier:   92:2A:EF:EC:D0:38:05:23:F1:71:C5:6C:9B:B6:ED:E7:BF:9B:26:BF
Certificate issuer:       /CN=39993af2-98b1-47da-a218-47109f41cb97
Certificate serial:       010D0C9F4328584DA97ABB23FE35A4EE8B43EF78
Authority key identifier: 12:D9:FD:69:DE:67:DD:AB:84:4D:8C:72:61:39:2F:F6:D2:4F:76:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/fd4deffe-6f36-3083-b387-f5ec48e98c94.roa
Signing time:             Wed 29 Apr 2026 01:00:23 +0000
ROA not before:           Wed 29 Apr 2026 01:00:23 +0000
ROA not after:            Tue 28 Jul 2026 01:00:23 +0000
asID:                     4150
IP address blocks:        2605:2580::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a9:7a:bb:23:fe:35:a4:ee:8b:43:ef:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39993af2-98b1-47da-a218-47109f41cb97
        Validity
            Not Before: Apr 29 01:00:23 2026 GMT
            Not After : Jul 28 01:00:23 2026 GMT
        Subject: CN=46f4b93c-fb35-4ce9-939b-42148ae87ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b2:f0:d7:25:ee:84:4e:83:40:31:e1:1d:3f:
                    91:c8:a5:9d:1f:91:11:44:05:cb:26:bd:c4:fb:94:
                    27:78:f4:9e:72:67:34:18:01:35:cf:20:98:cf:4b:
                    db:0f:63:ca:5b:7d:0f:e2:bc:77:a0:84:df:7c:56:
                    f2:f1:bd:de:76:fa:82:87:4f:3a:61:da:1d:55:e0:
                    53:5f:1b:f6:ca:e9:4f:94:92:75:67:3b:49:58:9b:
                    b8:b8:fe:cc:f4:90:1d:68:87:49:0a:bb:a3:69:28:
                    6a:ea:fd:ef:0f:d1:54:f8:1a:42:63:b3:b3:95:b5:
                    41:eb:c0:50:8c:51:16:83:47:54:b1:17:14:2c:8b:
                    14:fa:65:39:a2:75:34:17:60:bd:1a:76:9c:84:49:
                    c1:e9:40:8e:99:d1:56:d2:8c:9d:1e:f8:6d:0d:f6:
                    41:48:06:77:c4:51:53:d5:8d:c2:91:8e:19:f3:36:
                    97:07:f9:5d:72:de:91:e7:d0:bc:74:ee:28:55:4a:
                    ac:4e:bb:2c:a6:29:0c:10:fe:7f:64:81:b1:20:4e:
                    a8:66:3b:23:e6:a8:66:65:4b:67:fe:f6:fd:50:dc:
                    6c:21:c7:a0:70:77:74:23:e4:5f:86:c8:0c:56:e8:
                    b3:b9:27:48:95:79:85:1a:62:cb:92:44:4a:08:72:
                    ea:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2A:EF:EC:D0:38:05:23:F1:71:C5:6C:9B:B6:ED:E7:BF:9B:26:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/fd4deffe-6f36-3083-b387-f5ec48e98c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.crl

            X509v3 Authority Key Identifier:
                keyid:12:D9:FD:69:DE:67:DD:AB:84:4D:8C:72:61:39:2F:F6:D2:4F:76:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:73:76:f4:da:c1:dd:4f:1b:fe:a4:97:a8:df:45:db:51:3c:
         09:0d:f6:26:a3:5f:17:19:47:74:da:2c:5e:60:4b:b2:44:0a:
         7b:5d:d9:89:68:4c:82:86:66:a7:1a:4b:bf:74:82:7f:0a:e3:
         b5:8c:6d:bd:f5:2d:b3:47:85:77:8d:a2:d6:e7:7c:60:65:f8:
         06:70:10:2d:e0:5c:5c:8d:aa:88:55:0b:1f:79:dc:af:23:a7:
         ee:4a:e4:64:2c:6d:f1:18:e1:03:25:58:c4:76:d4:56:5b:83:
         f8:d2:60:40:da:74:79:4c:93:83:69:21:33:20:c2:98:7d:0e:
         a7:37:bc:26:9d:de:08:9a:9d:f4:77:77:6a:a0:fc:6b:6f:e3:
         5f:69:10:d0:1a:fa:d5:bf:9f:c9:37:d7:f2:8e:9e:2c:91:74:
         b6:99:17:0d:32:f0:4f:07:e1:00:e8:cc:a5:af:ab:67:e1:9d:
         a8:ea:85:c4:13:12:9c:98:db:40:dd:02:40:9b:5a:b9:c8:59:
         69:01:23:ff:2a:17:56:1e:8b:e0:7d:1d:39:9c:3e:0d:d1:0d:
         5a:d0:de:45:7f:d7:9a:20:85:f4:b9:0a:ea:b2:a8:95:dd:33:
         e6:d9:fd:1e:b5:b9:26:fe:42:6e:d5:c6:95:4d:c9:a5:d0:ee:
         92:36:85:60
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2persj/jWk7otD73gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk5OTNhZjItOThiMS00N2RhLWEyMTgtNDcxMDlmNDFj
Yjk3MB4XDTI2MDQyOTAxMDAyM1oXDTI2MDcyODAxMDAyM1owLzEtMCsGA1UEAxMk
NDZmNGI5M2MtZmIzNS00Y2U5LTkzOWItNDIxNDhhZTg3Y2UxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLLw1yXuhE6DQDHhHT+RyKWdH5ERRAXLJr3E
+5QnePSecmc0GAE1zyCYz0vbD2PKW30P4rx3oITffFby8b3edvqCh086YdodVeBT
Xxv2yulPlJJ1ZztJWJu4uP7M9JAdaIdJCrujaShq6v3vD9FU+BpCY7OzlbVB68BQ
jFEWg0dUsRcULIsU+mU5onU0F2C9GnachEnB6UCOmdFW0oydHvhtDfZBSAZ3xFFT
1Y3CkY4Z8zaXB/ldct6R59C8dO4oVUqsTrsspikMEP5/ZIGxIE6oZjsj5qhmZUtn
/vb9UNxsIcegcHd0I+RfhsgMVuizuSdIlXmFGmLLkkRKCHLqHQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJIq7+zQOAUj8XHFbJu27ee/mya/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTk5
M2FmMi05OGIxLTQ3ZGEtYTIxOC00NzEwOWY0MWNiOTcvZmQ0ZGVmZmUtNmYzNi0z
MDgzLWIzODctZjVlYzQ4ZTk4Yzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk5OTNhZjItOThiMS00N2RhLWEy
MTgtNDcxMDlmNDFjYjk3LzM5OTkzYWYyLTk4YjEtNDdkYS1hMjE4LTQ3MTA5ZjQx
Y2I5Ny5jcmwwHwYDVR0jBBgwFoAUEtn9ad5n3auETYxyYTkv9tJPdtYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTk5M2FmMi05OGIxLTQ3ZGEtYTIxOC00NzEw
OWY0MWNiOTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUlgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBLc3b02sHdTxv+pJeo30XbUTwJDfYmo18XGUd02ixeYEuyRAp7XdmJ
aEyChmanGku/dIJ/CuO1jG299S2zR4V3jaLW53xgZfgGcBAt4FxcjaqIVQsfedyv
I6fuSuRkLG3xGOEDJVjEdtRWW4P40mBA2nR5TJODaSEzIMKYfQ6nN7wmnd4Imp30
d3dqoPxrb+NfaRDQGvrVv5/JN9fyjp4skXS2mRcNMvBPB+EA6Mylr6tn4Z2o6oXE
ExKcmNtA3QJAm1q5yFlpASP/KhdWHovgfR05nD4N0Q1a0N5Ff9eaIIX0uQrqsqiV
3TPm2f0etbkm/kJu1caVTcml0O6SNoVg
-----END CERTIFICATE-----
Generated at Fri May 8 16:29:08 2026 by rpki-client