Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa
File:                     0591e8cc-de15-308a-9274-817e31ffff4e.roa (raw, json)
Hash identifier:          VQtJZu4Oonso2FQCu0ANoZUSSKpy8KmrocJNlooZ7Ac=
Subject key identifier:   AC:B0:78:B6:EE:6A:E0:C1:17:07:4B:93:25:93:48:4A:A1:00:9E:4E
Certificate issuer:       /CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9
Certificate serial:       010D0C9F4328584D1F4A117A99067889EA094B00
Authority key identifier: F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     8134
IP address blocks:        2001:4a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:11:7a:99:06:78:89:ea:09:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=ced06ec8-64ec-4c54-ba54-1817150c225c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:6f:9a:4f:ae:3d:dd:8e:3c:7c:2b:67:bf:
                    f7:e1:80:37:86:f4:01:0c:a8:ab:3d:fd:45:e7:a9:
                    3d:4e:00:af:04:3f:9b:0b:84:4e:c5:59:9d:da:44:
                    f8:b0:57:a7:6c:c5:46:8f:9e:1c:3e:47:77:fa:b5:
                    a3:3b:19:80:48:c3:be:50:da:c9:fb:14:2e:52:f6:
                    52:fd:92:17:03:f6:61:b1:35:2b:a3:78:d9:48:93:
                    3b:83:c1:25:47:6b:8d:13:db:a8:4e:74:e9:30:6e:
                    51:d5:28:d7:85:bc:be:13:58:f9:8f:7f:61:c9:3e:
                    21:cc:f0:8a:bc:19:4b:f2:91:76:17:58:1a:fc:f6:
                    44:8a:f2:70:ff:3b:53:28:9c:ab:fa:9d:dd:90:c6:
                    47:3f:e8:69:39:15:da:09:c2:d3:bc:3a:c2:5e:94:
                    09:f6:93:84:c4:a8:25:53:6e:99:82:5a:b2:27:69:
                    30:fb:e8:15:53:c2:66:fa:83:97:d1:db:80:50:f2:
                    f7:99:7d:cb:9a:f0:5a:89:63:be:75:d1:49:55:cb:
                    04:92:05:35:3e:23:7c:29:c0:c1:5b:ed:d3:bc:f2:
                    60:18:3f:13:40:b8:aa:a7:07:41:cc:3d:7d:69:64:
                    f7:68:e0:bf:76:cf:f3:3d:dd:ae:34:54:a4:4f:c7:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B0:78:B6:EE:6A:E0:C1:17:07:4B:93:25:93:48:4A:A1:00:9E:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl

            X509v3 Authority Key Identifier:
                keyid:F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:47:61:ba:17:87:44:54:75:19:c4:5e:df:e0:37:09:50:a7:
         1e:68:c9:23:8c:32:f0:92:0a:19:e9:b9:3c:bb:62:4f:82:bc:
         da:88:b0:93:22:80:31:2f:6f:15:a6:62:c9:97:d7:c5:9c:79:
         e4:72:f2:34:32:e7:b8:4a:17:8f:3e:36:00:db:af:be:18:c2:
         01:72:29:29:f4:94:8d:b2:ca:d5:43:6e:e9:ed:8d:0d:bb:23:
         38:6a:e7:06:8b:d0:18:08:4f:b1:2d:0f:d5:e2:e4:00:39:01:
         a6:a5:6c:ba:c2:38:91:b8:be:6a:26:1a:d5:3c:bd:27:4e:ba:
         de:cd:e8:76:26:b4:99:6a:95:85:1a:24:3f:75:d0:44:63:95:
         a9:1c:9d:03:db:6e:14:58:1c:ba:4f:57:ec:70:65:ae:cf:41:
         3b:7d:f0:b2:00:91:b8:b5:b8:9b:00:96:fa:3a:60:2c:29:4f:
         1d:d8:67:5f:1e:5c:16:a7:67:2a:d1:c6:0c:13:87:80:ab:c8:
         7d:cd:33:bd:fd:95:95:fa:c3:f9:ef:b1:5a:c6:90:75:4c:41:
         f0:d1:23:a2:e7:82:9d:81:d5:76:8f:d2:68:39:b6:88:48:94:
         ac:b2:04:23:33:a3:c3:c6:fe:8c:1c:c6:a5:9c:5d:b3:d1:c1:
         3c:c9:14:b3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0fShF6mQZ4ieoJSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdhMjZiMTMtYzI5NS00ZjBiLWJlYzUtNDY0NWRkZDFk
MGQ5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
Y2VkMDZlYzgtNjRlYy00YzU0LWJhNTQtMTgxNzE1MGMyMjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOhvmk+uPd2OPHwrZ7/34YA3hvQBDKirPf1F
56k9TgCvBD+bC4ROxVmd2kT4sFenbMVGj54cPkd3+rWjOxmASMO+UNrJ+xQuUvZS
/ZIXA/ZhsTUro3jZSJM7g8ElR2uNE9uoTnTpMG5R1SjXhby+E1j5j39hyT4hzPCK
vBlL8pF2F1ga/PZEivJw/ztTKJyr+p3dkMZHP+hpORXaCcLTvDrCXpQJ9pOExKgl
U26ZglqyJ2kw++gVU8Jm+oOX0duAUPL3mX3LmvBaiWO+ddFJVcsEkgU1PiN8KcDB
W+3TvPJgGD8TQLiqpwdBzD19aWT3aOC/ds/zPd2uNFSkT8fLVQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKyweLbuauDBFwdLkyWTSEqhAJ5OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hN2Ey
NmIxMy1jMjk1LTRmMGItYmVjNS00NjQ1ZGRkMWQwZDkvMDU5MWU4Y2MtZGUxNS0z
MDhhLTkyNzQtODE3ZTMxZmZmZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTdhMjZiMTMtYzI5NS00ZjBiLWJl
YzUtNDY0NWRkZDFkMGQ5L2E3YTI2YjEzLWMyOTUtNGYwYi1iZWM1LTQ2NDVkZGQx
ZDBkOS5jcmwwHwYDVR0jBBgwFoAU8kCiwttTySyJz6btiRgTJRGu0l0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hN2EyNmIxMy1jMjk1LTRmMGItYmVjNS00NjQ1
ZGRkMWQwZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEEoDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAxR2G6F4dEVHUZxF7f4DcJUKceaMkjjDLwkgoZ6bk8u2JPgrzaiLCT
IoAxL28VpmLJl9fFnHnkcvI0Mue4ShePPjYA26++GMIBcikp9JSNssrVQ27p7Y0N
uyM4aucGi9AYCE+xLQ/V4uQAOQGmpWy6wjiRuL5qJhrVPL0nTrrezeh2JrSZapWF
GiQ/ddBEY5WpHJ0D224UWBy6T1fscGWuz0E7ffCyAJG4tbibAJb6OmAsKU8d2Gdf
HlwWp2cq0cYME4eAq8h9zTO9/ZWV+sP577FaxpB1TEHw0SOi54KdgdV2j9JoObaI
SJSssgQjM6PDxv6MHMalnF2z0cE8yRSz
-----END CERTIFICATE-----
Generated at Wed Mar 25 09:56:29 2026 by rpki-client