Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/646ee710-0c85-3997-9d2a-975fe9b8c7cf.roa
File:                     646ee710-0c85-3997-9d2a-975fe9b8c7cf.roa (raw, json)
Hash identifier:          B+i/Ie6BMctSEvI0DyvB5lPy9xdbm393APPqTkZNoqA=
Subject key identifier:   29:CF:D1:42:1B:46:F9:34:AC:E3:00:05:F6:77:A3:77:15:98:FE:00
Certificate issuer:       /CN=197570da-926b-4348-892e-3ea7821d2f51
Certificate serial:       010D0C9F4328584D6D75147DAB973CBE9BA3C780
Authority key identifier: AF:4B:12:5C:AB:26:3C:89:4C:09:3B:FB:E2:CB:AA:F0:66:F0:8B:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/646ee710-0c85-3997-9d2a-975fe9b8c7cf.roa
Signing time:             Tue 07 Apr 2026 13:00:30 +0000
ROA not before:           Tue 07 Apr 2026 13:00:30 +0000
ROA not after:            Mon 06 Jul 2026 13:00:30 +0000
asID:                     396982
IP address blocks:        2631:8008::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/197570da-926b-4348-892e-3ea7821d2f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/197570da-926b-4348-892e-3ea7821d2f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:75:14:7d:ab:97:3c:be:9b:a3:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197570da-926b-4348-892e-3ea7821d2f51
        Validity
            Not Before: Apr  7 13:00:30 2026 GMT
            Not After : Jul  6 13:00:30 2026 GMT
        Subject: CN=67f5d34d-8f0f-4788-a95a-d9cc4eabd4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cd:a5:93:36:92:1d:32:c8:8a:05:68:f5:fb:
                    16:76:6f:eb:bc:61:89:f0:28:50:d7:a8:5d:1c:9a:
                    fe:f6:71:6d:83:4c:e3:d6:13:d5:0f:94:e0:55:4a:
                    c9:d3:0f:80:ac:ac:77:e2:44:7a:2c:31:23:e8:a8:
                    43:76:90:06:a4:8a:02:4e:33:fc:47:da:d3:d6:8c:
                    85:2b:88:bc:0f:79:e4:2a:ca:60:6b:6d:bf:53:bc:
                    a2:3d:f4:95:12:d1:1b:42:1f:ed:c9:d1:c4:ed:0d:
                    e3:23:f4:1d:04:6f:57:a3:71:cf:d3:cf:73:ec:9d:
                    30:5a:ec:37:94:8d:85:ce:d7:50:88:26:75:e8:bc:
                    ab:7b:8d:6c:03:0a:7a:9d:33:3d:1b:72:51:b1:b7:
                    c9:fc:b4:18:10:10:fa:e2:ae:be:13:f9:29:3e:3c:
                    64:82:a1:15:76:7d:ba:35:4e:f0:8e:2a:7c:81:70:
                    b3:db:b3:46:36:dc:f9:44:a1:3a:b6:10:50:ae:97:
                    57:b1:a2:4c:fd:fd:19:bc:1c:28:8e:d1:4f:eb:2b:
                    91:43:bd:69:92:56:21:f4:48:4b:2a:53:74:a6:55:
                    0d:80:14:f8:5b:9e:5d:6b:23:9c:04:a1:d0:5c:40:
                    21:6b:80:17:1a:63:b7:53:ad:4d:ad:e3:b5:6f:71:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CF:D1:42:1B:46:F9:34:AC:E3:00:05:F6:77:A3:77:15:98:FE:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/646ee710-0c85-3997-9d2a-975fe9b8c7cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/197570da-926b-4348-892e-3ea7821d2f51.crl

            X509v3 Authority Key Identifier:
                keyid:AF:4B:12:5C:AB:26:3C:89:4C:09:3B:FB:E2:CB:AA:F0:66:F0:8B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631:8008::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:28:d2:7d:27:dc:e7:fc:7a:76:ae:43:ac:dd:85:64:f5:f1:
         eb:dd:1b:fe:81:2a:3b:8a:69:00:9e:d0:7d:3e:2a:39:89:27:
         bb:70:59:b2:86:64:37:e3:71:3d:4a:f6:ad:7e:21:0c:fc:c8:
         19:00:88:4a:9c:49:57:1d:0d:0e:f6:7d:46:8a:a1:54:95:13:
         24:f4:2c:87:0a:4b:c7:93:91:0d:35:50:db:81:f3:73:d9:fd:
         72:5d:ee:41:3b:d0:48:87:c0:d5:76:e2:0f:01:02:82:0d:c3:
         3b:cb:6f:de:21:9f:23:af:a3:3b:98:63:3e:19:21:84:4b:3c:
         df:9e:25:3d:47:05:f5:70:79:d1:95:ad:7a:a9:6c:22:f2:da:
         92:0c:b9:7c:1e:07:fa:ed:1a:5d:f0:03:29:4f:9e:61:11:06:
         66:f3:66:a9:74:60:18:52:f3:49:3a:ce:ab:fd:36:89:97:08:
         d4:d0:89:8c:3f:6c:ce:33:b8:a7:8d:e5:64:aa:86:a0:a9:7f:
         3f:9b:3e:38:fe:f9:b8:c9:10:7a:41:42:2f:c9:3d:da:e8:b3:
         34:6d:3b:8f:79:79:16:97:33:82:74:1a:d3:08:2e:10:13:96:
         a8:c6:d2:8b:8f:68:54:0b:22:38:52:aa:e7:3a:b1:95:c5:a1:
         35:68:06:59
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1tdRR9q5c8vpujx4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTk3NTcwZGEtOTI2Yi00MzQ4LTg5MmUtM2VhNzgyMWQy
ZjUxMB4XDTI2MDQwNzEzMDAzMFoXDTI2MDcwNjEzMDAzMFowLzEtMCsGA1UEAxMk
NjdmNWQzNGQtOGYwZi00Nzg4LWE5NWEtZDljYzRlYWJkNGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA582lkzaSHTLIigVo9fsWdm/rvGGJ8ChQ16hd
HJr+9nFtg0zj1hPVD5TgVUrJ0w+ArKx34kR6LDEj6KhDdpAGpIoCTjP8R9rT1oyF
K4i8D3nkKspga22/U7yiPfSVEtEbQh/tydHE7Q3jI/QdBG9Xo3HP089z7J0wWuw3
lI2FztdQiCZ16Lyre41sAwp6nTM9G3JRsbfJ/LQYEBD64q6+E/kpPjxkgqEVdn26
NU7wjip8gXCz27NGNtz5RKE6thBQrpdXsaJM/f0ZvBwojtFP6yuRQ71pklYh9EhL
KlN0plUNgBT4W55dayOcBKHQXEAha4AXGmO3U61NreO1b3G3TwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCnP0UIbRvk0rOMABfZ3o3cVmP4AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xOTc1
NzBkYS05MjZiLTQzNDgtODkyZS0zZWE3ODIxZDJmNTEvNjQ2ZWU3MTAtMGM4NS0z
OTk3LTlkMmEtOTc1ZmU5YjhjN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTk3NTcwZGEtOTI2Yi00MzQ4LTg5
MmUtM2VhNzgyMWQyZjUxLzE5NzU3MGRhLTkyNmItNDM0OC04OTJlLTNlYTc4MjFk
MmY1MS5jcmwwHwYDVR0jBBgwFoAUr0sSXKsmPIlMCTv74suq8Gbwi8IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8xOTc1NzBkYS05MjZiLTQzNDgtODkyZS0zZWE3
ODIxZDJmNTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJjGACDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCLKNJ9J9zn/Hp2rkOs3YVk9fHr3Rv+gSo7imkAntB9Pio5iSe7cFmy
hmQ343E9SvatfiEM/MgZAIhKnElXHQ0O9n1GiqFUlRMk9CyHCkvHk5ENNVDbgfNz
2f1yXe5BO9BIh8DVduIPAQKCDcM7y2/eIZ8jr6M7mGM+GSGESzzfniU9RwX1cHnR
la16qWwi8tqSDLl8Hgf67Rpd8AMpT55hEQZm82apdGAYUvNJOs6r/TaJlwjU0ImM
P2zOM7injeVkqoagqX8/mz44/vm4yRB6QUIvyT3a6LM0bTuPeXkWlzOCdBrTCC4Q
E5aoxtKLj2hUCyI4UqrnOrGVxaE1aAZZ
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:10:08 2026 by rpki-client