Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/92220c6f-b279-3813-91b1-4cd295ee61e3.roa
File:                     92220c6f-b279-3813-91b1-4cd295ee61e3.roa (raw, json)
Hash identifier:          Wwa4xi5gNyO2VBnKZX1C1e5ZYLHkB4vV1wcYbbT5EoA=
Subject key identifier:   F9:0C:4F:92:68:C4:31:B2:C2:5A:D0:5A:AF:62:2B:3C:98:90:2C:15
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D3A304ACEB3C0767E0D8ECC00
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/92220c6f-b279-3813-91b1-4cd295ee61e3.roa
Signing time:             Fri 20 Mar 2026 04:15:46 +0000
ROA not before:           Fri 20 Mar 2026 04:15:46 +0000
ROA not after:            Thu 18 Jun 2026 04:15:46 +0000
asID:                     12025
IP address blocks:        2607:2f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3a:30:4a:ce:b3:c0:76:7e:0d:8e:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Mar 20 04:15:46 2026 GMT
            Not After : Jun 18 04:15:46 2026 GMT
        Subject: CN=6779af00-eef1-4580-a37b-29ccd34b10f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3e:89:92:1f:92:0c:3f:1b:7e:72:48:5c:16:
                    0e:07:aa:a7:38:4d:e7:93:7b:2e:7c:03:30:18:8a:
                    99:f5:89:25:3e:1b:8d:1b:d0:37:06:c5:51:6c:81:
                    aa:ff:cb:cd:48:df:b8:6e:d7:2c:67:39:26:30:63:
                    61:43:d5:27:27:54:b8:ff:b8:be:7a:ff:d1:07:17:
                    9e:14:df:d7:e9:c3:91:33:ba:b5:82:54:41:a7:f5:
                    f0:8c:73:47:59:b8:30:db:2c:df:4f:d3:0c:05:fc:
                    32:37:0e:7d:b8:3f:9a:77:b8:ca:20:4d:0a:8e:e1:
                    be:17:b2:b5:79:97:18:12:56:86:a6:e3:9c:9b:1d:
                    67:55:d4:ce:a6:e1:92:6a:b2:ff:89:d5:8b:0a:9d:
                    20:c0:e1:57:83:03:92:0a:6f:f5:78:7a:24:96:72:
                    94:54:19:70:01:a3:62:72:04:77:64:25:07:18:b0:
                    5d:7a:ac:6a:79:e9:bc:89:44:6a:a9:b1:75:07:f7:
                    55:f8:71:31:ad:e6:1f:59:48:c0:db:93:af:51:13:
                    39:43:ef:90:ed:f8:53:35:1b:9a:f1:d8:c3:e4:5a:
                    7e:4b:57:cb:cf:b6:b5:aa:76:be:3e:86:7e:9f:c5:
                    45:f7:79:0b:f1:d4:c4:c9:70:eb:50:37:1a:9f:63:
                    73:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0C:4F:92:68:C4:31:B2:C2:5A:D0:5A:AF:62:2B:3C:98:90:2C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/92220c6f-b279-3813-91b1-4cd295ee61e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3c:6c:22:d5:db:98:cc:a8:9c:96:1e:ee:77:78:35:b2:aa:
         44:ee:25:2d:6e:35:00:1d:00:f9:8b:f3:62:b0:42:87:b9:f8:
         05:71:8e:bd:11:83:f0:d9:3e:60:d4:72:0c:c5:9b:50:ce:a1:
         32:be:84:65:e4:75:b2:0f:82:d5:68:d6:22:b1:b0:01:16:38:
         3a:43:0a:06:44:71:af:9c:c8:b7:bf:dc:4a:9d:15:b1:5f:a8:
         03:17:53:b5:f3:9a:c6:30:84:39:c3:c2:94:4b:12:0c:f0:c6:
         d0:24:6e:16:20:8b:72:91:ed:0a:35:45:60:fc:30:0b:52:56:
         2a:60:ac:7b:ed:05:ce:2a:ee:16:8c:3c:81:9a:1a:1d:e4:2f:
         e7:77:7f:b3:4a:68:55:7e:f5:cf:80:73:9c:99:a4:7b:18:87:
         f5:5e:0d:2e:49:1e:80:7c:18:df:92:a3:e2:7a:ac:fa:c4:c8:
         7c:8d:29:d8:c9:27:40:5b:4b:90:19:20:0d:f7:a9:d6:f7:6d:
         46:dd:12:f9:90:ad:05:49:3b:c2:37:46:f8:da:7c:e5:82:d2:
         e3:7d:31:44:10:8a:d4:45:b3:32:af:5d:fa:cf:6c:e8:6a:79:
         82:b6:5b:9e:3b:65:2d:ea:07:3d:56:f0:65:d5:03:b5:61:5e:
         5a:54:51:07
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE06MErOs8B2fg2OzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2
YzYzMB4XDTI2MDMyMDA0MTU0NloXDTI2MDYxODA0MTU0NlowLzEtMCsGA1UEAxMk
Njc3OWFmMDAtZWVmMS00NTgwLWEzN2ItMjljY2QzNGIxMGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD6Jkh+SDD8bfnJIXBYOB6qnOE3nk3sufAMw
GIqZ9YklPhuNG9A3BsVRbIGq/8vNSN+4btcsZzkmMGNhQ9UnJ1S4/7i+ev/RBxee
FN/X6cORM7q1glRBp/XwjHNHWbgw2yzfT9MMBfwyNw59uD+ad7jKIE0KjuG+F7K1
eZcYElaGpuOcmx1nVdTOpuGSarL/idWLCp0gwOFXgwOSCm/1eHoklnKUVBlwAaNi
cgR3ZCUHGLBdeqxqeem8iURqqbF1B/dV+HExreYfWUjA25OvURM5Q++Q7fhTNRua
8djD5Fp+S1fLz7a1qna+PoZ+n8VF93kL8dTEyXDrUDcan2NzBwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPkMT5JoxDGywlrQWq9iKzyYkCwVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5
YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvOTIyMjBjNmYtYjI3OS0z
ODEzLTkxYjEtNGNkMjk1ZWU2MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3
Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk
NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl
MDhkZDZjNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcvADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQByPGwi1duYzKiclh7ud3g1sqpE7iUtbjUAHQD5i/NisEKHufgFcY69
EYPw2T5g1HIMxZtQzqEyvoRl5HWyD4LVaNYisbABFjg6QwoGRHGvnMi3v9xKnRWx
X6gDF1O185rGMIQ5w8KUSxIM8MbQJG4WIItyke0KNUVg/DALUlYqYKx77QXOKu4W
jDyBmhod5C/nd3+zSmhVfvXPgHOcmaR7GIf1Xg0uSR6AfBjfkqPieqz6xMh8jSnY
ySdAW0uQGSAN96nW921G3RL5kK0FSTvCN0b42nzlgtLjfTFEEIrURbMyr136z2zo
anmCtlueO2Ut6gc9VvBl1QO1YV5aVFEH
-----END CERTIFICATE-----
Generated at Sat Mar 21 04:26:05 2026 by rpki-client