Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/49128c41-3d0e-32d0-830b-12d889baed81.roa
File:                     49128c41-3d0e-32d0-830b-12d889baed81.roa (raw, json)
Hash identifier:          2YUghfNtfbUIC3HDVMux7T0cJN90haIoGDrlj3tA5Ls=
Subject key identifier:   9E:BF:86:77:8D:74:87:03:88:58:4B:3F:4B:C7:D1:68:FE:B5:9D:A2
Certificate issuer:       /CN=7478c754-137f-4ef1-a8b5-aa954253fb79
Certificate serial:       010D0C9F4328584D8EF5812F3DFA3BA15BF8D180
Authority key identifier: E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/49128c41-3d0e-32d0-830b-12d889baed81.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     18474
IP address blocks:        2607:9c00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:81:2f:3d:fa:3b:a1:5b:f8:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7478c754-137f-4ef1-a8b5-aa954253fb79
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=6a759726-615b-4bc3-b47d-b615fde13087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d6:ae:91:a7:9a:97:4a:a7:1f:b0:77:5b:2c:
                    49:ba:8a:92:18:0a:ba:51:9d:8b:3c:84:33:9a:03:
                    bd:ee:05:a7:95:97:19:64:22:27:76:ef:4b:af:b4:
                    5d:9f:11:7f:78:85:04:3b:93:84:d9:96:95:0f:35:
                    e4:98:01:5f:90:86:e6:f8:97:4d:ae:86:3f:fc:51:
                    97:28:ad:81:ea:bf:83:a4:e4:b0:27:b5:2d:83:28:
                    fa:c2:f0:fa:9d:75:a4:96:82:82:f9:f8:48:d7:88:
                    48:ac:f0:f7:89:38:53:4e:5d:71:2b:a6:ff:51:45:
                    99:10:ad:1a:5e:36:30:67:c5:a3:2b:36:7e:c5:a4:
                    23:24:c0:09:a8:21:af:e9:4e:d6:8f:2c:55:37:4e:
                    6b:d4:6e:1e:84:00:4f:00:d6:95:e0:09:21:c0:2c:
                    42:df:68:ff:6a:d0:d3:ce:72:90:a6:9f:29:ef:e3:
                    52:f5:cc:8a:e2:58:ce:0d:57:9a:2a:f5:bc:3e:d8:
                    7c:30:38:3f:18:66:d3:81:87:b6:36:f7:9c:29:a3:
                    9c:bf:4b:9c:df:4e:7b:65:7f:f8:bf:2b:1f:a5:3a:
                    c3:df:fb:0b:77:84:fd:4c:cc:39:49:2c:65:07:b0:
                    4a:e3:5f:7f:f4:93:ae:b5:68:be:73:32:8c:b1:02:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BF:86:77:8D:74:87:03:88:58:4B:3F:4B:C7:D1:68:FE:B5:9D:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/49128c41-3d0e-32d0-830b-12d889baed81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:dc:0d:e9:fb:61:e7:a7:3c:94:b1:9f:18:2e:92:ed:1c:37:
         9a:87:0a:38:d2:f4:1b:06:7b:f9:a9:b1:b5:00:66:a3:78:1e:
         ce:32:37:4e:7a:67:69:dd:38:67:1c:27:9d:65:72:e1:0d:69:
         6c:13:8f:21:15:a5:99:19:3c:1c:2c:e7:0c:d0:00:ee:3b:dc:
         ca:36:89:aa:b0:f0:ab:d2:c2:8c:c0:79:e1:76:47:67:58:fc:
         b4:0a:58:b2:10:25:e3:68:b3:58:b1:5a:fa:c7:ea:34:08:11:
         7b:8a:6b:64:58:07:fa:19:87:2c:7e:e7:a1:6f:13:fc:b8:de:
         ff:64:96:bf:4c:14:92:8c:a4:6e:a0:94:45:6c:fa:3b:35:71:
         ee:19:50:25:1a:82:0c:4b:f6:36:97:83:0d:18:cb:cd:20:59:
         ab:36:b3:b1:55:74:ae:f5:fc:fd:b2:8d:ed:0e:ff:a5:53:da:
         0d:28:b8:79:e0:46:c5:e7:94:28:74:c4:3e:eb:71:96:f9:ff:
         0a:99:28:06:ac:cb:dc:60:44:d7:e1:08:ee:ca:b6:40:a8:8d:
         a8:c5:ec:5e:6e:fc:88:24:ff:e2:f6:22:37:e2:36:a4:0b:6b:
         57:a9:85:4d:19:9b:70:ed:df:dc:11:99:fd:de:2e:6b:60:a1:
         aa:c1:ca:fb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2O9YEvPfo7oVv40YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ3OGM3NTQtMTM3Zi00ZWYxLWE4YjUtYWE5NTQyNTNm
Yjc5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
NmE3NTk3MjYtNjE1Yi00YmMzLWI0N2QtYjYxNWZkZTEzMDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9aukaeal0qnH7B3WyxJuoqSGAq6UZ2LPIQz
mgO97gWnlZcZZCIndu9Lr7RdnxF/eIUEO5OE2ZaVDzXkmAFfkIbm+JdNroY//FGX
KK2B6r+DpOSwJ7Utgyj6wvD6nXWkloKC+fhI14hIrPD3iThTTl1xK6b/UUWZEK0a
XjYwZ8WjKzZ+xaQjJMAJqCGv6U7WjyxVN05r1G4ehABPANaV4AkhwCxC32j/atDT
znKQpp8p7+NS9cyK4ljODVeaKvW8Pth8MDg/GGbTgYe2NvecKaOcv0uc3057ZX/4
vysfpTrD3/sLd4T9TMw5SSxlB7BK419/9JOutWi+czKMsQLAQQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJ6/hneNdIcDiFhLP0vH0Wj+tZ2iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDc4
Yzc1NC0xMzdmLTRlZjEtYThiNS1hYTk1NDI1M2ZiNzkvNDkxMjhjNDEtM2QwZS0z
MmQwLTgzMGItMTJkODg5YmFlZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ3OGM3NTQtMTM3Zi00ZWYxLWE4
YjUtYWE5NTQyNTNmYjc5Lzc0NzhjNzU0LTEzN2YtNGVmMS1hOGI1LWFhOTU0MjUz
ZmI3OS5jcmwwHwYDVR0jBBgwFoAU56FjHS14/JEmApeugxO+5mzYfEMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDc4Yzc1NC0xMzdmLTRlZjEtYThiNS1hYTk1
NDI1M2ZiNzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgecADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBR3A3p+2HnpzyUsZ8YLpLtHDeahwo40vQbBnv5qbG1AGajeB7OMjdO
emdp3ThnHCedZXLhDWlsE48hFaWZGTwcLOcM0ADuO9zKNomqsPCr0sKMwHnhdkdn
WPy0CliyECXjaLNYsVr6x+o0CBF7imtkWAf6GYcsfuehbxP8uN7/ZJa/TBSSjKRu
oJRFbPo7NXHuGVAlGoIMS/Y2l4MNGMvNIFmrNrOxVXSu9fz9so3tDv+lU9oNKLh5
4EbF55QodMQ+63GW+f8KmSgGrMvcYETX4QjuyrZAqI2oxexebvyIJP/i9iI34jak
C2tXqYVNGZtw7d/cEZn93i5rYKGqwcr7
-----END CERTIFICATE-----
Generated at Fri May 8 04:53:35 2026 by rpki-client