Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/e59a494f-b10e-3d3b-a4aa-eb5a78e82379.roa
File:                     e59a494f-b10e-3d3b-a4aa-eb5a78e82379.roa (raw, json)
Hash identifier:          II1SsN46uoHZTBwbiPLnkL+qC7v4Op/C4pkmqs3FlDo=
Subject key identifier:   90:8F:41:83:B6:98:22:84:DD:49:C5:BD:AC:52:31:C5:43:09:19:C8
Certificate issuer:       /CN=3034d07c-3a5c-48d3-8756-810837f1ae39
Certificate serial:       010D0C9F4328584CAE572C75B8340FAB72BA9900
Authority key identifier: CE:B3:31:18:28:F3:99:AE:1F:EF:C2:E7:9A:A4:4B:28:BA:CB:36:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/e59a494f-b10e-3d3b-a4aa-eb5a78e82379.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     395378
IP address blocks:        2605:b80::/31 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/3034d07c-3a5c-48d3-8756-810837f1ae39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/3034d07c-3a5c-48d3-8756-810837f1ae39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:2c:75:b8:34:0f:ab:72:ba:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3034d07c-3a5c-48d3-8756-810837f1ae39
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=25835c43-d537-4d89-ad26-8ebf4f8b94bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c2:bb:71:b9:1a:b3:a3:d5:89:aa:ad:c4:be:
                    fa:8a:96:92:0b:ab:70:4c:82:0f:0e:53:d7:ce:55:
                    e5:32:29:3e:1e:9f:ad:98:b0:b8:0f:57:f7:47:2b:
                    f8:96:43:c8:95:03:59:62:6c:ff:c5:a1:de:5a:a9:
                    22:f2:37:b6:dc:d1:3e:88:1e:23:13:52:c6:31:0e:
                    38:06:1d:b5:67:55:17:3a:89:d1:a5:f6:fe:eb:36:
                    b1:8b:04:89:82:f0:5a:c6:23:94:75:8d:36:db:64:
                    5c:71:ed:6f:4a:fd:b0:95:65:6a:dd:b2:70:05:56:
                    0e:26:4e:d4:81:03:ae:17:8b:d8:a3:84:7f:1e:15:
                    4a:26:f2:2c:84:72:10:09:f0:24:50:99:2d:c4:ed:
                    8f:de:b7:e8:28:69:68:1d:55:09:a3:81:de:b0:a1:
                    3d:89:e7:3a:e5:97:a7:6c:6b:5d:31:99:5e:84:ff:
                    84:a9:e2:e1:21:bf:53:5e:bd:ee:59:0b:53:e2:1a:
                    5c:f2:d4:f0:c3:3f:c6:88:5d:bc:a9:88:22:36:2b:
                    41:b7:28:e9:0b:9a:fb:e3:02:e1:b6:7b:aa:91:b1:
                    b9:25:61:49:77:4c:9c:b5:b7:09:9e:cf:cc:83:22:
                    c9:78:23:49:a5:9b:01:83:c8:99:ba:5f:c3:2e:6f:
                    fb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8F:41:83:B6:98:22:84:DD:49:C5:BD:AC:52:31:C5:43:09:19:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/e59a494f-b10e-3d3b-a4aa-eb5a78e82379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/3034d07c-3a5c-48d3-8756-810837f1ae39.crl

            X509v3 Authority Key Identifier:
                keyid:CE:B3:31:18:28:F3:99:AE:1F:EF:C2:E7:9A:A4:4B:28:BA:CB:36:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b80::/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:fb:db:1e:42:f1:bd:fc:01:04:dc:3c:3d:7e:e8:f3:91:88:
         64:b3:4c:23:de:8c:57:08:69:5b:f6:44:09:2f:d8:0f:0b:78:
         b0:de:9c:f7:78:f7:44:0e:83:c6:c9:fd:0a:82:eb:60:89:da:
         e2:e9:13:4a:c5:d7:4a:53:c2:cc:ec:c8:92:2e:cb:9f:52:40:
         cc:5a:ea:b0:ca:5e:d3:51:81:3a:0d:8a:0f:77:67:47:2e:5b:
         72:2c:d8:52:19:52:76:1f:cf:8d:27:a6:0a:25:35:57:f3:bf:
         f7:cf:47:67:3e:00:3a:ba:c7:03:32:58:39:fb:87:d0:ba:56:
         58:3f:d0:89:00:72:30:58:d5:3a:e9:36:2d:23:24:86:52:da:
         57:5f:55:81:81:b8:f4:a9:1f:1a:4f:ad:dc:de:14:35:c2:df:
         a3:9b:e8:00:aa:36:87:0b:4a:22:27:c0:0e:39:b5:11:4d:50:
         03:23:e5:86:3d:56:bd:8b:ab:d0:9e:80:06:38:c8:9a:34:a6:
         49:03:34:79:fa:5e:f9:8a:8b:43:27:be:c9:26:55:f8:fd:3f:
         bb:34:bb:15:0a:bb:61:df:79:d7:78:77:3f:57:86:c5:21:93:
         07:85:19:1c:d1:61:11:1a:35:3c:8d:76:1c:c5:f6:47:b9:4a:
         67:75:e6:a7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyuVyx1uDQPq3K6mQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzAzNGQwN2MtM2E1Yy00OGQzLTg3NTYtODEwODM3ZjFh
ZTM5MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MjU4MzVjNDMtZDUzNy00ZDg5LWFkMjYtOGViZjRmOGI5NGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MK7cbkas6PViaqtxL76ipaSC6twTIIPDlPX
zlXlMik+Hp+tmLC4D1f3Ryv4lkPIlQNZYmz/xaHeWqki8je23NE+iB4jE1LGMQ44
Bh21Z1UXOonRpfb+6zaxiwSJgvBaxiOUdY0222Rcce1vSv2wlWVq3bJwBVYOJk7U
gQOuF4vYo4R/HhVKJvIshHIQCfAkUJktxO2P3rfoKGloHVUJo4HesKE9iec65Zen
bGtdMZlehP+EqeLhIb9TXr3uWQtT4hpc8tTwwz/GiF28qYgiNitBtyjpC5r74wLh
tnuqkbG5JWFJd0yctbcJns/MgyLJeCNJpZsBg8iZul/DLm/7kQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJCPQYO2mCKE3UnFvaxSMcVDCRnIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMDM0
ZDA3Yy0zYTVjLTQ4ZDMtODc1Ni04MTA4MzdmMWFlMzkvZTU5YTQ5NGYtYjEwZS0z
ZDNiLWE0YWEtZWI1YTc4ZTgyMzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzAzNGQwN2MtM2E1Yy00OGQzLTg3
NTYtODEwODM3ZjFhZTM5LzMwMzRkMDdjLTNhNWMtNDhkMy04NzU2LTgxMDgzN2Yx
YWUzOS5jcmwwHwYDVR0jBBgwFoAUzrMxGCjzma4f78LnmqRLKLrLNvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMDM0ZDA3Yy0zYTVjLTQ4ZDMtODc1Ni04MTA4
MzdmMWFlMzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBJgULgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBO+9seQvG9/AEE3Dw9fujzkYhks0wj3oxXCGlb9kQJL9gPC3iw3pz3
ePdEDoPGyf0Kgutgidri6RNKxddKU8LM7MiSLsufUkDMWuqwyl7TUYE6DYoPd2dH
LltyLNhSGVJ2H8+NJ6YKJTVX87/3z0dnPgA6uscDMlg5+4fQulZYP9CJAHIwWNU6
6TYtIySGUtpXX1WBgbj0qR8aT63c3hQ1wt+jm+gAqjaHC0oiJ8AOObURTVADI+WG
PVa9i6vQnoAGOMiaNKZJAzR5+l75iotDJ77JJlX4/T+7NLsVCrth33nXeHc/V4bF
IZMHhRkc0WERGjU8jXYcxfZHuUpndean
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:30 2026 by rpki-client