Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/7442acd6-88eb-37fb-aad4-93f5cd718f87.roa
File:                     7442acd6-88eb-37fb-aad4-93f5cd718f87.roa (raw, json)
Hash identifier:          wg/QpIF2iPkEJFgBMhEoRQFjk/yUvJdCsHw9DBRepNA=
Subject key identifier:   7F:9A:86:2C:40:F7:9C:1B:E6:EB:56:84:8C:8B:41:B7:F9:85:FA:B7
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F4328584D6AAA8C9700846BCBA578AB00
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/7442acd6-88eb-37fb-aad4-93f5cd718f87.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     11659
IP address blocks:        2001:49d0:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:8c:97:00:84:6b:cb:a5:78:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=6f9289ab-7402-4d37-bf58-7b25050443b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8f:1e:f2:9d:f5:72:df:c3:c7:91:ee:2d:aa:
                    69:8c:d2:c4:42:1c:a1:9d:31:17:1c:06:c2:91:56:
                    5f:64:83:5b:bd:d3:13:ff:84:ba:09:ba:e6:d1:09:
                    ca:02:fe:fc:db:2a:8e:9b:52:81:17:67:72:12:74:
                    48:de:c6:dd:53:44:12:53:e2:d1:e3:d4:98:eb:15:
                    3d:62:f6:61:b6:03:a9:c2:db:45:93:24:c5:8c:b5:
                    2e:0f:4e:03:83:fd:46:49:30:85:24:45:e0:7c:a4:
                    9e:c9:85:d6:c4:e7:95:fb:4c:68:19:16:29:c6:f4:
                    c7:df:0d:1f:ae:0f:b6:9c:2c:12:a6:30:b6:c1:9d:
                    e9:8c:3b:7b:28:7d:4a:c9:12:8f:38:a7:48:76:d4:
                    ce:bd:44:63:94:5f:e4:cb:99:32:c3:16:a5:8c:07:
                    3f:59:8e:98:0f:da:91:2b:11:99:3f:16:4e:17:c2:
                    64:bf:73:b4:11:9c:b6:cc:28:05:55:2e:30:31:59:
                    df:a3:4a:f2:68:e0:1a:cf:bf:d2:1e:01:9f:28:f2:
                    0d:69:12:c0:e7:8c:9c:aa:09:38:d9:e4:49:c7:34:
                    b5:36:9d:28:a0:68:11:7c:a4:c2:8c:fa:c4:a9:0b:
                    7b:4d:43:81:3a:92:60:35:19:28:40:58:d5:f9:aa:
                    1d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9A:86:2C:40:F7:9C:1B:E6:EB:56:84:8C:8B:41:B7:F9:85:FA:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/7442acd6-88eb-37fb-aad4-93f5cd718f87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:07:8d:c5:ae:38:12:25:e7:8f:2f:14:69:a7:64:56:9e:73:
         e4:05:8c:68:80:39:5a:19:ae:af:5f:7e:af:49:a1:78:44:6e:
         47:b5:f0:7c:9a:c9:d6:52:72:c3:01:76:98:f0:6e:3e:a3:e4:
         fa:95:c3:87:f2:ea:c5:a1:be:4c:bd:76:5c:a1:73:56:28:dc:
         13:e5:19:27:c8:fe:5b:40:5e:fc:18:18:b6:fd:35:9f:42:28:
         63:9b:ac:bf:44:d6:16:02:bd:d6:46:a9:e2:0b:40:72:fc:b7:
         93:ba:4d:29:53:62:40:76:80:92:4a:18:65:9b:36:d1:8d:88:
         6f:23:5b:a4:b2:de:f8:b6:dc:6a:3a:42:00:39:18:f0:19:70:
         b9:f2:3a:63:6f:1d:7f:e5:a0:1f:f6:75:31:61:7d:3e:ab:6c:
         fa:0c:31:27:63:f1:39:71:fd:9d:26:11:e7:83:fe:2a:e9:98:
         12:0c:a2:75:e3:db:6f:28:a0:65:ce:a6:bc:7c:f2:d2:85:c8:
         e0:f6:fb:ab:d2:15:2e:12:ad:cc:45:df:13:84:ae:9f:21:5b:
         e0:1a:81:cb:a6:25:f0:64:a1:85:aa:3f:b5:3c:c4:9d:8e:67:
         bf:79:52:c3:3e:ae:71:a7:d0:61:bd:22:a5:8b:e0:79:cf:4b:
         07:7d:7b:35
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1qqoyXAIRry6V4qwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE5MTIzMmItY2YwNy00ZDNkLTk1ZTEtYWZjZDFiOTI4
YWIxMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
NmY5Mjg5YWItNzQwMi00ZDM3LWJmNTgtN2IyNTA1MDQ0M2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA448e8p31ct/Dx5HuLappjNLEQhyhnTEXHAbC
kVZfZINbvdMT/4S6Cbrm0QnKAv782yqOm1KBF2dyEnRI3sbdU0QSU+LR49SY6xU9
YvZhtgOpwttFkyTFjLUuD04Dg/1GSTCFJEXgfKSeyYXWxOeV+0xoGRYpxvTH3w0f
rg+2nCwSpjC2wZ3pjDt7KH1KyRKPOKdIdtTOvURjlF/ky5kywxaljAc/WY6YD9qR
KxGZPxZOF8Jkv3O0EZy2zCgFVS4wMVnfo0ryaOAaz7/SHgGfKPINaRLA54ycqgk4
2eRJxzS1Np0ooGgRfKTCjPrEqQt7TUOBOpJgNRkoQFjV+aodrQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFH+ahixA95wb5utWhIyLQbf5hfq3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkx
MjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNkMWI5MjhhYjEvNzQ0MmFjZDYtODhlYi0z
N2ZiLWFhZDQtOTNmNWNkNzE4Zjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTE5MTIzMmItY2YwNy00ZDNkLTk1
ZTEtYWZjZDFiOTI4YWIxL2UxOTEyMzJiLWNmMDctNGQzZC05NWUxLWFmY2QxYjky
OGFiMS5jcmwwHwYDVR0jBBgwFoAU7JRBLAWSfcf7SwhB2jG+8+q2vTQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkxMjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNk
MWI5MjhhYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCIAFJ0IAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAkgeNxa44EiXnjy8UaadkVp5z5AWMaIA5Whmur19+r0mheERuR7Xw
fJrJ1lJywwF2mPBuPqPk+pXDh/LqxaG+TL12XKFzVijcE+UZJ8j+W0Be/BgYtv01
n0IoY5usv0TWFgK91kap4gtAcvy3k7pNKVNiQHaAkkoYZZs20Y2IbyNbpLLe+Lbc
ajpCADkY8BlwufI6Y28df+WgH/Z1MWF9Pqts+gwxJ2PxOXH9nSYR54P+KumYEgyi
dePbbyigZc6mvHzy0oXI4Pb7q9IVLhKtzEXfE4SunyFb4BqBy6Yl8GShhao/tTzE
nY5nv3lSwz6ucafQYb0ipYvgec9LB317NQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:01:48 2026 by rpki-client