Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/a7478053-78aa-3f5d-b1af-384fc4badd80.roa
File:                     a7478053-78aa-3f5d-b1af-384fc4badd80.roa (raw, json)
Hash identifier:          xX1RgZ4IQbQ0/pkUtbRuL/onLYYiiWI4B94a/htHKJc=
Subject key identifier:   C5:D7:C5:DF:3C:48:49:05:2E:B8:D4:D3:D0:86:47:DC:05:39:73:CE
Certificate issuer:       /CN=c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569
Certificate serial:       010D0C9F4328584D75D53DEB7BC3E3FA8BD98080
Authority key identifier: 7E:43:91:89:D1:82:7F:29:92:31:FD:11:FC:5E:A5:94:1E:96:94:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/a7478053-78aa-3f5d-b1af-384fc4badd80.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     393731
IP address blocks:        2607:7940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:3d:eb:7b:c3:e3:fa:8b:d9:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=5e0ce204-6342-4a12-95a0-d356964d3367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:f3:78:9f:39:23:e5:f6:a6:b5:63:7a:dc:
                    40:65:12:9a:a0:f1:09:74:98:c0:42:4a:8d:15:f6:
                    96:7f:a0:b3:6a:a9:f2:07:de:61:13:e5:e8:46:5c:
                    10:7b:62:8f:84:0a:bf:2b:a8:db:69:69:bc:b5:5a:
                    b4:51:52:71:01:a1:81:3a:36:e7:52:80:36:d1:b2:
                    82:2b:eb:84:64:b9:cc:fc:2a:f7:a3:2b:41:a7:c5:
                    c2:d9:ba:f4:39:c1:b7:9c:3f:77:c5:4b:b6:24:8c:
                    a9:56:aa:56:aa:6e:93:41:8d:43:29:20:54:c9:40:
                    6e:4d:01:ac:db:5f:4f:58:1d:1c:be:48:b2:41:23:
                    01:63:eb:1a:d9:11:c6:87:73:51:31:8f:8d:a5:6d:
                    c0:b0:44:be:bb:cf:11:77:08:74:93:d8:28:f0:2e:
                    e6:fc:02:00:e2:be:68:42:de:ee:dc:1a:56:a7:08:
                    89:dd:17:f0:46:84:db:8d:00:88:54:69:20:f9:2a:
                    0c:b2:1f:06:be:85:cc:7d:a4:03:e5:76:50:f0:fb:
                    95:d1:52:a2:f4:22:bc:cb:e0:cc:c3:3d:ac:7b:78:
                    6f:e0:90:bb:d4:89:ae:db:ed:03:f1:cf:ba:71:b6:
                    bf:77:4e:52:c2:85:be:1f:63:41:09:57:65:a3:d5:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D7:C5:DF:3C:48:49:05:2E:B8:D4:D3:D0:86:47:DC:05:39:73:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/a7478053-78aa-3f5d-b1af-384fc4badd80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.crl

            X509v3 Authority Key Identifier:
                keyid:7E:43:91:89:D1:82:7F:29:92:31:FD:11:FC:5E:A5:94:1E:96:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:21:ef:d6:e6:39:d1:b1:80:cc:9b:6e:d6:e7:b3:af:2d:82:
         7a:e3:03:99:72:49:59:07:7d:1e:0a:21:39:a9:8b:76:e3:cb:
         63:b6:7b:1c:73:6b:f9:c4:91:db:4c:ee:ad:23:37:02:ab:75:
         a2:04:bc:be:f7:d3:2b:6c:57:19:1f:32:02:dc:82:c9:4e:16:
         51:03:44:69:30:52:7a:1a:57:9c:1e:fd:38:d5:63:f9:1b:39:
         db:2b:52:a6:6a:db:bb:70:89:05:5b:18:48:87:1a:c4:d1:d9:
         fd:3d:7b:4b:29:b6:6c:00:70:03:d1:a5:c8:8f:e9:7a:38:49:
         54:df:8b:c9:8a:2a:4b:1b:47:89:23:07:b6:ad:93:0a:4b:da:
         fe:1b:82:4b:44:c8:0f:b2:ec:e3:55:1b:e1:56:b6:c8:22:9a:
         a5:8d:f0:de:69:e7:8b:57:69:d1:3d:6b:72:82:4b:ad:d2:a7:
         74:35:84:66:6b:30:54:ba:b6:1d:78:d9:72:30:15:12:68:27:
         67:fb:76:df:d7:49:1a:42:be:25:c8:be:4d:1e:27:87:0a:cd:
         3b:49:98:75:78:8c:75:78:cb:43:e9:eb:59:75:e9:1f:4c:4b:
         9a:3d:f2:58:c5:36:86:8e:2c:ca:f2:1e:40:14:87:55:03:01:
         6d:88:3e:c3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE111T3re8Pj+ovZgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzVmZDRhNjItZDhjYy00ZTQ0LWI1Y2ItNTNhOTNjMmI3
NTY5MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk
NWUwY2UyMDQtNjM0Mi00YTEyLTk1YTAtZDM1Njk2NGQzMzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnfzeJ85I+X2prVjetxAZRKaoPEJdJjAQkqN
FfaWf6CzaqnyB95hE+XoRlwQe2KPhAq/K6jbaWm8tVq0UVJxAaGBOjbnUoA20bKC
K+uEZLnM/Cr3oytBp8XC2br0OcG3nD93xUu2JIypVqpWqm6TQY1DKSBUyUBuTQGs
219PWB0cvkiyQSMBY+sa2RHGh3NRMY+NpW3AsES+u88Rdwh0k9go8C7m/AIA4r5o
Qt7u3BpWpwiJ3RfwRoTbjQCIVGkg+SoMsh8GvoXMfaQD5XZQ8PuV0VKi9CK8y+DM
wz2se3hv4JC71Imu2+0D8c+6cba/d05SwoW+H2NBCVdlo9Uf9wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMXXxd88SEkFLrjU09CGR9wFOXPOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNWZk
NGE2Mi1kOGNjLTRlNDQtYjVjYi01M2E5M2MyYjc1NjkvYTc0NzgwNTMtNzhhYS0z
ZjVkLWIxYWYtMzg0ZmM0YmFkZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzVmZDRhNjItZDhjYy00ZTQ0LWI1
Y2ItNTNhOTNjMmI3NTY5L2M1ZmQ0YTYyLWQ4Y2MtNGU0NC1iNWNiLTUzYTkzYzJi
NzU2OS5jcmwwHwYDVR0jBBgwFoAUfkORidGCfymSMf0R/F6llB6WlNswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jNWZkNGE2Mi1kOGNjLTRlNDQtYjVjYi01M2E5
M2MyYjc1NjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgd5QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBYIe/W5jnRsYDMm27W57OvLYJ64wOZcklZB30eCiE5qYt248tjtnsc
c2v5xJHbTO6tIzcCq3WiBLy+99MrbFcZHzIC3ILJThZRA0RpMFJ6GlecHv041WP5
GznbK1Kmatu7cIkFWxhIhxrE0dn9PXtLKbZsAHAD0aXIj+l6OElU34vJiipLG0eJ
Iwe2rZMKS9r+G4JLRMgPsuzjVRvhVrbIIpqljfDeaeeLV2nRPWtygkut0qd0NYRm
azBUurYdeNlyMBUSaCdn+3bf10kaQr4lyL5NHieHCs07SZh1eIx1eMtD6etZdekf
TEuaPfJYxTaGjizK8h5AFIdVAwFtiD7D
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:08 2026 by rpki-client