Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa
File:                     5bf9e334-dc7e-3b55-8aff-c525713a2347.roa (raw, json)
Hash identifier:          iFbl0zbPj3f4NuC9XGKYY/d6dyuaM9idWJrFStX2l5g=
Subject key identifier:   6D:4F:E5:2C:7D:03:02:91:A4:D4:9E:4C:AD:30:CA:3D:25:96:86:5B
Certificate issuer:       /CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7
Certificate serial:       010D0C9F4328584CB121CAA833C0252CD9744B80
Authority key identifier: B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     20388
IP address blocks:        2604:ce40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:ca:a8:33:c0:25:2c:d9:74:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=81f19c72-fbd3-4720-98c4-9dec83d0c55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:07:fc:c3:b6:3e:aa:6d:57:11:99:2e:22:
                    d8:8f:3f:19:8f:ec:59:6d:ff:10:59:0b:89:b8:92:
                    82:35:51:0a:2e:ae:7c:d3:9f:33:38:7c:0a:78:df:
                    81:fa:da:cd:1d:fa:b9:f9:ae:db:96:0a:f5:9c:2b:
                    9d:02:f5:e5:80:3a:0b:42:e4:51:f4:e5:97:93:73:
                    f8:6d:0c:12:4b:59:71:36:ce:0a:71:00:13:74:7a:
                    6d:b5:f8:e4:be:e0:48:e5:0e:59:7a:f1:36:86:3f:
                    f8:e7:51:be:67:67:60:73:80:05:67:6f:39:51:ef:
                    1b:6c:da:6b:84:a8:c6:b8:18:2b:8d:c7:df:5d:08:
                    36:84:41:30:56:7a:35:36:c2:08:9b:92:ce:35:53:
                    ac:7d:95:ec:b9:94:d3:ca:e7:76:4b:f2:9f:92:82:
                    dd:46:00:d9:40:be:6d:a7:65:4a:1b:4e:33:c1:ea:
                    25:8a:b6:4d:39:21:77:40:15:fb:92:16:21:cc:06:
                    54:a8:74:6c:21:74:1b:4b:d3:94:65:14:cd:4f:ec:
                    6c:39:b4:bb:47:5d:df:ff:4a:1f:85:1a:07:58:11:
                    94:25:6b:c3:f2:87:3e:19:54:98:70:73:11:37:93:
                    b7:45:cb:33:1a:df:0c:06:6e:36:88:2d:de:cb:f4:
                    c2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4F:E5:2C:7D:03:02:91:A4:D4:9E:4C:AD:30:CA:3D:25:96:86:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl

            X509v3 Authority Key Identifier:
                keyid:B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ce40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:3e:4e:80:95:71:63:ce:b5:87:e6:54:97:4b:1a:30:ca:68:
         77:3f:19:5c:c0:76:a3:d8:14:76:02:ae:69:54:d2:b2:fe:75:
         6e:59:ad:e8:92:f0:50:8b:87:fa:40:8e:b8:ad:c4:50:85:45:
         9e:0e:88:48:3c:35:07:a2:cd:fe:2e:f0:d9:d6:48:4e:d7:94:
         8d:44:3f:bb:09:f3:fd:53:e7:ce:d0:9d:8b:55:6f:70:4a:8c:
         d6:d5:d0:72:21:99:36:42:2b:ee:1f:3a:42:f9:f9:81:ea:b3:
         5a:c3:54:d3:d9:00:55:e6:b9:d0:fe:7b:4b:a0:fb:02:b9:54:
         0a:26:47:3b:8f:c3:ac:60:c1:b9:ae:1f:05:9b:4e:cd:6c:70:
         ee:15:1e:85:97:e0:68:9f:64:fd:61:ff:ce:9b:76:08:05:42:
         46:cc:0f:0d:38:58:f7:26:46:35:db:4c:7c:c1:e8:3e:f6:54:
         9a:2c:9b:c4:b0:4c:02:07:29:b6:ed:39:3f:7b:d4:5b:4b:5d:
         14:94:1b:67:95:43:93:48:63:2a:1b:ce:f9:07:af:ec:ac:4b:
         e0:d3:74:03:f3:01:b0:ab:73:14:69:ba:31:a3:d0:ed:07:4d:
         59:cc:63:c6:eb:b9:69:38:90:66:f0:7f:91:66:be:10:4d:80:
         1b:0d:db:21
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyxIcqoM8AlLNl0S4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU4ZmI0YzQtMGJjZS00NDM5LWFjNzAtMTJiMWFiN2Mz
ZGQ3MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk
ODFmMTljNzItZmJkMy00NzIwLTk4YzQtOWRlYzgzZDBjNTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSIH/MO2PqptVxGZLiLYjz8Zj+xZbf8QWQuJ
uJKCNVEKLq58058zOHwKeN+B+trNHfq5+a7blgr1nCudAvXlgDoLQuRR9OWXk3P4
bQwSS1lxNs4KcQATdHpttfjkvuBI5Q5ZevE2hj/451G+Z2dgc4AFZ285Ue8bbNpr
hKjGuBgrjcffXQg2hEEwVno1NsIIm5LONVOsfZXsuZTTyud2S/KfkoLdRgDZQL5t
p2VKG04zweolirZNOSF3QBX7khYhzAZUqHRsIXQbS9OUZRTNT+xsObS7R13f/0of
hRoHWBGUJWvD8oc+GVSYcHMRN5O3RcszGt8MBm42iC3ey/TC1wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFG1P5Sx9AwKRpNSeTK0wyj0lloZbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZThm
YjRjNC0wYmNlLTQ0MzktYWM3MC0xMmIxYWI3YzNkZDcvNWJmOWUzMzQtZGM3ZS0z
YjU1LThhZmYtYzUyNTcxM2EyMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGU4ZmI0YzQtMGJjZS00NDM5LWFj
NzAtMTJiMWFiN2MzZGQ3L2RlOGZiNGM0LTBiY2UtNDQzOS1hYzcwLTEyYjFhYjdj
M2RkNy5jcmwwHwYDVR0jBBgwFoAUsFydYYfgTD3CaLN8uM5RmYyIqDMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZThmYjRjNC0wYmNlLTQ0MzktYWM3MC0xMmIx
YWI3YzNkZDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTOQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCmPk6AlXFjzrWH5lSXSxowymh3PxlcwHaj2BR2Aq5pVNKy/nVuWa3o
kvBQi4f6QI64rcRQhUWeDohIPDUHos3+LvDZ1khO15SNRD+7CfP9U+fO0J2LVW9w
SozW1dByIZk2QivuHzpC+fmB6rNaw1TT2QBV5rnQ/ntLoPsCuVQKJkc7j8OsYMG5
rh8Fm07NbHDuFR6Fl+Bon2T9Yf/Om3YIBUJGzA8NOFj3JkY120x8weg+9lSaLJvE
sEwCBym27Tk/e9RbS10UlBtnlUOTSGMqG875B6/srEvg03QD8wGwq3MUaboxo9Dt
B01ZzGPG67lpOJBm8H+RZr4QTYAbDdsh
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:21:16 2026 by rpki-client