Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
File:                     7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa (raw, json)
Hash identifier:          870rVWHjCZYYr469MErjm5X9K9vCN24NZqn0t212uVc=
Subject key identifier:   75:6C:A0:5A:AB:21:6C:BF:96:4B:01:F4:0D:36:BA:A4:30:65:35:8F
Certificate issuer:       /CN=e175b8e9-bd62-4026-9a15-873e2b01713b
Certificate serial:       010D0C9F4328584CCD0CA0303A806464BF90BF00
Authority key identifier: 2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     3464
IP address blocks:        2607:f808::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:a0:30:3a:80:64:64:bf:90:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e175b8e9-bd62-4026-9a15-873e2b01713b
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=5c19be7c-ba12-4745-9b8d-636e2e2f9b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:db:3f:4e:97:02:14:f2:9e:7c:67:36:3e:7b:
                    a1:21:e3:72:d0:24:ad:1b:1d:64:1b:86:c1:fe:8f:
                    81:06:74:86:13:b0:68:91:fa:55:5e:8d:02:cf:73:
                    40:53:48:8c:2f:28:e4:62:bb:d2:cf:81:da:6d:87:
                    2b:29:92:d7:79:7b:ce:07:f6:d3:69:4f:1e:a1:65:
                    f5:09:96:5b:c9:d8:f7:bb:8f:9e:82:97:b7:63:1d:
                    57:fa:79:d6:a2:e9:5a:b8:06:24:7b:ae:a0:66:db:
                    78:b0:cb:62:e7:93:38:fb:e3:a4:8d:f0:1c:1c:79:
                    16:f0:ab:0d:a2:a7:ad:d6:57:85:13:42:be:33:8c:
                    3e:f8:36:5d:e6:86:c4:43:51:e3:2c:32:cd:30:79:
                    f0:a7:58:3a:75:72:59:0c:9b:9b:ef:61:6c:87:4c:
                    6e:a6:64:39:a6:2d:a4:9e:dc:08:0d:14:ef:6c:36:
                    0c:91:e2:eb:16:a9:52:cc:d0:76:27:88:a1:98:f3:
                    dc:db:1e:bf:e9:05:f8:f1:04:df:62:bf:3d:ee:09:
                    cf:9e:8e:a0:46:9d:e7:3e:34:36:26:61:8c:0c:c3:
                    df:3e:74:f1:d2:8f:cf:51:bf:e2:05:6f:e8:79:06:
                    56:f9:ec:b5:49:fe:21:a4:6f:e1:1e:91:1a:6a:34:
                    23:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6C:A0:5A:AB:21:6C:BF:96:4B:01:F4:0D:36:BA:A4:30:65:35:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f808::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3a:7b:12:86:78:17:08:11:82:9a:34:cf:24:58:c8:48:6f:
         8c:be:50:61:7a:c5:c5:66:b7:06:93:3f:07:3f:ac:b2:ce:02:
         7d:e3:60:ae:2b:58:5f:7f:b4:7f:c1:b5:c3:54:46:81:dc:ce:
         47:a0:64:41:4e:70:a4:b8:53:28:02:3c:b7:a8:5e:7c:69:ce:
         0a:c0:0c:03:c2:fe:e9:32:82:c4:8c:4e:32:6e:16:95:8b:80:
         1b:de:d1:c4:59:cb:58:a1:15:0b:35:6f:01:93:ce:36:f3:e3:
         f8:7d:04:cd:47:16:4d:00:4e:56:08:8b:c5:da:d3:a4:3d:c7:
         4d:73:a0:1e:9b:a5:db:45:fe:f5:97:f6:fa:1e:47:28:5d:89:
         8c:6f:f7:e4:58:fc:ff:04:2d:f1:49:49:c0:a3:33:71:12:48:
         eb:e5:c3:a9:31:c2:61:8c:3a:dc:d7:60:01:45:74:8c:c2:9c:
         fc:b6:99:04:bf:9f:2a:02:1b:4c:0f:86:8d:ba:eb:fc:d9:bb:
         1c:bf:c7:ca:9d:2f:e6:aa:d7:0e:c5:01:f5:79:6a:b2:b0:d3:
         c2:8a:8e:e9:ac:4e:3f:2d:a8:b1:30:c7:19:89:2f:03:f6:0b:
         bb:7f:f6:4a:e0:ea:2d:d0:10:fe:e3:fc:e8:cb:96:5d:e5:ec:
         7d:e1:dc:f0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzNDKAwOoBkZL+QvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE3NWI4ZTktYmQ2Mi00MDI2LTlhMTUtODczZTJiMDE3
MTNiMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk
NWMxOWJlN2MtYmExMi00NzQ1LTliOGQtNjM2ZTJlMmY5Yjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ds/TpcCFPKefGc2PnuhIeNy0CStGx1kG4bB
/o+BBnSGE7BokfpVXo0Cz3NAU0iMLyjkYrvSz4HabYcrKZLXeXvOB/bTaU8eoWX1
CZZbydj3u4+egpe3Yx1X+nnWoulauAYke66gZtt4sMti55M4++OkjfAcHHkW8KsN
oqet1leFE0K+M4w++DZd5obEQ1HjLDLNMHnwp1g6dXJZDJub72Fsh0xupmQ5pi2k
ntwIDRTvbDYMkeLrFqlSzNB2J4ihmPPc2x6/6QX48QTfYr897gnPno6gRp3nPjQ2
JmGMDMPfPnTx0o/PUb/iBW/oeQZW+ey1Sf4hpG/hHpEaajQjfQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHVsoFqrIWy/lksB9A02uqQwZTWPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lMTc1
YjhlOS1iZDYyLTQwMjYtOWExNS04NzNlMmIwMTcxM2IvN2ZiZjQ0YmItMDFiMy0z
ZmRiLTljZjctNTM0NDNlOWJlNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTE3NWI4ZTktYmQ2Mi00MDI2LTlh
MTUtODczZTJiMDE3MTNiL2UxNzViOGU5LWJkNjItNDAyNi05YTE1LTg3M2UyYjAx
NzEzYi5jcmwwHwYDVR0jBBgwFoAUKrzVBHhVMsHVWTWnbohKSquffBUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lMTc1YjhlOS1iZDYyLTQwMjYtOWExNS04NzNl
MmIwMTcxM2IuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf4CDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB3OnsShngXCBGCmjTPJFjISG+MvlBhesXFZrcGkz8HP6yyzgJ942Cu
K1hff7R/wbXDVEaB3M5HoGRBTnCkuFMoAjy3qF58ac4KwAwDwv7pMoLEjE4ybhaV
i4Ab3tHEWctYoRULNW8Bk8428+P4fQTNRxZNAE5WCIvF2tOkPcdNc6Aem6XbRf71
l/b6HkcoXYmMb/fkWPz/BC3xSUnAozNxEkjr5cOpMcJhjDrc12ABRXSMwpz8tpkE
v58qAhtMD4aNuuv82bscv8fKnS/mqtcOxQH1eWqysNPCio7prE4/LaixMMcZiS8D
9gu7f/ZK4Oot0BD+4/zoy5Zd5ex94dzw
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:10 2026 by rpki-client