Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ae99a3eb-e019-324d-a4eb-d60baa9b4fe7.roa
File:                     ae99a3eb-e019-324d-a4eb-d60baa9b4fe7.roa (raw, json)
Hash identifier:          J9imCQZQunfk51838J46oZMMTmkfBwctlYumfRjsKkU=
Subject key identifier:   BF:41:73:43:A6:BE:81:E7:05:C1:AE:8C:11:32:27:DB:4B:7E:81:41
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F4328584D67DFFB1F16C6385680077A00
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ae99a3eb-e019-324d-a4eb-d60baa9b4fe7.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     30058
IP address blocks:        2607:bc40:103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:fb:1f:16:c6:38:56:80:07:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=6c6ed37f-c269-470c-a8d2-37a71c150566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4d:4c:63:1b:c5:0f:73:a1:19:8f:34:ca:ac:
                    9c:f0:6e:1b:d3:02:a7:f3:88:32:6f:12:69:5c:46:
                    de:06:c8:af:74:87:2d:12:1c:d3:f5:69:eb:9d:45:
                    3a:5f:ba:44:e8:5a:45:64:68:da:39:f6:30:e0:75:
                    ee:4e:c6:fe:f1:73:1a:c2:90:53:16:42:09:e4:34:
                    67:30:99:5b:e0:a4:93:22:cd:fd:5d:65:e3:06:83:
                    b5:ee:d5:f2:cb:17:68:ad:c8:68:17:d4:a4:fd:f2:
                    95:40:b3:c0:3c:77:64:80:0e:ec:98:7b:0a:16:77:
                    44:e2:b3:71:cb:03:97:12:35:90:7e:00:70:41:57:
                    79:43:51:77:61:af:0c:62:54:7b:07:51:02:0a:c3:
                    b0:45:d0:fd:a5:be:e5:16:80:f0:68:81:52:c5:d3:
                    58:df:5e:3e:b6:94:6d:d3:77:94:27:54:22:40:c3:
                    de:32:b0:99:80:2e:67:88:80:0c:2d:86:a8:48:81:
                    77:0a:34:57:36:d8:05:06:67:ed:1e:d7:a3:8a:4f:
                    09:31:ed:19:26:12:11:07:af:08:5e:db:c3:7e:10:
                    3c:cd:66:06:f7:e3:98:8d:34:8d:7f:10:51:67:ca:
                    31:49:67:4a:93:1b:20:2a:ce:1d:86:d7:6d:af:7b:
                    4f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:41:73:43:A6:BE:81:E7:05:C1:AE:8C:11:32:27:DB:4B:7E:81:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ae99a3eb-e019-324d-a4eb-d60baa9b4fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bc40:103::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d0:88:76:0c:2d:e4:43:8d:50:04:41:2e:4e:f1:3e:2e:3b:
         3b:2f:dc:a3:fb:3f:2c:c9:af:58:95:07:d7:80:cd:59:8a:81:
         58:eb:ca:3a:28:f8:9d:f0:d4:e9:56:f8:b3:61:90:80:d9:d7:
         d6:5e:76:78:75:35:06:64:f9:3f:8d:07:97:66:40:b4:d4:40:
         75:df:77:3e:ae:62:67:98:14:62:64:c0:f3:f6:ca:54:10:f6:
         04:ac:20:b8:b6:21:f1:30:25:ac:33:00:3f:1c:20:7e:48:79:
         29:f2:79:ce:83:26:ce:87:1f:80:67:fa:d1:cc:bd:02:92:1d:
         52:87:a8:a8:e2:78:e8:94:4b:5c:ad:5e:eb:66:4e:a9:cf:ab:
         bd:25:00:69:3d:7e:0c:7a:7b:41:07:90:16:f2:64:b2:07:56:
         d1:4a:cb:41:7f:ac:2f:93:69:eb:bd:b6:18:97:28:1b:b2:cd:
         25:b8:69:fb:92:cd:c8:7f:ed:51:dd:e1:48:dd:a1:cf:77:e5:
         1d:40:27:80:25:eb:79:42:4e:9a:9b:8f:31:3c:6f:f5:0d:3f:
         03:7c:fc:83:a4:2e:57:82:fd:e9:dc:63:72:6d:5e:c7:96:dc:
         93:0e:0a:07:d8:5d:d4:cc:ea:c9:8f:cb:30:cf:3c:30:6f:ba:
         4a:b6:aa:de
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1n3/sfFsY4VoAHegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWEzZjkwNDQtYzE4NS00MDYyLThkYWQtMjQwYjMyYjEx
MzQ4MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
NmM2ZWQzN2YtYzI2OS00NzBjLWE4ZDItMzdhNzFjMTUwNTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU1MYxvFD3OhGY80yqyc8G4b0wKn84gybxJp
XEbeBsivdIctEhzT9WnrnUU6X7pE6FpFZGjaOfYw4HXuTsb+8XMawpBTFkIJ5DRn
MJlb4KSTIs39XWXjBoO17tXyyxdorchoF9Sk/fKVQLPAPHdkgA7smHsKFndE4rNx
ywOXEjWQfgBwQVd5Q1F3Ya8MYlR7B1ECCsOwRdD9pb7lFoDwaIFSxdNY314+tpRt
03eUJ1QiQMPeMrCZgC5niIAMLYaoSIF3CjRXNtgFBmftHtejik8JMe0ZJhIRB68I
XtvDfhA8zWYG9+OYjTSNfxBRZ8oxSWdKkxsgKs4dhtdtr3tPywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL9Bc0OmvoHnBcGujBEyJ9tLfoFBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lYTNm
OTA0NC1jMTg1LTQwNjItOGRhZC0yNDBiMzJiMTEzNDgvYWU5OWEzZWItZTAxOS0z
MjRkLWE0ZWItZDYwYmFhOWI0ZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZWEzZjkwNDQtYzE4NS00MDYyLThk
YWQtMjQwYjMyYjExMzQ4L2VhM2Y5MDQ0LWMxODUtNDA2Mi04ZGFkLTI0MGIzMmIx
MTM0OC5jcmwwHwYDVR0jBBgwFoAU/qCdkBIn9seDsTYB8Pa28gt/KOYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lYTNmOTA0NC1jMTg1LTQwNjItOGRhZC0yNDBi
MzJiMTEzNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJge8QAED
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF/QiHYMLeRDjVAEQS5O8T4uOzsv3KP7PyzJr1iVB9eAzVmKgVjr
yjoo+J3w1OlW+LNhkIDZ19Zednh1NQZk+T+NB5dmQLTUQHXfdz6uYmeYFGJkwPP2
ylQQ9gSsILi2IfEwJawzAD8cIH5IeSnyec6DJs6HH4Bn+tHMvQKSHVKHqKjieOiU
S1ytXutmTqnPq70lAGk9fgx6e0EHkBbyZLIHVtFKy0F/rC+Taeu9thiXKBuyzSW4
afuSzch/7VHd4Ujdoc935R1AJ4Al63lCTpqbjzE8b/UNPwN8/IOkLleC/encY3Jt
XseW3JMOCgfYXdTM6smPyzDPPDBvukq2qt4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:01:20 2026 by rpki-client