Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa
File:                     7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa (raw, json)
Hash identifier:          frHtZmqSQw6gqgANu9Yp8zEdCWoMXQ89+qAYbgS+Ibw=
Subject key identifier:   BA:F1:8A:2C:36:70:1B:7C:85:1C:A4:FA:43:EF:6F:1B:0F:12:98:64
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584D5E1A505BCCC09A4C6D2A4380
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     212149
IP address blocks:        2605:f440:b00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:50:5b:cc:c0:9a:4c:6d:2a:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=4254b97b-9b44-4964-be03-0ec843b7aa99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:e1:56:ff:7d:f9:27:3b:45:2c:68:43:ef:
                    2a:99:48:f9:f8:1f:5d:1e:38:df:37:c7:6d:b3:c1:
                    34:4d:63:4f:66:40:61:ac:89:8b:ac:2e:14:1e:59:
                    54:af:44:be:5d:f4:b5:b0:a6:13:49:c2:ff:56:c9:
                    ac:5d:3a:4e:ad:25:e1:f9:11:8f:86:6c:f1:e3:d4:
                    38:02:27:50:cc:03:7f:51:55:13:f0:fa:c4:d3:08:
                    d8:5d:65:b2:b7:52:bc:c5:50:df:c7:1e:22:06:b7:
                    18:b4:97:2f:77:71:77:da:e4:9d:5b:f6:c4:9f:92:
                    b7:a3:b4:89:c5:21:85:23:ee:6b:62:75:d9:96:4d:
                    db:f7:8c:99:c1:4a:b0:c3:b3:cd:aa:f5:df:6a:f6:
                    35:27:c3:d0:7f:df:ab:fe:5e:d4:de:b3:96:cb:c5:
                    e2:91:8b:d6:3a:a8:39:45:ab:ae:81:f0:ea:fe:1b:
                    64:dc:0f:aa:ce:b5:96:5e:89:7e:4a:fd:83:3a:94:
                    bf:be:fc:66:26:a9:aa:f5:24:94:f7:e3:c9:52:53:
                    05:3a:76:4b:28:b9:7e:a1:e3:9d:d1:96:b7:67:ce:
                    aa:2b:12:0c:80:cd:fd:9b:5e:46:b0:fa:e2:cd:49:
                    fb:55:c8:18:ec:e9:03:39:7d:6f:cf:0b:85:6d:84:
                    e6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F1:8A:2C:36:70:1B:7C:85:1C:A4:FA:43:EF:6F:1B:0F:12:98:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:b00b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1a:cd:1f:91:46:9c:49:1e:b2:8d:50:2e:b9:5d:f2:10:bd:
         8b:56:d8:88:94:0a:66:05:b8:86:ce:08:3c:4b:67:a7:1e:1f:
         12:0d:5e:0e:29:c2:8a:f7:fb:dc:5d:65:ad:45:d8:6f:50:9e:
         04:c4:c8:92:80:3f:71:28:98:7f:eb:ea:d5:d2:64:e3:db:81:
         cb:06:11:a8:62:72:0d:e4:64:4c:43:3f:2f:c0:75:1c:90:d7:
         75:b7:be:eb:66:a6:0e:17:a3:8b:dd:22:64:bd:12:f1:e5:0d:
         40:d7:07:cf:a0:d5:c6:2c:8e:70:06:90:60:e0:aa:77:8c:d0:
         01:63:95:0b:f5:44:37:36:0e:c1:fc:8b:b0:c5:36:0c:fe:29:
         a4:41:48:9f:f8:78:65:bf:cb:18:b4:a7:77:15:d1:13:d0:bb:
         1a:d1:17:6a:ce:92:f5:a2:09:25:f1:13:db:f1:e2:b2:a4:8e:
         d3:6a:28:41:11:6d:4c:34:d3:da:3b:c7:32:cf:08:09:65:b5:
         48:fc:37:7a:4a:51:e7:fd:6d:91:e4:32:bb:bb:fe:63:7c:4f:
         9d:58:93:b5:36:bb:09:1d:96:5d:c2:24:de:be:65:10:9f:cb:
         b2:ef:35:02:36:0a:86:39:03:c3:3b:2a:e1:55:42:6c:18:bc:
         3b:4f:ac:4c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGlBbzMCaTG0qQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4
ZjcyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
NDI1NGI5N2ItOWI0NC00OTY0LWJlMDMtMGVjODQzYjdhYTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbHhVv99+Sc7RSxoQ+8qmUj5+B9dHjjfN8dt
s8E0TWNPZkBhrImLrC4UHllUr0S+XfS1sKYTScL/VsmsXTpOrSXh+RGPhmzx49Q4
AidQzAN/UVUT8PrE0wjYXWWyt1K8xVDfxx4iBrcYtJcvd3F32uSdW/bEn5K3o7SJ
xSGFI+5rYnXZlk3b94yZwUqww7PNqvXfavY1J8PQf9+r/l7U3rOWy8XikYvWOqg5
RauugfDq/htk3A+qzrWWXol+Sv2DOpS/vvxmJqmq9SSU9+PJUlMFOnZLKLl+oeOd
0Za3Z86qKxIMgM39m15GsPrizUn7VcgY7OkDOX1vzwuFbYTmMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLrxiiw2cBt8hRyk+kPvbxsPEphkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk
MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvN2IxYjAwYzUtN2Y2NS0z
ZTE1LThiYjUtNTZhOTRkZmE0MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4
NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw
OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2
N2JmMDhmNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX0QLAL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEoazR+RRpxJHrKNUC65XfIQvYtW2IiUCmYFuIbOCDxLZ6ceHxIN
Xg4pwor3+9xdZa1F2G9QngTEyJKAP3EomH/r6tXSZOPbgcsGEahicg3kZExDPy/A
dRyQ13W3vutmpg4Xo4vdImS9EvHlDUDXB8+g1cYsjnAGkGDgqneM0AFjlQv1RDc2
DsH8i7DFNgz+KaRBSJ/4eGW/yxi0p3cV0RPQuxrRF2rOkvWiCSXxE9vx4rKkjtNq
KEERbUw009o7xzLPCAlltUj8N3pKUef9bZHkMru7/mN8T51Yk7U2uwkdll3CJN6+
ZRCfy7LvNQI2CoY5A8M7KuFVQmwYvDtPrEw=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:54:44 2026 by rpki-client