Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/8671b8c7-29cb-389f-8097-41b06c4c4466.roa
File:                     8671b8c7-29cb-389f-8097-41b06c4c4466.roa (raw, json)
Hash identifier:          ymP1K+/xNJfeDmm0WujlZGhwSa+1lvMBICMhgh0YdKk=
Subject key identifier:   0B:89:B1:84:4C:3C:2B:02:22:03:BF:AC:B6:10:71:99:0A:19:3E:74
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584D5E1A5074B9EA6A82CF193480
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/8671b8c7-29cb-389f-8097-41b06c4c4466.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     209864
IP address blocks:        2605:f440:cafe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:50:74:b9:ea:6a:82:cf:19:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=8aae9cd1-f8f2-455d-9abb-467f190b4f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5b:4c:a0:e2:3c:97:c8:f6:ed:ab:7e:4d:97:
                    c0:c8:8e:7a:f3:7b:d5:91:b1:02:8b:5c:1c:47:4d:
                    25:f8:36:a9:52:2a:41:9d:ce:da:8d:ac:dd:0e:d0:
                    a9:6e:08:a0:78:36:78:1a:16:52:aa:d2:47:32:d6:
                    c5:e2:d2:13:56:6a:f8:9b:f2:89:3f:5d:be:81:90:
                    4e:fa:0e:66:4e:54:d2:9c:20:05:40:65:2f:9c:88:
                    94:b6:a5:9d:a6:a3:d9:e1:4d:3a:a0:a3:7e:42:bd:
                    64:17:cc:dc:2d:b7:ea:23:29:9c:03:7c:14:2b:50:
                    5f:f5:f5:e2:c5:33:1b:8d:13:31:04:38:47:35:99:
                    1c:35:3e:3c:1b:c0:44:16:9b:e0:50:9a:5f:32:72:
                    9f:4e:36:8b:d3:66:5d:9f:79:59:80:e3:e5:5d:5e:
                    46:82:e2:10:8a:8e:7e:59:74:8f:9c:35:d6:92:2f:
                    34:70:2e:96:10:e9:b8:96:10:ce:8a:ad:50:91:25:
                    fc:bc:21:67:6c:9a:5a:6a:21:f8:d4:7a:db:54:46:
                    5c:3d:6e:03:0a:44:9b:dc:e6:20:1d:be:69:a3:fe:
                    89:3b:9f:6e:e0:03:38:63:29:76:ff:f6:5a:0d:57:
                    9c:d8:f7:ce:01:c2:46:d9:58:69:75:14:ec:9d:7a:
                    33:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:89:B1:84:4C:3C:2B:02:22:03:BF:AC:B6:10:71:99:0A:19:3E:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/8671b8c7-29cb-389f-8097-41b06c4c4466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:cafe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:5f:06:6d:25:9d:92:ba:6b:38:55:17:c9:21:b9:04:55:eb:
         93:ac:9a:c3:9f:6f:76:d6:5a:e5:ca:9a:a3:70:2b:78:c3:bf:
         6c:f3:11:e6:0d:d1:81:7f:6d:27:fa:eb:fd:e9:f1:c4:46:11:
         98:45:99:0a:18:18:38:f1:fd:f9:15:8a:78:49:ab:5a:2e:68:
         50:96:ff:a7:a3:f4:c9:98:f6:e8:3d:5e:a1:d6:3e:83:54:66:
         2e:74:ad:a3:59:25:8f:a5:20:d8:ad:d0:4a:b3:42:61:27:9a:
         3d:05:cd:ae:bc:c9:33:a2:a2:fd:d3:cd:03:42:c1:56:87:58:
         ac:91:cc:bd:0b:96:7d:64:19:7b:19:13:e2:0a:02:a7:dd:eb:
         83:6e:e3:fc:2e:7b:1a:ca:51:9b:e5:2d:6e:b7:5a:c9:1a:f5:
         5a:bc:c3:9a:f9:81:2a:9e:e8:b1:90:31:d9:f4:3d:23:7a:52:
         07:f1:31:57:de:88:69:24:74:f2:3a:f0:11:02:05:9f:8f:7d:
         39:38:38:5b:8c:ad:c0:73:ab:8e:8c:0e:7a:24:b5:64:2a:ac:
         54:18:f9:83:d8:db:5d:a5:51:46:51:ab:a4:9c:98:68:2f:a2:
         e6:4c:99:fe:31:7e:2d:f5:4d:fe:2e:76:9f:79:db:a9:17:82:
         3f:ca:4a:21
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGlB0uepqgs8ZNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4
ZjcyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
OGFhZTljZDEtZjhmMi00NTVkLTlhYmItNDY3ZjE5MGI0ZjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VtMoOI8l8j27at+TZfAyI5683vVkbECi1wc
R00l+DapUipBnc7ajazdDtCpbgigeDZ4GhZSqtJHMtbF4tITVmr4m/KJP12+gZBO
+g5mTlTSnCAFQGUvnIiUtqWdpqPZ4U06oKN+Qr1kF8zcLbfqIymcA3wUK1Bf9fXi
xTMbjRMxBDhHNZkcNT48G8BEFpvgUJpfMnKfTjaL02Zdn3lZgOPlXV5GguIQio5+
WXSPnDXWki80cC6WEOm4lhDOiq1QkSX8vCFnbJpaaiH41HrbVEZcPW4DCkSb3OYg
Hb5po/6JO59u4AM4Yyl2//ZaDVec2PfOAcJG2VhpdRTsnXoz1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAuJsYRMPCsCIgO/rLYQcZkKGT50MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk
MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvODY3MWI4YzctMjljYi0z
ODlmLTgwOTctNDFiMDZjNGM0NDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4
NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw
OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2
N2JmMDhmNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX0QMr+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADZfBm0lnZK6azhVF8khuQRV65OsmsOfb3bWWuXKmqNwK3jDv2zz
EeYN0YF/bSf66/3p8cRGEZhFmQoYGDjx/fkVinhJq1ouaFCW/6ej9MmY9ug9XqHW
PoNUZi50raNZJY+lINit0EqzQmEnmj0Fza68yTOiov3TzQNCwVaHWKyRzL0Lln1k
GXsZE+IKAqfd64Nu4/wuexrKUZvlLW63Wska9Vq8w5r5gSqe6LGQMdn0PSN6Ugfx
MVfeiGkkdPI68BECBZ+PfTk4OFuMrcBzq46MDnoktWQqrFQY+YPY212lUUZRq6Sc
mGgvouZMmf4xfi31Tf4udp9526kXgj/KSiE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:06:11 2026 by rpki-client