Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10a1e42e-ee00-3953-b639-cbb676187777.roa
File:                     10a1e42e-ee00-3953-b639-cbb676187777.roa (raw, json)
Hash identifier:          o/bnZhkKlXx9xs4jM6Hlvm2FNpXSzmzusBNx3KZl0b4=
Subject key identifier:   F1:8B:FF:AC:99:D4:1E:E6:61:F8:79:5B:1A:0C:89:39:B4:E8:C3:53
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E4484D9EBD4A5372A974000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10a1e42e-ee00-3953-b639-cbb676187777.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:809d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:84:d9:eb:d4:a5:37:2a:97:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=74c7756d-7f09-47ff-a9d0-10db0346b4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:43:a9:8d:a2:4a:4f:31:c3:e6:89:d2:f0:50:
                    2c:6f:d4:da:65:0f:63:6b:18:95:08:53:de:32:89:
                    b9:38:c0:12:49:4f:e0:bb:8b:78:a5:0e:54:ff:d0:
                    00:78:3a:aa:ad:47:85:98:67:20:14:de:ef:2e:cc:
                    fd:cd:be:27:d9:75:9b:af:9d:5c:3c:dc:87:6e:16:
                    a3:44:c0:b9:38:1e:83:ac:e8:b3:0c:f3:fd:29:29:
                    39:d9:80:82:50:f7:bc:6d:f1:49:d9:b2:67:5b:0a:
                    1f:50:69:83:a6:1f:ff:82:f3:db:3e:ff:30:bd:ef:
                    fd:7a:bb:76:81:fa:68:ef:36:15:ca:64:8f:6e:3d:
                    2c:85:e5:7d:84:a8:a0:a4:5a:0d:2f:0f:8e:d9:31:
                    3a:50:6b:23:b0:b8:d5:65:b7:c9:18:23:ac:0b:e4:
                    7d:e7:63:19:c1:5e:da:1b:1f:8b:20:7e:91:93:fa:
                    2f:4c:d0:c2:9c:47:7a:b6:b8:8d:da:60:36:e5:d7:
                    31:b5:ef:0a:17:21:44:08:f6:03:9f:76:10:c5:1d:
                    c1:e0:21:cb:ad:11:da:6a:46:9b:0a:e1:a2:76:b2:
                    c2:93:b6:b7:c2:af:ff:54:47:85:9f:e7:12:73:f4:
                    b6:81:89:bf:90:79:b2:78:3b:de:27:a2:91:9c:a4:
                    f7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8B:FF:AC:99:D4:1E:E6:61:F8:79:5B:1A:0C:89:39:B4:E8:C3:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10a1e42e-ee00-3953-b639-cbb676187777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:809d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:15:d2:12:8a:67:a1:a4:08:ca:34:07:6f:8e:80:0b:05:6d:
         25:4b:86:72:29:b6:4c:4c:04:a3:8e:67:62:5f:fe:c0:0e:7a:
         b1:3c:48:93:a4:a1:c1:c7:b7:ad:16:04:70:cc:e5:a0:3e:87:
         9b:ba:53:4f:49:06:17:c8:fd:98:b5:da:e8:36:4c:47:32:ac:
         e2:da:5c:f1:a6:4f:d3:20:aa:f6:4b:45:96:d3:54:ad:60:d9:
         12:0e:30:72:57:85:62:3c:91:33:c2:24:41:10:ab:4a:19:db:
         c0:62:ea:f9:28:d7:2c:5a:1b:a8:11:71:a9:4b:a8:7b:d4:85:
         90:49:69:17:69:85:30:30:e5:41:b6:44:a9:b0:0c:b7:04:bc:
         7b:2d:49:68:0e:9b:22:4f:e9:10:28:ea:31:07:19:65:06:1a:
         2a:42:8a:50:42:89:71:7f:dc:30:10:84:3c:b2:5b:1a:13:82:
         9c:34:55:47:f4:77:e6:6a:a7:b7:29:b3:6b:db:19:70:a1:0c:
         81:75:8c:5d:97:b9:c0:c9:55:00:9a:7f:02:b4:02:59:86:73:
         c3:29:d2:53:e5:5e:3c:10:f9:3e:1c:bc:8a:14:b2:e8:28:e5:
         39:fe:07:a7:24:86:88:33:cf:ca:f4:76:6e:f9:77:d3:c5:44:
         3a:ea:2e:7b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4eRITZ69SlNyqXQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
NzRjNzc1NmQtN2YwOS00N2ZmLWE5ZDAtMTBkYjAzNDZiNGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkOpjaJKTzHD5onS8FAsb9TaZQ9jaxiVCFPe
Mom5OMASSU/gu4t4pQ5U/9AAeDqqrUeFmGcgFN7vLsz9zb4n2XWbr51cPNyHbhaj
RMC5OB6DrOizDPP9KSk52YCCUPe8bfFJ2bJnWwofUGmDph//gvPbPv8wve/9ert2
gfpo7zYVymSPbj0sheV9hKigpFoNLw+O2TE6UGsjsLjVZbfJGCOsC+R952MZwV7a
Gx+LIH6Rk/ovTNDCnEd6triN2mA25dcxte8KFyFECPYDn3YQxR3B4CHLrRHaakab
CuGidrLCk7a3wq//VEeFn+cSc/S2gYm/kHmyeDveJ6KRnKT3dwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPGL/6yZ1B7mYfh5WxoMiTm06MNTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMTBhMWU0MmUtZWUwMC0z
OTUzLWI2MzktY2JiNjc2MTg3Nzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYCd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABMV0hKKZ6GkCMo0B2+OgAsFbSVLhnIptkxMBKOOZ2Jf/sAOerE8
SJOkocHHt60WBHDM5aA+h5u6U09JBhfI/Zi12ug2TEcyrOLaXPGmT9MgqvZLRZbT
VK1g2RIOMHJXhWI8kTPCJEEQq0oZ28Bi6vko1yxaG6gRcalLqHvUhZBJaRdphTAw
5UG2RKmwDLcEvHstSWgOmyJP6RAo6jEHGWUGGipCilBCiXF/3DAQhDyyWxoTgpw0
VUf0d+Zqp7cps2vbGXChDIF1jF2XucDJVQCafwK0AlmGc8Mp0lPlXjwQ+T4cvIoU
sugo5Tn+B6ckhogzz8r0dm75d9PFRDrqLns=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:34:20 2026 by rpki-client