Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ea195aaf-0f4f-35a6-ac60-6c5f3d5ffc32.roa
File:                     ea195aaf-0f4f-35a6-ac60-6c5f3d5ffc32.roa (raw, json)
Hash identifier:          JlEsj5N8Wszc9YaxT9qZJ5AEREQJaMJMZTAxLrJppMM=
Subject key identifier:   AA:1B:9F:94:6C:6B:07:8B:D7:A8:46:DD:BA:8B:3D:15:63:C9:AA:3A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E44831DEC6736CDE0E393C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ea195aaf-0f4f-35a6-ac60-6c5f3d5ffc32.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:83:1d:ec:67:36:cd:e0:e3:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=d4fecf8d-2b8f-4835-9225-a42589f17f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fc:a8:a7:52:cd:8c:0a:f2:9b:90:e1:53:ec:
                    f3:88:ac:17:8c:2f:ed:54:71:3a:a2:4b:8d:ff:18:
                    c9:81:75:f5:a6:7e:da:ea:3c:b8:1d:2e:ba:e0:21:
                    93:9e:0e:6e:aa:91:7b:29:59:72:d7:ea:86:87:3a:
                    a7:57:99:2b:f6:57:3f:37:c7:92:9c:ef:8b:a6:07:
                    a5:d2:9f:7b:6e:35:28:13:05:ff:7e:78:a5:52:4e:
                    f7:fd:4b:8f:0b:7b:21:0e:a0:5a:c5:1f:9e:27:c5:
                    64:b6:52:8b:62:6b:a9:2b:b3:c1:04:bb:e4:2b:71:
                    2d:7c:bb:01:77:b3:35:51:9a:f6:75:9d:b1:ca:6e:
                    74:06:c0:47:61:cc:49:ef:cf:e1:e1:4b:49:49:02:
                    56:c7:62:b4:b4:7b:fa:2c:4e:53:e7:1d:f3:e6:2f:
                    3d:61:1e:04:41:5e:d3:55:a6:d3:71:6b:26:37:75:
                    e6:4d:aa:55:e5:45:40:e0:d4:42:ca:4c:62:ca:23:
                    2d:45:26:1d:aa:50:75:f3:34:c6:f5:b4:7b:a7:d9:
                    3f:ef:0c:55:55:1c:f2:aa:34:ce:d9:d6:b2:ef:9a:
                    65:e7:32:58:ae:dc:8a:96:37:8e:2d:0b:2e:46:90:
                    25:98:f6:d1:0f:32:03:b6:d7:90:28:86:da:15:9d:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1B:9F:94:6C:6B:07:8B:D7:A8:46:DD:BA:8B:3D:15:63:C9:AA:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ea195aaf-0f4f-35a6-ac60-6c5f3d5ffc32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ca:7a:fe:a8:9e:6b:3b:d6:c2:83:25:07:82:2d:01:f5:7b:
         01:ba:41:a7:95:47:b3:a4:b4:c6:19:7a:f1:04:f6:ba:39:a4:
         d5:ee:e4:4f:ab:26:19:b3:6e:14:90:45:77:2c:18:e2:1b:95:
         da:74:1b:01:0e:7c:d2:8f:70:fd:3c:47:f6:a8:5d:22:24:d6:
         40:e8:7d:e4:e1:fa:eb:94:7a:db:9c:e1:ec:cc:45:8b:8b:3f:
         a4:33:24:b1:6e:a5:cf:01:d8:89:08:3c:84:b9:fa:aa:e7:ef:
         bb:b7:d7:c0:df:30:1c:ba:4b:63:cd:de:b5:20:ea:7f:fc:cf:
         11:b4:2b:9c:7a:90:4a:0f:54:e7:8e:31:4b:16:34:db:a2:74:
         a8:01:e6:6e:72:32:7a:09:58:cf:d3:1a:bc:7e:d5:49:af:0e:
         0a:1b:76:a6:7b:18:2e:21:cb:a5:3c:9b:d0:39:a3:1e:9a:22:
         90:04:50:89:09:b9:f5:64:43:1f:a3:f9:05:e4:ad:ae:4e:31:
         b9:c8:3c:ec:6c:fd:fd:94:9d:2e:ce:f4:47:18:d1:7b:a7:4f:
         16:2a:10:59:fb:da:0a:07:da:45:02:f8:6c:d2:b7:9f:be:b7:
         2c:40:5e:34:a3:fb:8d:69:b8:7d:c6:bf:dd:bf:d5:36:c8:2f:
         42:56:5d:70
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4eRIMd7Gc2zeDjk8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
ZDRmZWNmOGQtMmI4Zi00ODM1LTkyMjUtYTQyNTg5ZjE3ZjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Pyop1LNjArym5DhU+zziKwXjC/tVHE6okuN
/xjJgXX1pn7a6jy4HS664CGTng5uqpF7KVly1+qGhzqnV5kr9lc/N8eSnO+Lpgel
0p97bjUoEwX/fnilUk73/UuPC3shDqBaxR+eJ8VktlKLYmupK7PBBLvkK3EtfLsB
d7M1UZr2dZ2xym50BsBHYcxJ78/h4UtJSQJWx2K0tHv6LE5T5x3z5i89YR4EQV7T
VabTcWsmN3XmTapV5UVA4NRCykxiyiMtRSYdqlB18zTG9bR7p9k/7wxVVRzyqjTO
2day75pl5zJYrtyKljeOLQsuRpAlmPbRDzIDtteQKIbaFZ25CwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKobn5RsaweL16hG3bqLPRVjyao6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZWExOTVhYWYtMGY0Zi0z
NWE2LWFjNjAtNmM1ZjNkNWZmYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAQAG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHHKev6onms71sKDJQeCLQH1ewG6QaeVR7OktMYZevEE9ro5pNXu
5E+rJhmzbhSQRXcsGOIbldp0GwEOfNKPcP08R/aoXSIk1kDofeTh+uuUetuc4ezM
RYuLP6QzJLFupc8B2IkIPIS5+qrn77u318DfMBy6S2PN3rUg6n/8zxG0K5x6kEoP
VOeOMUsWNNuidKgB5m5yMnoJWM/TGrx+1UmvDgobdqZ7GC4hy6U8m9A5ox6aIpAE
UIkJufVkQx+j+QXkra5OMbnIPOxs/f2UnS7O9EcY0XunTxYqEFn72goH2kUC+GzS
t5++tyxAXjSj+41puH3Gv92/1TbIL0JWXXA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:37:44 2026 by rpki-client