Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/449c300d-278a-3c44-94f2-b26447054b85.roa
File:                     449c300d-278a-3c44-94f2-b26447054b85.roa (raw, json)
Hash identifier:          cQKa3O7JqXEdBKXmQ3oDlW6Hzk0L8ljImG176tnhURM=
Subject key identifier:   F0:5D:EC:99:B3:E6:04:ED:9F:DC:EE:EF:4A:7A:13:8A:C1:EC:6B:E1
Certificate issuer:       /CN=7ede7b70-d745-425d-975b-bb0eb6368430
Certificate serial:       010D0C9F4328584D60E4FD5961383717A59E4980
Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/449c300d-278a-3c44-94f2-b26447054b85.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     22697
IP address blocks:        2620:135:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:fd:59:61:38:37:17:a5:9e:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=26bf0002-9cb6-4646-978b-942ac2f18404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bf:c3:d1:0a:a0:e1:52:71:cf:3e:d0:61:10:
                    59:13:e2:e6:fe:2e:e2:0a:54:66:9f:b4:b4:25:c1:
                    a9:9f:c9:55:ec:24:47:3c:8d:02:2c:3c:b7:b7:78:
                    2a:98:9a:55:c3:f1:43:00:20:a7:fc:68:fc:aa:06:
                    8a:64:2e:5b:83:f7:e0:5f:56:c4:d8:d5:64:1f:52:
                    f4:48:f3:d3:66:12:38:54:3d:21:d8:94:1c:ef:f4:
                    6e:cd:17:a3:0e:1f:0c:4f:7a:6a:c2:ad:6e:72:03:
                    91:c6:6f:36:b7:9c:1c:02:37:d9:ed:d4:f2:7b:e8:
                    a0:4b:cd:ba:68:03:b4:8f:b5:f3:96:6d:a0:bc:4a:
                    9a:a8:49:b2:88:7c:1f:e3:50:9f:06:da:48:e9:25:
                    c5:14:1a:38:2e:5a:4a:71:3c:84:7d:b1:14:a3:9a:
                    74:c1:e0:b4:f7:ab:1e:2c:e3:f9:69:03:b6:d9:49:
                    c9:fc:2a:0e:72:7f:0d:26:3f:d7:e5:d9:9f:52:eb:
                    71:0b:c9:f4:ff:65:dc:9b:48:36:b6:a1:3a:43:fb:
                    b7:96:97:6e:f2:c3:b4:2a:da:2d:fe:4e:69:d7:63:
                    17:6d:60:c6:fe:93:24:d4:cb:57:f5:dc:75:5d:9b:
                    8e:1a:ba:41:08:f1:46:3e:5e:23:3b:eb:a6:9e:e8:
                    b0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5D:EC:99:B3:E6:04:ED:9F:DC:EE:EF:4A:7A:13:8A:C1:EC:6B:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/449c300d-278a-3c44-94f2-b26447054b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl

            X509v3 Authority Key Identifier:
                keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:59:f8:5a:22:c4:70:36:25:27:20:e4:00:03:ae:03:0e:f7:
         79:88:4b:b9:83:a9:29:be:c7:3e:ce:c2:08:92:66:19:fb:16:
         01:13:71:66:9f:dc:a6:27:ec:ce:1c:74:61:e7:c9:e7:28:85:
         50:1c:6a:63:ce:96:b3:3e:39:a0:8d:5b:09:5b:14:0d:f2:82:
         21:aa:12:25:a7:aa:b7:20:44:d2:d0:5f:62:f4:8b:4f:49:69:
         df:6a:89:e1:66:7d:de:73:17:a6:64:00:11:e0:f9:8e:c2:85:
         cf:7c:46:5d:38:fd:da:41:16:cd:fc:a7:b4:8c:0e:f1:41:94:
         27:e9:a7:6e:09:f3:61:d3:6c:16:38:21:9d:df:4c:65:3d:4f:
         08:6f:b0:79:6c:40:47:db:d1:fe:0a:ad:e1:fc:24:39:ca:61:
         3c:84:4e:ad:63:a3:9f:e2:20:53:e0:34:04:e1:8b:83:ef:1d:
         82:c2:f9:2e:94:6a:f0:a3:2f:e2:22:70:23:19:e9:6e:4b:16:
         4c:be:bc:a7:a2:81:fa:bf:c3:1b:96:bf:5a:fe:fa:29:e2:71:
         22:18:0f:33:ab:2b:ca:68:d4:0d:b7:3c:11:f6:1e:28:3d:a6:
         f6:02:e7:e0:f3:ee:91:5d:4a:d3:32:e8:8d:4e:82:65:69:17:
         75:dc:bf:25
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1g5P1ZYTg3F6WeSYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2VkZTdiNzAtZDc0NS00MjVkLTk3NWItYmIwZWI2MzY4
NDMwMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk
MjZiZjAwMDItOWNiNi00NjQ2LTk3OGItOTQyYWMyZjE4NDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7/D0Qqg4VJxzz7QYRBZE+Lm/i7iClRmn7S0
JcGpn8lV7CRHPI0CLDy3t3gqmJpVw/FDACCn/Gj8qgaKZC5bg/fgX1bE2NVkH1L0
SPPTZhI4VD0h2JQc7/RuzRejDh8MT3pqwq1ucgORxm82t5wcAjfZ7dTye+igS826
aAO0j7Xzlm2gvEqaqEmyiHwf41CfBtpI6SXFFBo4LlpKcTyEfbEUo5p0weC096se
LOP5aQO22UnJ/CoOcn8NJj/X5dmfUutxC8n0/2Xcm0g2tqE6Q/u3lpdu8sO0Ktot
/k5p12MXbWDG/pMk1MtX9dx1XZuOGrpBCPFGPl4jO+umnuiwbQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPBd7Jmz5gTtn9zu70p6E4rB7GvhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRl
N2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBlYjYzNjg0MzAvNDQ5YzMwMGQtMjc4YS0z
YzQ0LTk0ZjItYjI2NDQ3MDU0Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2VkZTdiNzAtZDc0NS00MjVkLTk3
NWItYmIwZWI2MzY4NDMwLzdlZGU3YjcwLWQ3NDUtNDI1ZC05NzViLWJiMGViNjM2
ODQzMC5jcmwwHwYDVR0jBBgwFoAUQm/5Jh3Xg3bHmZYIdEhEiRGXyggwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRlN2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBl
YjYzNjg0MzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABNWAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAB1n4WiLEcDYlJyDkAAOuAw73eYhLuYOpKb7HPs7CCJJmGfsWARNx
Zp/cpifszhx0YefJ5yiFUBxqY86Wsz45oI1bCVsUDfKCIaoSJaeqtyBE0tBfYvSL
T0lp32qJ4WZ93nMXpmQAEeD5jsKFz3xGXTj92kEWzfyntIwO8UGUJ+mnbgnzYdNs
Fjghnd9MZT1PCG+weWxAR9vR/gqt4fwkOcphPIROrWOjn+IgU+A0BOGLg+8dgsL5
LpRq8KMv4iJwIxnpbksWTL68p6KB+r/DG5a/Wv76KeJxIhgPM6srymjUDbc8EfYe
KD2m9gLn4PPukV1K0zLojU6CZWkXddy/JQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:31 2026 by rpki-client