Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa
File:                     3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa (raw, json)
Hash identifier:          ZCo435nZK8Y9vO3epxPcAdxcP2wWJxS/3zfXk5ac+Pc=
Subject key identifier:   AF:1D:9E:D7:66:7F:91:9C:C6:80:75:AF:A0:62:7C:C4:4E:BF:C5:82
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F4328584D746FC1B66A6FF89E6502E280
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     0
IP address blocks:        2607:fe80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:c1:b6:6a:6f:f8:9e:65:02:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=7748d683-70cd-4b5d-98d2-8bfe9e4757a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f3:0f:36:c5:84:ed:f5:82:a3:2a:ad:19:24:
                    89:8e:59:17:9a:ef:ff:7b:04:2c:65:13:44:c3:e2:
                    51:85:8d:bd:9d:d1:80:72:35:a6:2c:f0:c0:ab:7f:
                    c4:4d:2e:f5:78:74:86:48:be:c7:34:6b:87:a3:82:
                    49:66:73:21:e9:4e:b7:bd:8d:e2:80:e5:4a:22:01:
                    40:fc:52:c1:ef:14:8b:3f:5a:0d:5c:a0:f0:c0:ab:
                    cf:c8:77:49:ff:44:9d:39:f9:de:32:86:b4:43:31:
                    fe:cb:f3:99:bf:91:29:79:68:58:16:85:46:cf:bd:
                    67:f9:e7:ad:5f:5b:f0:2d:ed:65:42:a2:3b:0a:62:
                    e2:ec:11:ce:b5:e2:12:d4:ad:4d:98:66:57:6c:c6:
                    f1:57:b3:a1:84:3c:6d:f2:9c:d3:20:f0:5d:28:e2:
                    1c:d5:8a:fd:32:69:ea:31:c9:9a:52:bd:53:06:37:
                    8d:0f:2a:de:57:ff:28:e9:48:10:4f:1a:3e:bd:25:
                    7b:bb:f6:9a:eb:76:e0:85:92:c0:26:8d:d0:66:07:
                    99:3f:95:84:b1:c0:b1:0d:63:ef:5a:60:98:24:51:
                    cd:2d:e4:89:df:86:08:05:9b:90:9f:0d:5b:18:fe:
                    df:d0:70:cf:d1:a4:2a:02:73:cb:6a:07:91:b6:e0:
                    ab:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1D:9E:D7:66:7F:91:9C:C6:80:75:AF:A0:62:7C:C4:4E:BF:C5:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:a2:31:73:de:7e:6f:9e:ca:b2:7d:78:61:98:9c:0a:a2:2c:
         40:b3:2f:b8:3e:82:35:d0:0d:99:3a:6d:f0:ed:ea:4c:26:df:
         e0:bb:0e:96:f6:e1:68:ed:bc:d7:5d:e0:b7:b7:66:db:3a:aa:
         ad:76:2e:91:cf:2e:f3:04:70:04:d3:a2:aa:24:0c:3f:00:64:
         0e:92:08:c6:8e:b7:65:9a:d5:53:10:6f:a9:ec:1b:63:1c:a7:
         08:31:da:ed:2e:61:d8:16:00:1e:35:20:42:d5:b9:83:e7:76:
         b7:9f:b7:7e:3b:18:1f:cc:e5:ac:f5:9c:e0:bc:95:6f:03:a6:
         9f:d8:13:39:7a:13:53:8b:e4:f9:dd:89:5a:f3:6d:be:3f:af:
         95:a6:4c:12:88:62:b7:cb:d4:5e:87:5b:98:ce:f8:36:8d:da:
         a2:4b:53:cc:4e:ed:98:63:29:20:13:c5:00:5a:2c:0f:50:b7:
         81:50:39:7f:c9:58:4f:cd:56:82:7b:61:a8:5e:70:c0:f1:42:
         0e:f0:87:83:77:db:2e:20:b5:49:67:c6:ae:a1:d7:a5:31:42:
         3e:04:39:be:b1:c7:fb:c5:02:34:6d:5b:73:22:97:0e:fe:09:
         3a:9b:fb:4f:68:fd:54:f7:b8:c8:68:a1:a7:2f:d9:31:8c:2d:
         e5:93:1b:85
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE10b8G2am/4nmUC4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi
Mzk4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
Nzc0OGQ2ODMtNzBjZC00YjVkLTk4ZDItOGJmZTllNDc1N2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovMPNsWE7fWCoyqtGSSJjlkXmu//ewQsZRNE
w+JRhY29ndGAcjWmLPDAq3/ETS71eHSGSL7HNGuHo4JJZnMh6U63vY3igOVKIgFA
/FLB7xSLP1oNXKDwwKvPyHdJ/0SdOfneMoa0QzH+y/OZv5EpeWhYFoVGz71n+eet
X1vwLe1lQqI7CmLi7BHOteIS1K1NmGZXbMbxV7OhhDxt8pzTIPBdKOIc1Yr9Mmnq
McmaUr1TBjeNDyreV/8o6UgQTxo+vSV7u/aa63bghZLAJo3QZgeZP5WEscCxDWPv
WmCYJFHNLeSJ34YIBZuQnw1bGP7f0HDP0aQqAnPLageRtuCraQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFK8dntdmf5GcxoB1r6BifMROv8WCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz
MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvMzI5OGNjYjctM2U3Yi0z
NGE5LTk1OTgtMzNmZGJiY2Q2NTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl
MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz
YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw
NTdkM2IzOTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf+gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCUojFz3n5vnsqyfXhhmJwKoixAsy+4PoI10A2ZOm3w7epMJt/guw6W
9uFo7bzXXeC3t2bbOqqtdi6Rzy7zBHAE06KqJAw/AGQOkgjGjrdlmtVTEG+p7Btj
HKcIMdrtLmHYFgAeNSBC1bmD53a3n7d+OxgfzOWs9ZzgvJVvA6af2BM5ehNTi+T5
3Yla822+P6+VpkwSiGK3y9Reh1uYzvg2jdqiS1PMTu2YYykgE8UAWiwPULeBUDl/
yVhPzVaCe2GoXnDA8UIO8IeDd9suILVJZ8auodelMUI+BDm+scf7xQI0bVtzIpcO
/gk6m/tPaP1U97jIaKGnL9kxjC3lkxuF
-----END CERTIFICATE-----
Generated at Thu Apr 16 22:37:34 2026 by rpki-client