Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa
File:                     3d17c561-ea87-3032-81af-6559c2402369.roa (raw, json)
Hash identifier:          ipKxMFtY2wnQxcgIrQlyPrxj6saITN7kjPfHLkMKj4c=
Subject key identifier:   FC:21:00:2F:AC:2F:FA:F0:BA:86:DB:1C:D3:EC:49:9A:F4:7E:A2:AC
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584D746FBCB5FB8D39244C39D080
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     20454
IP address blocks:        2607:6002:171::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:bc:b5:fb:8d:39:24:4c:39:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=bf8a7934-fd0b-4f87-b5d3-250d97d67ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:15:55:1b:43:e7:e7:b3:03:97:0d:b2:0d:e9:
                    e9:b2:ed:c0:5e:b2:71:c5:99:48:49:f1:2c:62:26:
                    11:19:c1:f7:88:24:35:fe:6a:ec:59:31:4e:47:3a:
                    29:e7:ae:57:5b:53:d6:17:36:c3:43:66:d9:85:09:
                    e1:55:df:58:82:67:fb:9e:af:a7:2f:5d:31:c2:b9:
                    01:e8:0e:65:96:a6:ce:c5:ea:01:12:b4:73:39:e5:
                    87:6a:04:8f:7c:e5:0f:1b:fb:bc:17:9a:d2:0c:b5:
                    36:07:ad:f8:91:8f:59:ab:1f:42:bd:c8:04:5c:f0:
                    de:0b:32:3a:ea:bf:4a:2d:f7:dd:a7:8d:96:6e:0e:
                    73:d9:06:7b:18:a0:16:30:2b:d3:7b:1b:13:3c:71:
                    ea:c1:bb:5f:d3:7d:b2:86:29:17:28:3d:0f:11:9f:
                    24:22:9a:79:ba:70:c9:99:2c:54:ff:47:62:be:40:
                    92:75:fe:c9:59:af:8b:37:6b:c1:4e:0c:22:4c:e0:
                    8f:65:d8:04:76:3a:59:f7:8b:28:56:47:e6:f5:0f:
                    5a:81:06:27:ae:8f:fb:5c:66:af:b4:e3:58:95:ad:
                    b2:dc:6e:35:ab:86:ae:c6:7c:27:d0:7c:d0:43:df:
                    c0:63:d4:b7:e7:aa:3f:54:c6:74:92:8c:79:16:f7:
                    9b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:21:00:2F:AC:2F:FA:F0:BA:86:DB:1C:D3:EC:49:9A:F4:7E:A2:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6002:171::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:70:dd:c7:67:6a:76:5b:9e:1a:b4:1f:b5:65:d7:ef:f3:72:
         c5:36:25:dd:58:e5:7d:e0:96:69:06:b6:ed:50:bc:78:19:7e:
         b6:97:51:32:04:5a:a8:3f:3d:3f:a8:49:8c:41:d8:a2:34:bc:
         18:0f:63:54:a8:99:bf:db:7c:ca:45:90:b4:6c:e7:ac:c0:3d:
         b3:46:04:c6:6e:78:ea:24:22:8b:56:d8:2b:28:1b:40:06:e5:
         2c:7e:46:05:4f:fc:63:7d:b9:ef:89:be:49:32:d1:b2:46:d0:
         61:14:3d:6a:5f:bb:b8:c9:7d:dc:bb:19:15:45:f7:ed:ab:b1:
         fa:92:2f:42:8d:8f:05:e5:e8:fa:4d:61:90:c1:14:71:3e:5c:
         3f:ec:78:bc:bd:6e:0c:c9:26:c2:c9:43:dd:57:84:72:c1:19:
         28:f1:25:9b:d3:82:44:8a:f8:3b:21:dd:fe:10:ee:29:99:c9:
         94:c8:2d:49:fc:f3:0b:d3:9a:c5:5d:82:9e:6f:99:14:bb:b8:
         b4:5c:10:ef:ce:b8:ad:02:5c:e5:05:53:85:f7:91:e2:04:52:
         27:1a:83:58:81:fc:ff:92:66:72:53:10:ad:42:e6:ca:12:3d:
         9f:0d:bb:66:22:06:01:b0:dd:8c:90:28:6b:9e:26:a5:b8:17:
         69:05:3d:1f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10b7y1+405JEw50IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5
M2NmMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
YmY4YTc5MzQtZmQwYi00Zjg3LWI1ZDMtMjUwZDk3ZDY3YWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRVVG0Pn57MDlw2yDenpsu3AXrJxxZlISfEs
YiYRGcH3iCQ1/mrsWTFORzop565XW1PWFzbDQ2bZhQnhVd9Ygmf7nq+nL10xwrkB
6A5llqbOxeoBErRzOeWHagSPfOUPG/u8F5rSDLU2B634kY9Zqx9CvcgEXPDeCzI6
6r9KLffdp42Wbg5z2QZ7GKAWMCvTexsTPHHqwbtf032yhikXKD0PEZ8kIpp5unDJ
mSxU/0divkCSdf7JWa+LN2vBTgwiTOCPZdgEdjpZ94soVkfm9Q9agQYnro/7XGav
tONYla2y3G41q4auxnwn0HzQQ9/AY9S356o/VMZ0kox5FvebSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPwhAC+sL/rwuobbHNPsSZr0fqKsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl
MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvM2QxN2M1NjEtZWE4Ny0z
MDMyLTgxYWYtNjU1OWMyNDAyMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy
N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz
OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux
Mzg3MzkzY2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdgAgFx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADhw3cdnanZbnhq0H7Vl1+/zcsU2Jd1Y5X3glmkGtu1QvHgZfraX
UTIEWqg/PT+oSYxB2KI0vBgPY1Somb/bfMpFkLRs56zAPbNGBMZueOokIotW2Cso
G0AG5Sx+RgVP/GN9ue+Jvkky0bJG0GEUPWpfu7jJfdy7GRVF9+2rsfqSL0KNjwXl
6PpNYZDBFHE+XD/seLy9bgzJJsLJQ91XhHLBGSjxJZvTgkSK+Dsh3f4Q7imZyZTI
LUn88wvTmsVdgp5vmRS7uLRcEO/OuK0CXOUFU4X3keIEUicag1iB/P+SZnJTEK1C
5soSPZ8Nu2YiBgGw3YyQKGueJqW4F2kFPR8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:50 2026 by rpki-client