Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa
File:                     3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa (raw, json)
Hash identifier:          x2GPcSakVBNSGBXb24kTBs5Y8J428/Mgk7iNS+Mr2rc=
Subject key identifier:   89:4B:7E:47:67:E3:0D:03:73:69:F2:B9:48:26:88:F5:D3:DE:4A:54
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584D703FD1DBDA113BEBD6CE44C0
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     12189
IP address blocks:        2607:6004:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d1:db:da:11:3b:eb:d6:ce:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=440d5033-20f8-40ac-9078-d56f68d830e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:51:97:4d:54:8f:c3:4b:e8:a4:78:5f:dd:
                    a7:fc:dc:00:fa:51:64:a1:d2:f9:7a:da:d4:1f:37:
                    b4:d9:a9:06:06:54:ab:29:eb:44:88:c7:9d:24:e2:
                    52:00:dd:03:f1:9e:12:45:c8:e9:02:aa:fb:9e:bd:
                    7a:5f:e9:3b:88:de:9e:41:da:0e:fb:6f:61:19:e4:
                    60:e5:f6:0e:16:e7:a9:1c:a2:a3:dd:3d:d7:01:5a:
                    a5:8c:73:26:ab:75:d7:30:2c:5c:28:76:6a:81:a6:
                    fb:3d:2d:2d:2b:ef:7b:eb:f0:fb:21:ab:17:22:97:
                    ef:cd:53:b1:5d:fc:eb:90:2f:e5:f5:f7:b3:71:e7:
                    57:15:da:85:ec:49:ad:67:49:22:e6:1f:fd:af:b5:
                    a9:b9:2f:7a:57:b3:3d:16:c8:b8:d6:4b:7e:64:0b:
                    79:30:c9:15:53:74:10:b7:83:2a:5a:ba:49:0c:6e:
                    3f:45:7c:d5:0f:18:36:41:50:2a:23:e3:90:13:66:
                    05:84:7f:e0:72:7b:96:72:44:67:a2:ea:c8:4c:7d:
                    19:aa:1b:61:02:3f:f4:8b:76:ba:40:55:c0:b2:a0:
                    e8:33:29:14:f1:36:8f:e1:42:04:5f:ca:ed:e8:7c:
                    68:7e:02:7d:bf:23:82:d9:70:20:a3:4d:96:7e:b0:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4B:7E:47:67:E3:0D:03:73:69:F2:B9:48:26:88:F5:D3:DE:4A:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6004:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:79:ad:43:7f:8d:f6:ab:f9:c3:ac:d4:a0:e0:ea:1e:3a:e2:
         d7:e6:cd:3a:c2:c2:92:80:8c:20:31:46:1d:f1:8e:9a:fb:91:
         4a:80:9e:73:65:d5:db:36:e4:b8:89:95:4a:a8:a9:62:56:6e:
         40:9c:b9:84:be:85:6d:11:83:33:7e:f6:ee:a1:0d:75:17:07:
         f7:d5:a7:74:04:89:b0:c6:fb:90:9e:da:9f:fd:bf:50:2c:af:
         35:91:b2:f2:2c:db:0c:11:5d:17:f4:6d:02:c1:df:d0:7d:16:
         e2:9b:7a:b5:9a:25:99:ad:a2:93:44:93:57:d1:a1:fe:b2:2d:
         46:34:44:4c:b1:a7:c7:70:e5:28:9a:d7:a9:02:a4:20:de:ad:
         2c:14:63:5c:5d:69:82:68:49:8d:6b:7c:c3:c0:79:f6:21:fb:
         09:4e:06:77:1d:db:6f:5f:18:f7:bf:07:89:bd:f8:80:34:ba:
         e4:ff:56:8b:2d:5a:3c:25:2c:8b:4a:8c:fd:e8:59:f9:d6:1e:
         37:1c:87:3c:f4:c6:03:df:43:65:21:94:e8:2f:51:ae:18:2f:
         92:2b:5e:f0:c3:68:8c:10:84:17:d8:f7:e1:b0:13:e3:49:05:
         84:f6:9a:ed:44:c5:dc:ce:66:e7:3c:b3:42:19:83:fa:64:d6:
         8e:db:e8:c4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1wP9Hb2hE769bORMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5
M2NmMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
NDQwZDUwMzMtMjBmOC00MGFjLTkwNzgtZDU2ZjY4ZDgzMGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu1Rl01Uj8NL6KR4X92n/NwA+lFkodL5etrU
Hze02akGBlSrKetEiMedJOJSAN0D8Z4SRcjpAqr7nr16X+k7iN6eQdoO+29hGeRg
5fYOFuepHKKj3T3XAVqljHMmq3XXMCxcKHZqgab7PS0tK+976/D7IasXIpfvzVOx
XfzrkC/l9fezcedXFdqF7EmtZ0ki5h/9r7WpuS96V7M9Fsi41kt+ZAt5MMkVU3QQ
t4MqWrpJDG4/RXzVDxg2QVAqI+OQE2YFhH/gcnuWckRnourITH0ZqhthAj/0i3a6
QFXAsqDoMykU8TaP4UIEX8rt6HxofgJ9vyOC2XAgo02WfrCk3wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIlLfkdn4w0Dc2nyuUgmiPXT3kpUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl
MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvM2Y1N2ZjYTktMDZkZC0z
NzI4LTlmMzctZDk3YjZhMzBmN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy
N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz
OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux
Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgBAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEADXmtQ3+N9qv5w6zUoODqHjri1+bNOsLCkoCMIDFGHfGOmvuRSoCe
c2XV2zbkuImVSqipYlZuQJy5hL6FbRGDM3727qENdRcH99WndASJsMb7kJ7an/2/
UCyvNZGy8izbDBFdF/RtAsHf0H0W4pt6tZolma2ik0STV9Gh/rItRjRETLGnx3Dl
KJrXqQKkIN6tLBRjXF1pgmhJjWt8w8B59iH7CU4Gdx3bb18Y978Hib34gDS65P9W
iy1aPCUsi0qM/ehZ+dYeNxyHPPTGA99DZSGU6C9Rrhgvkite8MNojBCEF9j34bAT
40kFhPaa7UTF3M5m5zyzQhmD+mTWjtvoxA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:38:26 2026 by rpki-client