Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/7d713cfe-fa3b-3e70-add3-0b83b7ed1612.roa
File:                     7d713cfe-fa3b-3e70-add3-0b83b7ed1612.roa (raw, json)
Hash identifier:          7xYac0e1X5OlnnfEUZQIXpeb6BxO7x4f+AHweMJs6Xo=
Subject key identifier:   68:2B:AE:9A:98:21:56:BA:18:1A:B8:52:26:2C:13:CB:A9:AE:04:54
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F4328584D4D5A687632A5FD7183C1D0A0
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/7d713cfe-fa3b-3e70-add3-0b83b7ed1612.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     46632
IP address blocks:        2606:6b00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:68:76:32:a5:fd:71:83:c1:d0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=3b5103ab-6186-41f9-8f9d-df2aa259d10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a1:02:71:ac:a8:cc:c4:e2:76:c9:ca:2a:ba:
                    1f:e9:ab:55:d6:2b:92:21:8c:38:58:7c:64:1c:1c:
                    44:09:81:56:21:e2:d9:5f:44:18:9d:5a:9c:e6:d5:
                    91:52:28:c6:4b:18:f7:8d:25:5a:d6:ed:89:b2:ad:
                    cc:7c:ac:df:f8:6b:a0:74:c0:6d:d2:06:57:46:b7:
                    e1:4e:87:d6:cc:85:32:7f:f3:ad:95:af:2a:28:96:
                    9e:9f:8b:ee:01:ca:6f:ad:4d:5b:10:f1:18:74:0d:
                    63:38:10:c8:4e:8d:1e:f3:99:d9:e8:ed:5c:7b:2c:
                    e4:8c:3e:3a:6f:d1:95:11:3c:4c:88:8f:08:7b:fe:
                    72:26:06:6c:b4:65:9b:54:2e:97:5c:98:aa:e8:73:
                    37:f7:6c:c6:96:45:b1:ec:a6:44:ca:50:ca:c8:72:
                    1d:0a:aa:f7:16:0d:ee:23:7d:69:ad:2b:73:66:8d:
                    fe:3c:89:e3:37:5c:1c:8c:88:36:1e:3b:f5:e0:47:
                    cb:56:a5:59:68:7a:38:73:97:52:0d:95:ab:23:cd:
                    ed:17:14:ea:23:3a:78:24:b7:b0:ec:75:2a:fb:ea:
                    22:83:8a:ac:08:2b:16:27:5b:ae:95:e5:36:83:32:
                    ba:fa:cc:44:2b:0c:21:e5:03:67:cb:32:46:21:ed:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2B:AE:9A:98:21:56:BA:18:1A:B8:52:26:2C:13:CB:A9:AE:04:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/7d713cfe-fa3b-3e70-add3-0b83b7ed1612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ad:03:c7:86:16:a2:f7:35:48:a2:72:c8:00:32:b0:0b:52:
         c7:48:fa:d8:a4:57:93:93:c6:be:10:68:2d:9d:14:e7:c3:a4:
         e9:5c:a2:95:09:e8:30:59:05:44:66:d2:dc:17:ce:81:68:03:
         ae:af:59:d1:42:a3:54:ed:60:5e:43:5b:dc:a1:d6:d3:7b:55:
         36:77:c4:d3:fa:27:b5:e5:e9:88:63:c6:8b:e7:58:db:f9:38:
         b3:07:d1:36:0f:f2:ae:de:4f:45:11:bd:b0:4f:c1:89:82:8a:
         44:83:c5:72:a9:80:85:08:36:e5:87:5d:30:fd:b2:3e:a3:0a:
         fe:b5:fd:56:1c:76:1c:57:49:2b:93:22:7b:e1:a7:32:31:47:
         bc:39:1e:36:d8:9d:43:65:0f:b4:99:f7:67:f0:87:76:a4:28:
         97:de:75:ae:23:22:47:e7:1f:20:f7:88:70:cb:1d:4d:c6:73:
         6c:bd:31:77:7a:a5:f3:3c:40:fa:61:db:58:d6:39:5f:d7:48:
         10:b7:da:bb:05:3e:69:cc:a0:97:45:4a:5f:89:9a:4b:3f:15:
         63:ef:2e:6e:b8:3b:10:9f:89:40:5a:c2:25:32:6c:8d:8b:a5:
         6b:8f:dc:2b:c4:7c:f3:c7:cd:f3:cf:09:ba:4c:bd:89:66:35:
         ce:df:2e:e4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1NWmh2MqX9cYPB0KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ5ZWFhMDctOTNiZC00ZjJiLWI5YzYtYWMxZDQxMDZj
NWIwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
M2I1MTAzYWItNjE4Ni00MWY5LThmOWQtZGYyYWEyNTlkMTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6ECcayozMTidsnKKrof6atV1iuSIYw4WHxk
HBxECYFWIeLZX0QYnVqc5tWRUijGSxj3jSVa1u2Jsq3MfKzf+GugdMBt0gZXRrfh
TofWzIUyf/Otla8qKJaen4vuAcpvrU1bEPEYdA1jOBDITo0e85nZ6O1ceyzkjD46
b9GVETxMiI8Ie/5yJgZstGWbVC6XXJiq6HM392zGlkWx7KZEylDKyHIdCqr3Fg3u
I31prStzZo3+PInjN1wcjIg2Hjv14EfLVqVZaHo4c5dSDZWrI83tFxTqIzp4JLew
7HUq++oig4qsCCsWJ1uuleU2gzK6+sxEKwwh5QNnyzJGIe3gEwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGgrrpqYIVa6GBq4UiYsE8uprgRUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDll
YWEwNy05M2JkLTRmMmItYjljNi1hYzFkNDEwNmM1YjAvN2Q3MTNjZmUtZmEzYi0z
ZTcwLWFkZDMtMGI4M2I3ZWQxNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTQ5ZWFhMDctOTNiZC00ZjJiLWI5
YzYtYWMxZDQxMDZjNWIwL2U0OWVhYTA3LTkzYmQtNGYyYi1iOWM2LWFjMWQ0MTA2
YzViMC5jcmwwHwYDVR0jBBgwFoAUDTlc4w0fvbZ5ih1QYOz8YldDgDUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDllYWEwNy05M2JkLTRmMmItYjljNi1hYzFk
NDEwNmM1YjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZrADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAtrQPHhhai9zVIonLIADKwC1LHSPrYpFeTk8a+EGgtnRTnw6TpXKKV
CegwWQVEZtLcF86BaAOur1nRQqNU7WBeQ1vcodbTe1U2d8TT+ie15emIY8aL51jb
+TizB9E2D/Ku3k9FEb2wT8GJgopEg8VyqYCFCDblh10w/bI+owr+tf1WHHYcV0kr
kyJ74acyMUe8OR422J1DZQ+0mfdn8Id2pCiX3nWuIyJH5x8g94hwyx1NxnNsvTF3
eqXzPED6YdtY1jlf10gQt9q7BT5pzKCXRUpfiZpLPxVj7y5uuDsQn4lAWsIlMmyN
i6Vrj9wrxHzzx83zzwm6TL2JZjXO3y7k
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:47 2026 by rpki-client