Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/49bb57ad-c203-3730-8b14-98e563f4635e.roa
File:                     49bb57ad-c203-3730-8b14-98e563f4635e.roa (raw, json)
Hash identifier:          xHTsBiHBZ1vsleo7xoq2TGwaou3RMHN6ci8jzU/3KXU=
Subject key identifier:   F9:B8:FC:2F:8F:A8:20:9C:95:7A:69:38:01:65:22:B9:2F:07:4D:71
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584CAFBC845BF0285133DDEE8300
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/49bb57ad-c203-3730-8b14-98e563f4635e.roa
Signing time:             Thu 29 Jan 2026 14:00:40 +0000
ROA not before:           Thu 29 Jan 2026 14:00:40 +0000
ROA not after:            Wed 29 Apr 2026 13:00:40 +0000
asID:                     271
IP address blocks:        2607:f8f0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:af:bc:84:5b:f0:28:51:33:dd:ee:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Jan 29 14:00:40 2026 GMT
            Not After : Apr 29 13:00:40 2026 GMT
        Subject: CN=b42901af-bb20-41fc-834c-6870a55c8ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:fa:65:16:34:5e:9a:b4:cc:12:2f:7f:2d:
                    33:02:2f:83:a0:a2:6a:24:1e:f6:8d:d3:34:60:ce:
                    65:ea:3e:a7:21:46:cb:fb:b6:17:59:f5:fb:46:a2:
                    0a:f3:3a:a0:cb:9f:6e:29:18:82:3b:d2:fa:46:31:
                    bd:53:fc:ed:05:99:0d:48:01:0f:66:90:5b:f5:94:
                    e2:c5:3e:6c:2a:b4:ec:5f:0a:b3:3e:7f:65:e1:53:
                    72:11:45:1f:5c:2c:64:b8:47:9b:54:a7:41:d0:dd:
                    ac:31:23:de:6b:c5:b6:58:ac:de:7f:04:90:90:6f:
                    15:fc:fe:2e:07:cf:80:5b:74:ef:c4:4f:dc:75:63:
                    39:72:7a:5f:be:47:19:93:e7:f4:80:af:e9:19:53:
                    ba:db:82:55:66:d6:fa:f7:47:26:7a:53:4f:ea:a7:
                    4e:54:de:a4:01:c1:d5:57:29:30:58:64:da:77:61:
                    25:e1:c7:b3:e6:33:98:c4:b1:8a:12:cf:19:63:be:
                    9e:10:34:06:32:f2:54:7c:a5:87:9e:62:b9:27:e8:
                    e5:3c:24:58:da:0e:85:74:fc:aa:eb:ea:aa:94:7e:
                    ce:a8:e7:17:f1:c0:f4:80:df:b6:63:d1:42:38:3e:
                    59:4e:4c:2a:2f:9e:76:85:94:6d:8e:06:c1:05:b5:
                    f0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B8:FC:2F:8F:A8:20:9C:95:7A:69:38:01:65:22:B9:2F:07:4D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/49bb57ad-c203-3730-8b14-98e563f4635e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:03:37:7c:d4:6c:b5:31:68:93:2d:b4:51:7d:58:1f:7f:da:
         7d:45:cc:68:0e:77:2b:af:be:a8:9e:28:05:26:f0:3c:c9:2b:
         72:ee:a4:47:9e:30:96:17:9e:69:ca:99:7c:3f:00:ff:cd:79:
         e5:d5:f5:54:8f:c1:b5:4e:d3:6f:56:8b:0e:b4:f3:0d:9f:90:
         1b:c9:a2:d1:19:35:26:55:39:58:88:ba:d2:32:6e:b6:91:f2:
         e3:a8:79:09:59:26:fe:8c:03:86:5f:bc:83:81:81:78:b9:59:
         78:ba:17:0c:7c:28:66:58:7a:38:22:b0:77:e7:1b:4a:1a:f8:
         ea:77:3f:b7:ec:dc:c8:cd:ee:b8:73:d4:05:cd:76:a5:e3:4e:
         d7:f8:69:23:07:15:2f:3b:a2:ff:99:01:d6:76:d1:23:5f:39:
         a5:21:ff:05:6d:af:92:67:62:06:af:87:9f:bd:9d:fa:23:8c:
         cb:92:c7:7c:23:00:38:7b:fd:17:42:88:75:94:06:65:6b:f5:
         20:74:f7:07:18:d7:14:50:46:91:d5:d4:65:31:31:ee:3c:19:
         2e:91:e4:7c:b2:e6:db:e4:87:0e:22:3b:d6:28:e7:4b:d9:3a:
         df:17:85:43:f3:67:9c:99:fb:99:c6:69:83:63:19:51:f0:e4:
         46:36:df:3e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyvvIRb8ChRM93ugwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux
OGNmMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk
YjQyOTAxYWYtYmIyMC00MWZjLTgzNGMtNjg3MGE1NWM4ZWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEz6ZRY0Xpq0zBIvfy0zAi+DoKJqJB72jdM0
YM5l6j6nIUbL+7YXWfX7RqIK8zqgy59uKRiCO9L6RjG9U/ztBZkNSAEPZpBb9ZTi
xT5sKrTsXwqzPn9l4VNyEUUfXCxkuEebVKdB0N2sMSPea8W2WKzefwSQkG8V/P4u
B8+AW3TvxE/cdWM5cnpfvkcZk+f0gK/pGVO624JVZtb690cmelNP6qdOVN6kAcHV
VykwWGTad2El4cez5jOYxLGKEs8ZY76eEDQGMvJUfKWHnmK5J+jlPCRY2g6FdPyq
6+qqlH7OqOcX8cD0gN+2Y9FCOD5ZTkwqL552hZRtjgbBBbXwJwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPm4/C+PqCCclXppOAFlIrkvB01xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi
NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvNDliYjU3YWQtYzIwMy0z
NzMwLThiMTQtOThlNTYzZjQ2MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5
MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl
MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli
NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF4DN3zUbLUxaJMttFF9WB9/2n1FzGgOdyuvvqieKAUm8DzJK3Lu
pEeeMJYXnmnKmXw/AP/NeeXV9VSPwbVO029Wiw608w2fkBvJotEZNSZVOViIutIy
braR8uOoeQlZJv6MA4ZfvIOBgXi5WXi6Fwx8KGZYejgisHfnG0oa+Op3P7fs3MjN
7rhz1AXNdqXjTtf4aSMHFS87ov+ZAdZ20SNfOaUh/wVtr5JnYgavh5+9nfojjMuS
x3wjADh7/RdCiHWUBmVr9SB09wcY1xRQRpHV1GUxMe48GS6R5Hyy5tvkhw4iO9Yo
50vZOt8XhUPzZ5yZ+5nGaYNjGVHw5EY23z4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:26 2026 by rpki-client