Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/985c170d-dbb4-389f-8f2f-9ee25de080e6.roa
File:                     985c170d-dbb4-389f-8f2f-9ee25de080e6.roa (raw, json)
Hash identifier:          wR/7o8VSFlWIcUFMvLPtLK7Dk9k8LFkXFhTQs+Rxy0U=
Subject key identifier:   75:27:F7:88:CD:61:23:F3:D9:26:10:67:AF:D0:B6:6C:B8:FB:37:CB
Certificate issuer:       /CN=76b8b138-986a-4190-a7a3-3625b5f70769
Certificate serial:       010D0C9F4328584D703FF485877E2B39E6C8E800
Authority key identifier: 39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/985c170d-dbb4-389f-8f2f-9ee25de080e6.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     21981
IP address blocks:        2604:5c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:f4:85:87:7e:2b:39:e6:c8:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b8b138-986a-4190-a7a3-3625b5f70769
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=f02ae2cc-1dcf-4785-88c0-a00d4b03552b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:f0:b7:fe:8c:d7:8d:35:7c:cb:23:bb:34:
                    2a:61:6a:4c:fe:43:01:0c:f3:d2:82:26:78:73:2b:
                    68:4c:0d:74:67:f1:6d:e3:b8:c7:41:10:62:af:22:
                    90:f9:f5:1a:33:d4:8e:9b:30:2a:07:44:cd:53:93:
                    dc:41:dd:5c:6e:b9:13:36:25:a0:70:42:c3:76:28:
                    66:01:cc:8f:d4:de:62:0e:35:6b:d7:01:ce:a2:3c:
                    92:9b:e6:04:db:96:d6:e8:e6:c0:35:9b:cb:68:6c:
                    3c:e7:43:b8:f4:93:ac:96:a5:4e:fd:90:98:ea:d2:
                    c6:83:5a:78:48:6f:69:24:0a:31:bc:f3:a4:a0:ed:
                    7d:e3:24:8b:7d:86:3c:18:f7:fe:68:2d:dc:90:06:
                    e4:3c:f6:e5:89:d5:2a:86:0e:82:61:8d:5c:54:00:
                    cf:37:91:c4:ba:e2:e3:96:e1:49:37:3c:75:f6:82:
                    0a:b5:df:61:29:81:e2:b4:80:5e:a9:64:46:13:67:
                    58:a0:f9:2a:a4:d4:1c:5c:b8:a6:22:ba:a9:80:79:
                    15:dc:d3:ca:a7:aa:ed:b0:a7:97:c0:de:48:18:9e:
                    8d:02:a0:62:8a:70:e7:a0:13:b0:de:20:c7:eb:f9:
                    21:ac:e0:81:78:ba:26:6a:2c:28:a3:1b:ca:07:55:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:27:F7:88:CD:61:23:F3:D9:26:10:67:AF:D0:B6:6C:B8:FB:37:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/985c170d-dbb4-389f-8f2f-9ee25de080e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl

            X509v3 Authority Key Identifier:
                keyid:39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:22:a7:70:21:e5:99:c1:d3:81:bc:f2:40:9b:53:e9:0f:bf:
         50:dc:ba:9e:62:f6:aa:8b:86:ad:c8:c3:47:cc:18:a4:b9:45:
         d2:4b:bf:49:10:37:21:f6:07:c0:07:93:d2:65:46:9f:5a:05:
         84:99:49:94:5c:26:21:37:56:0d:b7:29:a5:89:5c:59:c1:dc:
         ff:43:c1:3d:13:64:d1:b5:79:1e:ae:0f:25:f1:b8:68:08:ab:
         3f:25:69:8c:f8:a0:2c:f2:35:af:41:96:85:d8:72:4b:36:d9:
         3d:53:a7:3c:54:e1:ab:2e:44:6c:67:19:3d:d1:e8:b2:aa:d9:
         e3:cc:45:d4:e8:44:8a:5f:8f:84:c5:c5:f3:ca:15:09:e2:14:
         34:75:5e:b0:f1:76:5a:d4:4c:5b:c1:b6:6d:c6:e4:9f:09:37:
         8c:21:b1:07:55:65:3b:b0:bf:03:11:44:dc:1f:50:55:c3:5e:
         68:6a:b9:56:4b:ae:4a:df:70:d8:ac:80:42:1b:42:81:15:a5:
         98:f7:83:6c:d2:a8:f2:e6:7e:5f:67:e5:e4:35:bf:bf:b7:0e:
         c3:89:86:af:ae:6f:6a:2b:da:6e:d4:48:6e:ac:d7:89:24:e0:
         29:7a:ca:14:a1:02:53:ce:32:47:b1:9f:66:6d:c1:b8:24:92:
         ee:50:c9:15
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1wP/SFh34rOebI6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZiOGIxMzgtOTg2YS00MTkwLWE3YTMtMzYyNWI1Zjcw
NzY5MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
ZjAyYWUyY2MtMWRjZi00Nzg1LTg4YzAtYTAwZDRiMDM1NTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0bwt/6M1401fMsjuzQqYWpM/kMBDPPSgiZ4
cytoTA10Z/Ft47jHQRBiryKQ+fUaM9SOmzAqB0TNU5PcQd1cbrkTNiWgcELDdihm
AcyP1N5iDjVr1wHOojySm+YE25bW6ObANZvLaGw850O49JOslqVO/ZCY6tLGg1p4
SG9pJAoxvPOkoO194ySLfYY8GPf+aC3ckAbkPPblidUqhg6CYY1cVADPN5HEuuLj
luFJNzx19oIKtd9hKYHitIBeqWRGE2dYoPkqpNQcXLimIrqpgHkV3NPKp6rtsKeX
wN5IGJ6NAqBiinDnoBOw3iDH6/khrOCBeLomaiwooxvKB1UJZQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHUn94jNYSPz2SYQZ6/Qtmy4+zfLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NmI4
YjEzOC05ODZhLTQxOTAtYTdhMy0zNjI1YjVmNzA3NjkvOTg1YzE3MGQtZGJiNC0z
ODlmLThmMmYtOWVlMjVkZTA4MGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzZiOGIxMzgtOTg2YS00MTkwLWE3
YTMtMzYyNWI1ZjcwNzY5Lzc2YjhiMTM4LTk4NmEtNDE5MC1hN2EzLTM2MjViNWY3
MDc2OS5jcmwwHwYDVR0jBBgwFoAUORd22GV+bJPh+rQky43rdnYzhHIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83NmI4YjEzOC05ODZhLTQxOTAtYTdhMy0zNjI1
YjVmNzA3NjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRcgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAcIqdwIeWZwdOBvPJAm1PpD79Q3LqeYvaqi4atyMNHzBikuUXSS79J
EDch9gfAB5PSZUafWgWEmUmUXCYhN1YNtymliVxZwdz/Q8E9E2TRtXkerg8l8bho
CKs/JWmM+KAs8jWvQZaF2HJLNtk9U6c8VOGrLkRsZxk90eiyqtnjzEXU6ESKX4+E
xcXzyhUJ4hQ0dV6w8XZa1ExbwbZtxuSfCTeMIbEHVWU7sL8DEUTcH1BVw15oarlW
S65K33DYrIBCG0KBFaWY94Ns0qjy5n5fZ+XkNb+/tw7DiYavrm9qK9pu1EhurNeJ
JOApesoUoQJTzjJHsZ9mbcG4JJLuUMkV
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:00:03 2026 by rpki-client