Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa
File:                     fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa (raw, json)
Hash identifier:          dq7zkKl6xuA8AKWRyMeKiptMqQkN6gRq6SYs6FU2Zyk=
Subject key identifier:   7B:7A:16:76:3F:65:7B:AE:7E:66:FD:D0:CF:68:F2:34:6B:4B:66:89
Certificate issuer:       /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial:       010D0C9F4328584DE41B227858C1728EFD3DB380
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     22926
IP address blocks:        2607:f5e8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:22:78:58:c1:72:8e:fd:3d:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=2f3ba141-7003-4f9c-bff9-9e36018099be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4b:8f:d9:2d:1d:a4:60:be:9a:96:af:fc:88:
                    13:19:d8:3d:2b:f8:f0:20:9e:9d:f7:92:17:6b:eb:
                    10:69:27:62:50:91:ad:d9:07:b8:34:ae:83:29:e8:
                    b2:2a:a3:da:25:9d:1a:d4:a2:95:74:9f:bf:19:8c:
                    58:f3:61:31:e0:e8:38:75:94:3a:c4:83:0b:c1:a7:
                    ee:4a:6a:78:b1:b2:c1:8e:7a:ba:3c:25:72:93:51:
                    a6:8c:9f:3b:29:12:53:02:cf:85:eb:ee:31:1d:82:
                    d0:3e:89:4a:07:e4:13:2b:a8:9e:14:25:ac:b6:26:
                    30:2f:57:b7:ae:3d:10:36:f0:0f:96:1f:7b:f9:0f:
                    c3:ef:8c:88:a0:6a:6a:3d:b9:79:77:29:a0:24:c5:
                    d5:8a:ee:cd:6c:47:98:18:9b:7b:44:cc:8e:f5:39:
                    98:81:87:18:66:dc:da:19:2e:b3:e5:3b:3e:a9:00:
                    20:1c:50:3d:5f:66:cd:c7:60:8a:56:33:6c:20:1f:
                    c1:05:ba:d3:0a:a7:be:e5:98:d6:d1:83:ff:b8:b2:
                    fc:a4:0d:b0:36:36:13:97:9b:4b:92:03:bf:55:e9:
                    51:02:c1:cd:cf:71:9e:66:47:13:2a:c9:c4:4a:a7:
                    0d:8d:b6:30:fb:a1:83:a5:df:42:d5:58:f2:c4:86:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7A:16:76:3F:65:7B:AE:7E:66:FD:D0:CF:68:F2:34:6B:4B:66:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl

            X509v3 Authority Key Identifier:
                keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5e8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:19:86:d5:9b:b7:7f:fb:0c:d6:2b:b3:7e:ee:05:01:13:e5:
         8c:b8:0b:f3:40:87:0c:28:15:21:0b:e1:fb:f3:77:e9:71:44:
         56:f2:c2:da:76:33:ac:90:9a:7d:26:df:4d:51:d6:8f:1f:6e:
         b1:4d:b8:38:d7:00:e0:ee:61:37:12:dc:50:fc:90:e4:95:6b:
         f9:45:5f:d3:38:52:3c:9d:8e:59:23:1e:fc:b2:03:19:5a:ce:
         39:24:f0:fc:25:8b:34:36:7f:92:e4:2d:e5:6a:19:6d:a3:cb:
         04:54:f2:61:e8:a4:d4:57:27:93:65:c8:07:db:e1:42:3f:2e:
         80:2c:d4:8e:48:8c:4a:73:41:57:5f:79:9b:3f:62:da:b8:f6:
         bb:a9:7b:a8:1d:d4:40:73:c5:16:3e:41:61:06:49:3e:8a:6b:
         d1:94:d2:4c:f2:93:82:3f:b4:1d:01:22:d2:66:9e:ae:9e:44:
         99:0c:41:ad:04:06:fc:69:78:0e:a1:87:bb:36:3d:d6:7c:f3:
         39:f5:2f:7f:28:82:cb:86:11:22:c7:2e:c7:13:4e:3b:4d:d6:
         d3:d2:44:58:96:f3:10:e6:be:93:67:ce:97:e2:f5:1c:e9:0a:
         97:96:a6:43:86:06:a6:26:24:94:40:45:6c:47:ea:82:28:8f:
         0a:03:fc:5b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3kGyJ4WMFyjv09s4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDE4NGU0NzEtMDgwYS00ZTU0LWJmOTQtNjBkZDBjOGJl
YjQ4MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
MmYzYmExNDEtNzAwMy00ZjljLWJmZjktOWUzNjAxODA5OWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEuP2S0dpGC+mpav/IgTGdg9K/jwIJ6d95IX
a+sQaSdiUJGt2Qe4NK6DKeiyKqPaJZ0a1KKVdJ+/GYxY82Ex4Og4dZQ6xIMLwafu
Smp4sbLBjnq6PCVyk1GmjJ87KRJTAs+F6+4xHYLQPolKB+QTK6ieFCWstiYwL1e3
rj0QNvAPlh97+Q/D74yIoGpqPbl5dymgJMXViu7NbEeYGJt7RMyO9TmYgYcYZtza
GS6z5Ts+qQAgHFA9X2bNx2CKVjNsIB/BBbrTCqe+5ZjW0YP/uLL8pA2wNjYTl5tL
kgO/VelRAsHNz3GeZkcTKsnESqcNjbYw+6GDpd9C1VjyxIaSiwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHt6FnY/ZXuufmb90M9o8jRrS2aJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0
ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRkMGM4YmViNDgvZmQ4ZmM3MjItNmFhOS0z
MDZhLWFlMDAtOTdjYWUzZWJmMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDE4NGU0NzEtMDgwYS00ZTU0LWJm
OTQtNjBkZDBjOGJlYjQ4L2QxODRlNDcxLTA4MGEtNGU1NC1iZjk0LTYwZGQwYzhi
ZWI0OC5jcmwwHwYDVR0jBBgwFoAUgirGXwV3ltYS+ySG5nLGEqW2QVEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRk
MGM4YmViNDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf16DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQACGYbVm7d/+wzWK7N+7gUBE+WMuAvzQIcMKBUhC+H783fpcURW8sLa
djOskJp9Jt9NUdaPH26xTbg41wDg7mE3EtxQ/JDklWv5RV/TOFI8nY5ZIx78sgMZ
Ws45JPD8JYs0Nn+S5C3lahlto8sEVPJh6KTUVyeTZcgH2+FCPy6ALNSOSIxKc0FX
X3mbP2LauPa7qXuoHdRAc8UWPkFhBkk+imvRlNJM8pOCP7QdASLSZp6unkSZDEGt
BAb8aXgOoYe7Nj3WfPM59S9/KILLhhEixy7HE047TdbT0kRYlvMQ5r6TZ86X4vUc
6QqXlqZDhgamJiSUQEVsR+qCKI8KA/xb
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:13 2026 by rpki-client