Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/d6ba9e07-b145-30de-a0ce-a0d6282edc98.roa
File:                     d6ba9e07-b145-30de-a0ce-a0d6282edc98.roa (raw, json)
Hash identifier:          OTb87TMGznrLIBmwzpZnkNDlwL9mbf3NuxHPm/9kTP0=
Subject key identifier:   06:30:A5:71:DB:93:86:E4:27:B3:C3:0F:32:86:98:42:3E:F8:87:E7
Certificate issuer:       /CN=3db33a74-4bfb-4717-906c-95b172456bd9
Certificate serial:       010D0C9F4328584DEB75140A53C9261CCABA8A80
Authority key identifier: 69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/d6ba9e07-b145-30de-a0ce-a0d6282edc98.roa
Signing time:             Fri 22 May 2026 16:12:26 +0000
ROA not before:           Fri 22 May 2026 16:12:26 +0000
ROA not after:            Thu 20 Aug 2026 16:12:26 +0000
asID:                     401671
IP address blocks:        2604:c20:8030::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:75:14:0a:53:c9:26:1c:ca:ba:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db33a74-4bfb-4717-906c-95b172456bd9
        Validity
            Not Before: May 22 16:12:26 2026 GMT
            Not After : Aug 20 16:12:26 2026 GMT
        Subject: CN=851af58d-0e3b-4c77-8c9a-c25941be2e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:5f:19:46:77:16:5f:fe:ba:98:d9:0b:fc:
                    a1:2d:8e:d5:cb:d0:16:9d:37:f8:d8:31:6c:ec:94:
                    f9:f0:56:84:3f:f2:2c:5e:9c:04:b9:b7:c5:1c:3e:
                    41:51:30:66:b9:20:cd:ec:e0:67:09:b2:90:75:1d:
                    ea:8b:33:c8:18:7b:1c:51:91:b5:03:59:98:6f:5c:
                    81:a4:a7:4a:e8:f6:5e:bd:d5:75:7a:2e:3c:fa:ce:
                    0a:05:73:19:99:2f:f6:df:c4:8c:cd:e5:52:72:ce:
                    db:19:ce:65:27:73:25:5d:4a:a9:d6:ae:19:d7:04:
                    a3:21:bf:d5:65:02:25:6b:7e:6e:59:61:63:bd:27:
                    e0:6d:95:cf:c7:7a:9f:dd:87:b9:9c:d4:ea:24:87:
                    7e:85:eb:7f:ad:62:50:29:7d:7e:3c:1f:33:f8:78:
                    a0:45:1a:bf:49:05:00:9e:5d:d6:9f:e1:7b:b0:5a:
                    a5:9a:50:93:d7:a6:f8:87:47:90:50:ff:8b:d3:95:
                    c8:2e:ec:f8:55:2a:36:95:87:4a:b9:7f:f0:37:43:
                    f5:a3:d7:f8:79:f2:5d:8f:c7:d1:94:18:a8:ea:00:
                    63:22:b9:40:a5:57:ae:c4:fc:65:ac:0b:88:84:af:
                    c1:2c:e9:02:be:f5:b0:cb:83:67:d1:5c:26:eb:ea:
                    44:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:30:A5:71:DB:93:86:E4:27:B3:C3:0F:32:86:98:42:3E:F8:87:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/d6ba9e07-b145-30de-a0ce-a0d6282edc98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl

            X509v3 Authority Key Identifier:
                keyid:69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c20:8030::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:cc:ea:cc:22:27:b7:df:da:60:ed:85:e2:b8:ed:cd:c8:6a:
         3e:89:ec:71:c5:47:58:af:b7:86:46:72:b7:91:ce:e0:98:3e:
         91:84:21:60:27:02:8c:72:f4:ea:22:1e:14:94:1a:e9:06:c1:
         3f:f0:43:db:b7:32:99:f9:ac:cb:98:81:0a:e6:f0:99:5f:a6:
         ba:6d:fd:78:ee:57:f9:1e:32:08:ee:06:24:46:51:e7:46:5d:
         03:e7:dc:54:30:98:b1:bb:2d:af:69:17:03:96:d4:77:0a:2a:
         d5:96:07:c7:37:15:5f:94:4f:5b:ba:29:0a:b3:43:5c:9b:22:
         1b:5c:9d:b3:cf:86:1e:0c:91:f1:75:cd:82:55:e2:eb:6d:3c:
         e2:01:43:74:ae:9d:e5:d3:d0:30:f3:ea:02:2f:b1:8f:03:c8:
         12:dc:11:1b:aa:8c:34:51:db:ae:87:f5:9a:c1:04:aa:f0:a4:
         42:46:05:23:cd:00:12:31:81:c8:bc:51:e2:8a:fa:08:33:66:
         02:d2:9a:f1:51:97:b2:9c:43:ba:bf:0f:79:1d:ac:1d:0c:7c:
         4d:96:e0:57:f7:be:a7:4e:24:28:4c:19:78:29:f6:f9:2a:cb:
         ba:b3:c6:35:54:c1:fe:de:58:ed:5d:c9:61:99:c3:a2:b9:a9:
         37:d9:ba:ea
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3rdRQKU8kmHMq6ioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2RiMzNhNzQtNGJmYi00NzE3LTkwNmMtOTViMTcyNDU2
YmQ5MB4XDTI2MDUyMjE2MTIyNloXDTI2MDgyMDE2MTIyNlowLzEtMCsGA1UEAxMk
ODUxYWY1OGQtMGUzYi00Yzc3LThjOWEtYzI1OTQxYmUyZTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktBfGUZ3Fl/+upjZC/yhLY7Vy9AWnTf42DFs
7JT58FaEP/IsXpwEubfFHD5BUTBmuSDN7OBnCbKQdR3qizPIGHscUZG1A1mYb1yB
pKdK6PZevdV1ei48+s4KBXMZmS/238SMzeVScs7bGc5lJ3MlXUqp1q4Z1wSjIb/V
ZQIla35uWWFjvSfgbZXPx3qf3Ye5nNTqJId+het/rWJQKX1+PB8z+HigRRq/SQUA
nl3Wn+F7sFqlmlCT16b4h0eQUP+L05XILuz4VSo2lYdKuX/wN0P1o9f4efJdj8fR
lBio6gBjIrlApVeuxPxlrAuIhK/BLOkCvvWwy4Nn0Vwm6+pEWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAYwpXHbk4bkJ7PDDzKGmEI++IfnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZGIz
M2E3NC00YmZiLTQ3MTctOTA2Yy05NWIxNzI0NTZiZDkvZDZiYTllMDctYjE0NS0z
MGRlLWEwY2UtYTBkNjI4MmVkYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2RiMzNhNzQtNGJmYi00NzE3LTkw
NmMtOTViMTcyNDU2YmQ5LzNkYjMzYTc0LTRiZmItNDcxNy05MDZjLTk1YjE3MjQ1
NmJkOS5jcmwwHwYDVR0jBBgwFoAUaS7LdUXu10Kxl1GH6BSi2INLiHUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZGIzM2E3NC00YmZiLTQ3MTctOTA2Yy05NWIx
NzI0NTZiZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgQMIIAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHDM6swiJ7ff2mDtheK47c3Iaj6J7HHFR1ivt4ZGcreRzuCYPpGE
IWAnAoxy9OoiHhSUGukGwT/wQ9u3Mpn5rMuYgQrm8Jlfprpt/XjuV/keMgjuBiRG
UedGXQPn3FQwmLG7La9pFwOW1HcKKtWWB8c3FV+UT1u6KQqzQ1ybIhtcnbPPhh4M
kfF1zYJV4uttPOIBQ3SuneXT0DDz6gIvsY8DyBLcERuqjDRR266H9ZrBBKrwpEJG
BSPNABIxgci8UeKK+ggzZgLSmvFRl7KcQ7q/D3kdrB0MfE2W4Ff3vqdOJChMGXgp
9vkqy7qzxjVUwf7eWO1dyWGZw6K5qTfZuuo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:51:47 2026 by rpki-client