Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e/00133959-4973-306d-8211-4b24b1604443.roa
File:                     00133959-4973-306d-8211-4b24b1604443.roa (raw, json)
Hash identifier:          oKHM80LuoS2EryES+bphLsUI6WktrNfcZLdLhmQhvkU=
Subject key identifier:   04:3C:C3:E9:98:BA:15:EE:F3:3E:E1:48:5A:19:AB:00:4E:21:FB:93
Certificate issuer:       /CN=ad865195-b338-4cba-80f6-5de4a1b2633e
Certificate serial:       010D0C9F4328584D712680E3DD01779C6BD5CC80
Authority key identifier: B9:CE:EE:12:78:62:A4:25:BC:53:77:82:25:FC:B3:49:80:77:A0:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e/00133959-4973-306d-8211-4b24b1604443.roa
Signing time:             Wed 08 Apr 2026 20:45:30 +0000
ROA not before:           Wed 08 Apr 2026 20:45:30 +0000
ROA not after:            Tue 07 Jul 2026 20:45:30 +0000
asID:                     402155
IP address blocks:        2604:de80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e/ad865195-b338-4cba-80f6-5de4a1b2633e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e/ad865195-b338-4cba-80f6-5de4a1b2633e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:26:80:e3:dd:01:77:9c:6b:d5:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad865195-b338-4cba-80f6-5de4a1b2633e
        Validity
            Not Before: Apr  8 20:45:30 2026 GMT
            Not After : Jul  7 20:45:30 2026 GMT
        Subject: CN=b085d7a8-a030-483c-9399-a154705e3484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:6c:8e:d0:0b:17:3a:11:d8:7c:9d:57:5f:
                    e5:85:70:70:cd:0d:8f:19:8f:1d:5b:0b:10:d4:d6:
                    65:97:7a:a5:6e:d9:a1:36:ee:51:21:b3:05:09:fa:
                    9c:24:20:e1:70:61:9d:fc:90:78:b0:04:df:94:09:
                    38:7b:7e:bc:6d:b7:5a:46:77:03:8f:47:47:89:db:
                    ad:84:55:ce:8c:68:5e:a0:6f:f8:55:df:93:99:5f:
                    13:6a:73:f4:eb:31:24:b5:af:52:3f:46:36:58:42:
                    a3:fc:4d:ba:8f:13:b5:53:12:04:ae:30:59:3b:00:
                    e8:45:e5:40:5d:4d:de:c4:d9:e0:4c:75:28:8a:05:
                    26:32:6a:6a:9a:8f:f6:91:03:ce:2d:31:3f:04:13:
                    20:3f:db:ae:db:99:93:98:cd:43:09:a8:eb:e6:51:
                    df:11:e5:74:e6:40:61:c5:27:03:a4:4e:d1:97:7d:
                    70:e2:fe:58:39:62:8d:98:33:9b:b5:9d:08:08:14:
                    e3:7c:f2:b8:6b:41:8b:5e:e1:19:d2:f5:fa:6c:38:
                    46:d6:03:e1:9e:24:b4:53:ad:22:e1:d1:c0:18:10:
                    c8:f2:ec:eb:e9:9e:05:1d:45:5e:5e:28:e3:f5:29:
                    36:76:80:05:73:86:2a:5f:e9:37:a9:9b:52:0b:b1:
                    2d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3C:C3:E9:98:BA:15:EE:F3:3E:E1:48:5A:19:AB:00:4E:21:FB:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e/00133959-4973-306d-8211-4b24b1604443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e/ad865195-b338-4cba-80f6-5de4a1b2633e.crl

            X509v3 Authority Key Identifier:
                keyid:B9:CE:EE:12:78:62:A4:25:BC:53:77:82:25:FC:B3:49:80:77:A0:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ad865195-b338-4cba-80f6-5de4a1b2633e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:de80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b3:5f:04:53:57:80:47:4b:c7:e2:a2:03:a0:11:f6:48:28:
         52:eb:f1:f4:6a:de:0d:0c:f4:0f:3c:ae:ef:87:4f:4f:63:10:
         16:18:44:ca:cb:a3:b6:39:04:f1:f6:f6:14:e7:93:6c:ea:8f:
         64:bf:02:da:b5:db:03:a2:21:73:e7:bb:0b:dd:44:60:64:d0:
         5b:c6:59:06:bc:1d:8f:12:7f:30:28:b0:d7:59:6b:18:aa:fb:
         ca:c3:df:b3:75:56:23:5d:81:fc:7a:8d:8c:24:fa:9d:1f:c9:
         74:00:c8:bc:a9:e7:b8:a0:7a:17:fd:ef:3d:61:b4:13:77:57:
         b9:84:dd:b1:88:aa:36:e0:da:d5:d6:e7:15:33:79:55:2d:ed:
         46:22:8f:01:03:ff:36:de:93:ed:a6:07:30:ce:83:77:57:71:
         69:31:e9:57:0e:2e:f2:4f:cf:d7:75:6e:54:fe:a8:f8:d5:23:
         5e:97:b1:4f:97:18:55:8d:a1:de:2f:15:50:d0:4b:7b:35:78:
         85:8a:85:fe:f4:d7:b6:ba:95:97:e6:7a:e8:1d:21:28:71:8b:
         98:ee:7a:50:56:e8:b2:f1:92:45:06:9e:28:64:5d:f7:42:67:
         71:08:6e:a0:33:f4:80:19:a8:9e:fd:07:fd:e3:e4:67:d6:c9:
         76:e8:4b:59
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1xJoDj3QF3nGvVzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQ4NjUxOTUtYjMzOC00Y2JhLTgwZjYtNWRlNGExYjI2
MzNlMB4XDTI2MDQwODIwNDUzMFoXDTI2MDcwNzIwNDUzMFowLzEtMCsGA1UEAxMk
YjA4NWQ3YTgtYTAzMC00ODNjLTkzOTktYTE1NDcwNWUzNDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRBsjtALFzoR2HydV1/lhXBwzQ2PGY8dWwsQ
1NZll3qlbtmhNu5RIbMFCfqcJCDhcGGd/JB4sATflAk4e368bbdaRncDj0dHidut
hFXOjGheoG/4Vd+TmV8TanP06zEkta9SP0Y2WEKj/E26jxO1UxIErjBZOwDoReVA
XU3exNngTHUoigUmMmpqmo/2kQPOLTE/BBMgP9uu25mTmM1DCajr5lHfEeV05kBh
xScDpE7Rl31w4v5YOWKNmDObtZ0ICBTjfPK4a0GLXuEZ0vX6bDhG1gPhniS0U60i
4dHAGBDI8uzr6Z4FHUVeXijj9Sk2doAFc4YqX+k3qZtSC7EtSQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAQ8w+mYuhXu8z7hSFoZqwBOIfuTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hZDg2
NTE5NS1iMzM4LTRjYmEtODBmNi01ZGU0YTFiMjYzM2UvMDAxMzM5NTktNDk3My0z
MDZkLTgyMTEtNGIyNGIxNjA0NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYWQ4NjUxOTUtYjMzOC00Y2JhLTgw
ZjYtNWRlNGExYjI2MzNlL2FkODY1MTk1LWIzMzgtNGNiYS04MGY2LTVkZTRhMWIy
NjMzZS5jcmwwHwYDVR0jBBgwFoAUuc7uEnhipCW8U3eCJfyzSYB3oCswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hZDg2NTE5NS1iMzM4LTRjYmEtODBmNi01ZGU0
YTFiMjYzM2UuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTegDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAvs18EU1eAR0vH4qIDoBH2SChS6/H0at4NDPQPPK7vh09PYxAWGETK
y6O2OQTx9vYU55Ns6o9kvwLatdsDoiFz57sL3URgZNBbxlkGvB2PEn8wKLDXWWsY
qvvKw9+zdVYjXYH8eo2MJPqdH8l0AMi8qee4oHoX/e89YbQTd1e5hN2xiKo24NrV
1ucVM3lVLe1GIo8BA/823pPtpgcwzoN3V3FpMelXDi7yT8/XdW5U/qj41SNel7FP
lxhVjaHeLxVQ0Et7NXiFioX+9Ne2upWX5nroHSEocYuY7npQVuiy8ZJFBp4oZF33
QmdxCG6gM/SAGaie/Qf94+Rn1sl26EtZ
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:52:17 2026 by rpki-client