Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/7328fa77-88f3-3cc3-9bcb-ae7fe83c27c5.roa
File:                     7328fa77-88f3-3cc3-9bcb-ae7fe83c27c5.roa (raw, json)
Hash identifier:          v8VVKfXTV2oRRnIH0lnilibHPMeaGl+OHrOHni92dsM=
Subject key identifier:   18:B1:6A:53:BF:60:C4:D9:A6:B0:20:8D:27:8D:73:50:F7:13:42:55
Certificate issuer:       /CN=13f2987b-65e9-4b0f-9061-f324b366fd94
Certificate serial:       010D0C9F4328584CCA41DA6EBB4B75C1E30BFA80
Authority key identifier: C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/7328fa77-88f3-3cc3-9bcb-ae7fe83c27c5.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     32425
IP address blocks:        2604:29e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:da:6e:bb:4b:75:c1:e3:0b:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f2987b-65e9-4b0f-9061-f324b366fd94
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=c19c3620-186d-4d3d-9bb0-f2eb51f2eaf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:69:fb:f8:f7:77:6f:13:d5:31:68:7a:0e:fb:
                    28:5f:40:02:b6:70:ef:71:1c:a2:42:76:04:a5:9b:
                    ca:26:13:80:36:19:b1:c5:2f:b7:80:e5:3f:77:6e:
                    c5:02:a9:3b:35:33:de:13:49:14:2c:d1:90:9c:80:
                    70:2e:fa:f6:95:c4:61:00:9f:3b:83:6a:6d:82:55:
                    67:88:04:46:7b:3c:53:b9:2a:8c:67:27:b1:1d:03:
                    50:74:bc:05:83:56:f0:6a:b9:1d:e2:6e:87:16:8e:
                    5a:75:13:58:c1:c0:32:00:67:37:36:b3:cf:c1:bc:
                    3c:94:ef:d5:7c:fa:76:7a:10:9a:3f:47:f6:3f:72:
                    45:34:cb:9c:4e:ff:64:03:e4:7c:fd:54:7c:1f:c3:
                    e8:b4:59:8e:ff:a0:32:c9:c5:14:63:e0:12:6a:a3:
                    06:37:50:32:2d:5a:e1:40:80:30:18:37:d5:65:62:
                    f2:7f:52:be:ae:4a:4d:6c:87:5e:09:a2:23:f7:a0:
                    90:d0:b1:7d:ad:a9:80:ad:74:77:c9:48:47:81:1a:
                    31:7e:8b:33:fa:81:07:0c:53:2d:d0:86:83:0b:2d:
                    6b:ef:f9:c2:7a:d8:07:9d:11:50:0e:e1:f9:9c:1f:
                    dc:d9:8e:6c:82:54:0e:33:f1:e4:cf:a3:82:af:68:
                    df:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:6A:53:BF:60:C4:D9:A6:B0:20:8D:27:8D:73:50:F7:13:42:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/7328fa77-88f3-3cc3-9bcb-ae7fe83c27c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl

            X509v3 Authority Key Identifier:
                keyid:C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:29e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:89:0f:5e:3e:56:38:e7:a9:e1:20:e0:56:e5:9e:2e:c5:41:
         d4:48:ce:2e:dc:e0:07:cd:fb:b0:9a:96:04:88:01:f8:b2:c7:
         a4:2f:62:22:7a:5d:a8:eb:31:e4:e7:03:f0:66:f8:93:ac:18:
         6f:9b:5a:9b:04:f8:1c:7c:d9:b9:0b:73:82:8d:53:2e:39:27:
         66:82:e5:2f:2a:16:9b:63:40:5e:64:4a:b1:b8:cb:96:54:a5:
         6a:83:eb:81:67:d7:c0:d9:2e:ea:71:9f:d5:55:31:06:f7:14:
         6a:61:fa:c7:ab:a8:0d:a6:58:85:25:b2:ac:fa:bd:93:e2:0f:
         3d:cb:ec:2a:bb:d9:10:25:f1:2b:41:04:22:57:00:02:77:1b:
         b2:16:ab:89:93:19:95:d3:ee:b8:04:71:cd:d0:79:e2:8b:23:
         51:b0:7f:5a:d8:c3:d9:7f:ea:ba:35:13:b5:5a:8d:ff:2b:bc:
         94:1f:7f:87:9b:b9:6e:10:35:a9:27:3b:a8:fd:b4:4f:1e:4f:
         7f:4c:0e:91:0f:3e:b5:28:4e:76:a4:6b:6d:a9:69:05:ae:33:
         07:eb:b6:48:2c:9f:60:7c:dc:01:87:07:0a:c1:d2:e0:ba:df:
         2d:a3:9c:de:4a:e6:3e:33:f1:e7:76:f5:b2:06:fd:91:d8:8e:
         a1:29:ac:82
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzKQdpuu0t1weML+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTNmMjk4N2ItNjVlOS00YjBmLTkwNjEtZjMyNGIzNjZm
ZDk0MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk
YzE5YzM2MjAtMTg2ZC00ZDNkLTliYjAtZjJlYjUxZjJlYWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGn7+Pd3bxPVMWh6DvsoX0ACtnDvcRyiQnYE
pZvKJhOANhmxxS+3gOU/d27FAqk7NTPeE0kULNGQnIBwLvr2lcRhAJ87g2ptglVn
iARGezxTuSqMZyexHQNQdLwFg1bwarkd4m6HFo5adRNYwcAyAGc3NrPPwbw8lO/V
fPp2ehCaP0f2P3JFNMucTv9kA+R8/VR8H8PotFmO/6AyycUUY+ASaqMGN1AyLVrh
QIAwGDfVZWLyf1K+rkpNbIdeCaIj96CQ0LF9ramArXR3yUhHgRoxfosz+oEHDFMt
0IaDCy1r7/nCetgHnRFQDuH5nB/c2Y5sglQOM/Hkz6OCr2jfDQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBixalO/YMTZprAgjSeNc1D3E0JVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xM2Yy
OTg3Yi02NWU5LTRiMGYtOTA2MS1mMzI0YjM2NmZkOTQvNzMyOGZhNzctODhmMy0z
Y2MzLTliY2ItYWU3ZmU4M2MyN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTNmMjk4N2ItNjVlOS00YjBmLTkw
NjEtZjMyNGIzNjZmZDk0LzEzZjI5ODdiLTY1ZTktNGIwZi05MDYxLWYzMjRiMzY2
ZmQ5NC5jcmwwHwYDVR0jBBgwFoAUxt3F8684P/Bqh/r6+Mr1rsrEwzcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xM2YyOTg3Yi02NWU5LTRiMGYtOTA2MS1mMzI0
YjM2NmZkOTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQp4DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQALiQ9ePlY456nhIOBW5Z4uxUHUSM4u3OAHzfuwmpYEiAH4ssekL2Ii
el2o6zHk5wPwZviTrBhvm1qbBPgcfNm5C3OCjVMuOSdmguUvKhabY0BeZEqxuMuW
VKVqg+uBZ9fA2S7qcZ/VVTEG9xRqYfrHq6gNpliFJbKs+r2T4g89y+wqu9kQJfEr
QQQiVwACdxuyFquJkxmV0+64BHHN0HniiyNRsH9a2MPZf+q6NRO1Wo3/K7yUH3+H
m7luEDWpJzuo/bRPHk9/TA6RDz61KE52pGttqWkFrjMH67ZILJ9gfNwBhwcKwdLg
ut8to5zeSuY+M/HndvWyBv2R2I6hKayC
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:22:46 2026 by rpki-client