Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa
File:                     870b3555-4770-357a-83a4-150807097e93.roa (raw, json)
Hash identifier:          G4kmiLrnf0iQFn+IzA4pyjvc+4pRbNuBHt7dh7e2AIA=
Subject key identifier:   77:04:EA:14:C6:66:16:FC:15:0E:CD:99:80:C2:0B:4A:D4:F9:69:81
Certificate issuer:       /CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd
Certificate serial:       010D0C9F4328584D4D5A5F904B3A714DB2016D00
Authority key identifier: B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     6491
IP address blocks:        2620:67:a000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:5f:90:4b:3a:71:4d:b2:01:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=ef913d3a-b160-474d-81bf-8290b3de720a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:20:99:83:2d:05:c3:67:8d:8e:4a:e8:fa:
                    a3:4f:4e:35:1f:99:d6:5a:b1:9c:3a:73:15:db:22:
                    42:55:98:f3:e2:8a:70:c3:fa:31:ca:62:ba:ab:e4:
                    a3:d1:40:d2:22:fb:89:b1:b9:8d:5a:54:17:b4:de:
                    2c:3c:49:52:ec:cf:e0:dd:b3:66:24:09:7c:c7:f7:
                    b2:77:fa:2b:73:e8:0d:5b:4a:8d:77:66:13:20:fb:
                    c8:ed:9d:64:ff:8b:7f:ed:f9:b0:8d:5a:92:a1:52:
                    7d:ed:51:dc:f4:bf:5b:a5:a4:e5:69:33:17:a0:39:
                    f5:2f:2d:f6:7b:e9:be:36:ab:a5:56:d9:04:be:3e:
                    0e:15:e7:be:a1:07:71:40:90:97:01:2e:b6:a2:11:
                    96:2e:f2:7b:b7:7a:b0:55:4f:8f:70:1c:09:ba:7f:
                    f3:f4:f5:f8:c9:9e:ff:34:64:d5:eb:ac:42:2b:9e:
                    1a:77:d2:f5:d1:27:b7:fd:72:76:cf:dc:e3:76:72:
                    6c:95:16:8f:d0:3e:3c:60:39:28:9d:bd:53:02:18:
                    1f:2f:5d:0b:96:51:4e:b3:68:c9:05:f7:55:d4:94:
                    19:eb:47:b0:0c:14:bc:3c:e7:5e:62:d9:d7:a5:73:
                    70:93:18:51:cc:19:b3:cb:2d:f6:b7:63:fe:dd:4a:
                    f3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:04:EA:14:C6:66:16:FC:15:0E:CD:99:80:C2:0B:4A:D4:F9:69:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl

            X509v3 Authority Key Identifier:
                keyid:B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:67:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:13:2c:25:39:55:32:fc:6d:e9:80:35:4a:7d:4e:e7:c2:e9:
         50:e2:e7:be:79:bc:80:30:32:1c:4b:97:fa:14:7f:34:97:ad:
         b4:b4:be:50:7f:c2:a4:11:af:81:71:bf:f7:0f:92:9d:be:8d:
         7d:bc:24:87:2e:a2:be:1b:7d:02:5a:bc:79:78:2b:9e:e1:8a:
         07:79:85:d0:b5:20:d3:d8:d6:9e:ba:7f:ff:44:1a:b8:de:4a:
         24:8e:47:70:20:34:03:08:55:18:ca:d2:d7:8e:ca:24:85:f2:
         c5:8e:c2:de:5b:26:89:ce:c3:77:d4:28:a8:05:d8:ae:1f:4c:
         f3:ce:8d:66:4b:4d:bf:3d:b8:cc:54:9e:ca:13:2d:eb:e5:d7:
         6d:cf:48:de:1e:bf:35:82:18:3c:d9:74:d6:b3:9b:51:3a:e1:
         9d:3d:8d:31:d5:81:8a:ad:f2:a0:2b:e5:12:56:fb:f1:bd:6d:
         3e:b4:70:7a:6b:20:23:ec:08:e5:69:9d:83:a5:de:f5:1d:57:
         ba:89:bd:94:ed:25:42:1b:bb:3b:dc:a3:3d:ed:af:e1:e2:5d:
         0a:bb:6b:e2:3c:f5:ff:c8:df:ac:ea:36:bd:63:b3:dd:30:91:
         c2:76:f2:14:26:9a:a1:cc:84:8b:e4:4f:f1:cf:9a:be:49:76:
         8d:0b:d0:fb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1NWl+QSzpxTbIBbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2JiZGQ3MWMtYzMwZS00NGFjLTkwZjgtYmE0NDMxMzRk
OGRkMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
ZWY5MTNkM2EtYjE2MC00NzRkLTgxYmYtODI5MGIzZGU3MjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVQgmYMtBcNnjY5K6PqjT041H5nWWrGcOnMV
2yJCVZjz4opww/oxymK6q+Sj0UDSIvuJsbmNWlQXtN4sPElS7M/g3bNmJAl8x/ey
d/orc+gNW0qNd2YTIPvI7Z1k/4t/7fmwjVqSoVJ97VHc9L9bpaTlaTMXoDn1Ly32
e+m+NqulVtkEvj4OFee+oQdxQJCXAS62ohGWLvJ7t3qwVU+PcBwJun/z9PX4yZ7/
NGTV66xCK54ad9L10Se3/XJ2z9zjdnJslRaP0D48YDkonb1TAhgfL10LllFOs2jJ
BfdV1JQZ60ewDBS8POdeYtnXpXNwkxhRzBmzyy32t2P+3Urz/QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHcE6hTGZhb8FQ7NmYDCC0rU+WmBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJk
ZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0MzEzNGQ4ZGQvODcwYjM1NTUtNDc3MC0z
NTdhLTgzYTQtMTUwODA3MDk3ZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2JiZGQ3MWMtYzMwZS00NGFjLTkw
ZjgtYmE0NDMxMzRkOGRkLzNiYmRkNzFjLWMzMGUtNDRhYy05MGY4LWJhNDQzMTM0
ZDhkZC5jcmwwHwYDVR0jBBgwFoAUt/Qb+wOj1yED+K4IbV52vOa77HMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJkZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0
MzEzNGQ4ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAZ6AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABMTLCU5VTL8bemANUp9TufC6VDi5755vIAwMhxLl/oUfzSXrbS0
vlB/wqQRr4Fxv/cPkp2+jX28JIcuor4bfQJavHl4K57higd5hdC1INPY1p66f/9E
GrjeSiSOR3AgNAMIVRjK0teOyiSF8sWOwt5bJonOw3fUKKgF2K4fTPPOjWZLTb89
uMxUnsoTLevl123PSN4evzWCGDzZdNazm1E64Z09jTHVgYqt8qAr5RJW+/G9bT60
cHprICPsCOVpnYOl3vUdV7qJvZTtJUIbuzvcoz3tr+HiXQq7a+I89f/I36zqNr1j
s90wkcJ28hQmmqHMhIvkT/HPmr5Jdo0L0Ps=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:56:18 2026 by rpki-client