Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/130fe00d-4c6c-3e79-9431-17f82e277544.roa
File:                     130fe00d-4c6c-3e79-9431-17f82e277544.roa (raw, json)
Hash identifier:          Tdks57Vt0pNmtnXyOOmTrtSKSNGdg+yaVfp2OczV/FA=
Subject key identifier:   97:89:2E:F6:A5:14:28:BB:6B:A3:F6:CD:13:D9:26:E4:C4:B8:99:67
Certificate issuer:       /CN=6fb44189-bc91-4730-aaf1-75900750d200
Certificate serial:       010D0C9F4328584D52433AFE78AD73C71CC88440
Authority key identifier: 13:3E:68:B5:87:18:33:CC:E1:4D:61:6D:32:EC:7A:0E:40:D6:51:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/130fe00d-4c6c-3e79-9431-17f82e277544.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     401060
IP address blocks:        2602:f80f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/6fb44189-bc91-4730-aaf1-75900750d200.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/6fb44189-bc91-4730-aaf1-75900750d200.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:3a:fe:78:ad:73:c7:1c:c8:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb44189-bc91-4730-aaf1-75900750d200
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=4083d4d5-a1f8-4b6c-8edf-088cd06fb25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:d4:72:a6:8e:8a:48:0f:f8:38:a8:91:f8:
                    58:82:2d:b2:70:86:d6:55:a9:e3:2e:6e:1e:40:06:
                    ed:0d:e1:44:37:2b:06:2b:2c:fb:84:c2:01:f2:29:
                    ba:9a:a5:65:f5:06:62:b0:62:91:c0:f0:85:40:14:
                    95:16:71:3d:3b:94:57:ac:70:95:fb:c8:0e:a6:c2:
                    e4:44:46:64:07:e3:8d:92:da:5c:06:50:94:df:e1:
                    49:35:05:dc:06:8e:36:d1:ce:f8:29:d6:e9:47:cd:
                    ab:96:91:a9:af:85:9d:1e:ab:1d:40:76:b1:f1:2e:
                    3a:c5:71:20:d6:c5:bf:da:0c:73:1a:79:0c:11:35:
                    ce:e1:11:80:4b:7c:f2:1f:f6:e0:67:60:47:f3:0d:
                    de:b6:80:86:89:a4:4b:11:95:18:0a:76:d9:2c:69:
                    db:17:2d:ea:24:d5:31:30:aa:2e:89:1b:8b:cf:86:
                    42:ad:80:91:dc:1f:df:b0:4c:d5:aa:63:a0:ab:5d:
                    2c:29:f4:54:da:e0:fd:6f:05:b9:a5:26:5e:ab:8e:
                    6d:09:a1:47:37:b7:a2:c6:66:4e:b9:23:53:63:95:
                    f4:46:5e:4f:01:c0:4e:59:8c:83:0d:55:0b:bb:80:
                    d5:85:6c:fa:91:fc:f0:8b:25:81:7f:62:8b:e2:28:
                    1a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:89:2E:F6:A5:14:28:BB:6B:A3:F6:CD:13:D9:26:E4:C4:B8:99:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/130fe00d-4c6c-3e79-9431-17f82e277544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/6fb44189-bc91-4730-aaf1-75900750d200.crl

            X509v3 Authority Key Identifier:
                keyid:13:3E:68:B5:87:18:33:CC:E1:4D:61:6D:32:EC:7A:0E:40:D6:51:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f80f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:23:3c:15:be:a3:90:2c:b3:51:2f:b0:0b:79:09:a7:e3:aa:
         83:ea:ce:0e:18:38:f0:eb:10:53:38:a5:e6:75:3f:bd:79:bb:
         4d:7b:00:59:e5:22:c3:2a:e4:f9:d1:20:7c:ff:d3:5b:24:26:
         7d:40:c7:6f:27:88:1b:4a:bc:26:89:06:68:14:e8:72:4a:70:
         ec:71:a7:7a:10:41:44:db:b7:42:6f:82:35:c9:35:a4:eb:a7:
         07:72:ac:f7:8e:42:dc:cd:8a:eb:95:4d:4a:e3:80:51:47:c0:
         f9:ea:e1:9a:f2:6c:9b:78:a9:4b:29:c3:98:04:4a:ae:54:33:
         73:ef:61:6e:ba:4b:1a:8b:c5:d1:d2:b3:10:f7:fb:0a:7f:f2:
         75:30:13:bd:b3:78:51:2b:7b:78:29:60:33:53:43:5f:2a:26:
         4e:96:68:9a:bf:25:c0:04:0c:66:76:1a:46:68:84:ce:4b:2c:
         a9:3a:ec:62:18:34:b2:09:0c:59:39:fd:86:ff:f0:f1:f3:a9:
         8b:40:4c:79:ec:21:7e:b4:86:e3:2e:9b:d9:7a:60:ed:a4:c6:
         ac:c9:24:82:c7:f1:8d:46:ad:4f:e4:d1:cd:d9:74:a2:55:83:
         4f:ba:ad:98:83:3a:96:fb:d8:13:53:93:ae:41:f0:35:8a:b3:
         72:6f:60:e9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1SQzr+eK1zxxzIhEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmZiNDQxODktYmM5MS00NzMwLWFhZjEtNzU5MDA3NTBk
MjAwMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
NDA4M2Q0ZDUtYTFmOC00YjZjLThlZGYtMDg4Y2QwNmZiMjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgzUcqaOikgP+DiokfhYgi2ycIbWVanjLm4e
QAbtDeFENysGKyz7hMIB8im6mqVl9QZisGKRwPCFQBSVFnE9O5RXrHCV+8gOpsLk
REZkB+ONktpcBlCU3+FJNQXcBo420c74KdbpR82rlpGpr4WdHqsdQHax8S46xXEg
1sW/2gxzGnkMETXO4RGAS3zyH/bgZ2BH8w3etoCGiaRLEZUYCnbZLGnbFy3qJNUx
MKouiRuLz4ZCrYCR3B/fsEzVqmOgq10sKfRU2uD9bwW5pSZeq45tCaFHN7eixmZO
uSNTY5X0Rl5PAcBOWYyDDVULu4DVhWz6kfzwiyWBf2KL4igaiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJeJLvalFCi7a6P2zRPZJuTEuJlnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82ZmI0
NDE4OS1iYzkxLTQ3MzAtYWFmMS03NTkwMDc1MGQyMDAvMTMwZmUwMGQtNGM2Yy0z
ZTc5LTk0MzEtMTdmODJlMjc3NTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmZiNDQxODktYmM5MS00NzMwLWFh
ZjEtNzU5MDA3NTBkMjAwLzZmYjQ0MTg5LWJjOTEtNDczMC1hYWYxLTc1OTAwNzUw
ZDIwMC5jcmwwHwYDVR0jBBgwFoAUEz5otYcYM8zhTWFtMux6DkDWUVgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82ZmI0NDE4OS1iYzkxLTQ3MzAtYWFmMS03NTkw
MDc1MGQyMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4DwAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH4jPBW+o5Ass1EvsAt5CafjqoPqzg4YOPDrEFM4peZ1P715u017
AFnlIsMq5PnRIHz/01skJn1Ax28niBtKvCaJBmgU6HJKcOxxp3oQQUTbt0JvgjXJ
NaTrpwdyrPeOQtzNiuuVTUrjgFFHwPnq4ZrybJt4qUspw5gESq5UM3PvYW66SxqL
xdHSsxD3+wp/8nUwE72zeFEre3gpYDNTQ18qJk6WaJq/JcAEDGZ2GkZohM5LLKk6
7GIYNLIJDFk5/Yb/8PHzqYtATHnsIX60huMum9l6YO2kxqzJJILH8Y1GrU/k0c3Z
dKJVg0+6rZiDOpb72BNTk65B8DWKs3JvYOk=
-----END CERTIFICATE-----
Generated at Sat Apr 18 10:15:36 2026 by rpki-client