Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/97dce0b4-e3f4-31a3-a686-8c9e2f6657b6.roa
File:                     97dce0b4-e3f4-31a3-a686-8c9e2f6657b6.roa (raw, json)
Hash identifier:          3pORTC5yLFN7P9UOcaijgYEya5mG2oDnr/U/RzyQKEQ=
Subject key identifier:   5A:E3:7E:CD:CD:D7:08:F0:3A:41:9F:D1:1D:E9:D4:C7:BE:B8:E7:85
Certificate issuer:       /CN=a37f77d5-b5c8-4567-8b95-233330e463cc
Certificate serial:       010D0C9F4328584D7B6A9D2ADA993DA17D4D6280
Authority key identifier: 2B:AE:0D:7D:61:C6:72:1E:0F:0E:66:03:60:A7:8B:4C:4F:9E:ED:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/97dce0b4-e3f4-31a3-a686-8c9e2f6657b6.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     11169
IP address blocks:        2602:f479::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/a37f77d5-b5c8-4567-8b95-233330e463cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/a37f77d5-b5c8-4567-8b95-233330e463cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:9d:2a:da:99:3d:a1:7d:4d:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a37f77d5-b5c8-4567-8b95-233330e463cc
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=ab7036e1-ac8a-47c0-84a0-0269704bce06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e1:0c:10:f5:6f:7b:ac:2e:33:8d:16:36:5b:
                    bf:4e:ad:3b:91:c9:f5:b3:dc:e2:5a:26:6c:ae:08:
                    7d:22:a0:2d:b9:eb:5f:b1:04:48:16:6c:17:cb:81:
                    33:23:90:6b:fe:96:0e:58:91:5e:f2:0c:cb:53:2c:
                    d3:3b:1c:d4:b3:82:00:73:e5:51:f5:6b:2b:66:65:
                    97:5e:19:15:38:d7:10:b4:ad:dc:11:62:8e:03:ab:
                    b2:27:7f:3a:b3:99:44:2a:b3:a5:8c:6d:6c:9b:e2:
                    50:3b:fb:93:c3:ea:aa:d8:be:e6:70:a2:ad:55:1c:
                    82:52:93:5b:54:a4:a2:12:04:0c:80:7a:49:48:be:
                    88:95:c9:bc:a1:64:06:b4:99:8d:8d:13:e0:09:c2:
                    98:b1:38:ef:85:84:f3:9f:1e:26:05:f4:b6:96:be:
                    fa:d2:74:24:93:8d:34:30:d9:64:3a:6f:73:92:21:
                    d1:fe:55:f9:49:ff:8d:25:a5:5b:7d:dc:f9:06:60:
                    76:a7:1f:d5:73:d5:74:aa:64:69:f9:6a:bc:97:d1:
                    16:82:2e:86:a4:3d:c9:d2:db:d5:73:ff:fd:a7:ce:
                    8d:1e:4a:0c:59:36:d3:8e:8a:f5:ae:95:10:72:08:
                    80:29:70:c4:27:98:23:a3:7b:30:36:31:67:cf:93:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E3:7E:CD:CD:D7:08:F0:3A:41:9F:D1:1D:E9:D4:C7:BE:B8:E7:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/97dce0b4-e3f4-31a3-a686-8c9e2f6657b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/a37f77d5-b5c8-4567-8b95-233330e463cc.crl

            X509v3 Authority Key Identifier:
                keyid:2B:AE:0D:7D:61:C6:72:1E:0F:0E:66:03:60:A7:8B:4C:4F:9E:ED:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f479::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:46:46:44:56:94:63:5a:13:2e:6a:0e:3c:87:bc:3e:8e:2c:
         89:6d:2b:bb:cd:5c:ae:a4:86:62:b6:6d:fc:a9:79:9e:f2:3a:
         9f:4c:17:d8:fc:e6:12:23:df:9f:bf:8c:83:a2:40:de:e5:03:
         b5:98:7a:5b:cf:38:01:61:03:62:14:33:ab:52:9b:1d:01:4e:
         16:97:5b:a6:b0:d8:22:aa:f6:53:26:ed:b0:3f:07:bd:fc:27:
         02:c3:46:f3:8b:5b:e7:d3:97:ad:e5:a2:91:be:b7:fd:05:ce:
         ee:50:1b:eb:8d:8d:2b:b7:20:83:9e:47:2c:b0:df:28:b8:2b:
         4d:ed:77:b5:24:6b:4d:98:10:3a:07:4c:68:02:fd:b5:ab:9d:
         74:d4:33:3d:92:d4:32:2f:b0:2e:71:f0:04:3e:5a:ba:56:32:
         a7:9e:0b:87:0e:eb:af:59:ad:ab:d2:2f:38:85:97:0e:b4:67:
         a8:5e:db:93:1f:9f:04:5c:36:40:44:41:10:5e:9f:9b:5c:b9:
         6e:69:82:1b:e7:bb:a8:ba:4b:d3:20:4d:d8:09:a9:72:74:e2:
         d5:e1:a9:ca:c3:bb:93:e8:fc:8b:f4:8b:1a:e9:e1:5d:82:90:
         9e:0e:d3:ba:c6:b2:a4:83:6a:d6:89:fb:e9:f3:40:b9:8e:6b:
         76:59:ed:d9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE17ap0q2pk9oX1NYoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM3Zjc3ZDUtYjVjOC00NTY3LThiOTUtMjMzMzMwZTQ2
M2NjMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk
YWI3MDM2ZTEtYWM4YS00N2MwLTg0YTAtMDI2OTcwNGJjZTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+EMEPVve6wuM40WNlu/Tq07kcn1s9ziWiZs
rgh9IqAtuetfsQRIFmwXy4EzI5Br/pYOWJFe8gzLUyzTOxzUs4IAc+VR9WsrZmWX
XhkVONcQtK3cEWKOA6uyJ386s5lEKrOljG1sm+JQO/uTw+qq2L7mcKKtVRyCUpNb
VKSiEgQMgHpJSL6Ilcm8oWQGtJmNjRPgCcKYsTjvhYTznx4mBfS2lr760nQkk400
MNlkOm9zkiHR/lX5Sf+NJaVbfdz5BmB2px/Vc9V0qmRp+Wq8l9EWgi6GpD3J0tvV
c//9p86NHkoMWTbTjor1rpUQcgiAKXDEJ5gjo3swNjFnz5PD7wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFrjfs3N1wjwOkGf0R3p1Me+uOeFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzdm
NzdkNS1iNWM4LTQ1NjctOGI5NS0yMzMzMzBlNDYzY2MvOTdkY2UwYjQtZTNmNC0z
MWEzLWE2ODYtOGM5ZTJmNjY1N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTM3Zjc3ZDUtYjVjOC00NTY3LThi
OTUtMjMzMzMwZTQ2M2NjL2EzN2Y3N2Q1LWI1YzgtNDU2Ny04Yjk1LTIzMzMzMGU0
NjNjYy5jcmwwHwYDVR0jBBgwFoAUK64NfWHGch4PDmYDYKeLTE+e7dMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzdmNzdkNS1iNWM4LTQ1NjctOGI5NS0yMzMz
MzBlNDYzY2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL0eQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAiEZGRFaUY1oTLmoOPIe8Po4siW0ru81crqSGYrZt/Kl5nvI6n0wX
2PzmEiPfn7+Mg6JA3uUDtZh6W884AWEDYhQzq1KbHQFOFpdbprDYIqr2UybtsD8H
vfwnAsNG84tb59OXreWikb63/QXO7lAb642NK7cgg55HLLDfKLgrTe13tSRrTZgQ
OgdMaAL9tauddNQzPZLUMi+wLnHwBD5aulYyp54Lhw7rr1mtq9IvOIWXDrRnqF7b
kx+fBFw2QERBEF6fm1y5bmmCG+e7qLpL0yBN2AmpcnTi1eGpysO7k+j8i/SLGunh
XYKQng7TusaypINq1on76fNAuY5rdlnt2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:31:14 2026 by rpki-client