Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa
File:                     cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa (raw, json)
Hash identifier:          20DpYup9C2BFyKbaBBM4Ty7NfI5BPTk4DYnLoqP++0c=
Subject key identifier:   28:99:58:51:EC:53:32:00:EB:83:FA:4A:A2:E3:E5:21:E4:14:D9:D0
Certificate issuer:       /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
Certificate serial:       010D0C9F4328584CF58794362797E15640023700
Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     32604
IP address blocks:        2602:fa9c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:94:36:27:97:e1:56:40:02:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=a5771b78-6795-40f9-a428-0a7c29b0062d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:bd:bc:7e:d8:7f:4b:d9:74:86:b6:34:35:
                    84:c9:fa:05:d6:22:f8:b2:5c:a0:27:c6:1e:16:65:
                    37:e4:f5:db:fe:c0:3e:a6:04:b1:97:29:e4:41:b4:
                    3b:0a:16:8b:8e:1f:ab:d1:a7:9a:e7:a9:73:cc:68:
                    ec:f7:da:73:f3:15:16:23:7d:73:c8:2c:4b:7f:23:
                    0e:98:e1:72:aa:c5:6f:5a:37:15:19:3e:59:ce:fb:
                    b6:c8:e8:cf:d1:d2:7f:aa:4c:cc:1e:23:4d:a8:49:
                    52:21:a2:31:7d:5b:45:2f:e0:d5:7c:fe:4c:da:74:
                    fc:77:52:ee:ee:b6:24:b1:11:fc:9a:e8:aa:1c:d5:
                    3d:cf:6d:e0:96:11:de:a1:20:cb:de:85:8f:8c:d2:
                    5d:22:fb:a9:47:5a:c1:83:4d:4d:87:04:05:f6:76:
                    93:41:dd:bd:a2:e9:ea:ef:29:d2:0b:49:80:27:ab:
                    d8:aa:bc:df:7d:f2:2d:c2:e0:fa:0f:dc:bd:88:8e:
                    c8:f7:61:72:7d:db:61:5f:0b:d3:08:37:17:07:45:
                    7b:93:b4:17:54:da:1d:f4:04:2c:c7:52:92:d9:7d:
                    39:0a:63:0b:99:24:e6:12:0a:3c:c3:a8:32:41:7f:
                    32:4d:5b:63:65:de:3b:57:16:77:bb:fd:46:c6:2f:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:99:58:51:EC:53:32:00:EB:83:FA:4A:A2:E3:E5:21:E4:14:D9:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl

            X509v3 Authority Key Identifier:
                keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d6:74:4b:c0:ef:36:a7:2a:bf:2a:05:0d:2a:15:a0:fd:6c:
         ba:34:b0:be:43:33:f1:ae:15:74:ff:a9:ca:02:f4:7c:e5:b9:
         a2:74:4c:73:1e:ee:35:e7:7a:0a:52:50:99:9c:76:c1:6d:24:
         5f:62:2f:7c:72:db:a4:50:ad:75:42:84:f4:4d:f6:a8:eb:5e:
         1a:40:9c:98:54:0b:ce:c4:10:65:d8:68:d8:15:67:b1:c1:6a:
         44:44:10:8f:45:e4:90:d2:17:ba:3b:d4:af:07:55:08:a8:4e:
         e0:9c:25:e8:90:3c:31:50:95:52:b9:ae:08:15:60:23:5e:fd:
         52:bd:dd:36:7c:ef:8c:c8:61:f2:20:9c:19:32:79:c8:cb:3e:
         df:68:5f:94:51:5a:82:4b:ab:50:54:b9:68:5a:99:61:ba:c0:
         74:39:67:ce:2d:21:b8:75:43:14:62:f1:d5:54:38:38:7a:67:
         41:95:15:ba:dd:fb:70:d4:28:4d:91:86:27:ae:44:24:68:1a:
         97:e4:b1:30:8a:84:bb:35:04:50:dd:dd:f7:0f:70:7c:ff:33:
         7f:72:36:b2:07:8e:74:11:3b:2e:6d:7b:f9:71:c0:71:2d:0f:
         f5:18:1c:c4:75:64:01:66:f2:bb:a0:e8:e6:7f:6b:ad:de:9f:
         38:f3:04:39
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz1h5Q2J5fhVkACNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ5MzgxYTMtOWM2Zi00N2Q2LTljNTItOWZhMDdkMmJm
MTg4MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk
YTU3NzFiNzgtNjc5NS00MGY5LWE0MjgtMGE3YzI5YjAwNjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNS9vH7Yf0vZdIa2NDWEyfoF1iL4slygJ8Ye
FmU35PXb/sA+pgSxlynkQbQ7ChaLjh+r0aea56lzzGjs99pz8xUWI31zyCxLfyMO
mOFyqsVvWjcVGT5Zzvu2yOjP0dJ/qkzMHiNNqElSIaIxfVtFL+DVfP5M2nT8d1Lu
7rYksRH8muiqHNU9z23glhHeoSDL3oWPjNJdIvupR1rBg01NhwQF9naTQd29ounq
7ynSC0mAJ6vYqrzfffItwuD6D9y9iI7I92FyfdthXwvTCDcXB0V7k7QXVNod9AQs
x1KS2X05CmMLmSTmEgo8w6gyQX8yTVtjZd47VxZ3u/1Gxi+lnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCiZWFHsUzIA64P6SqLj5SHkFNnQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkz
ODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEwN2QyYmYxODgvY2IyYWJmNjktMWRlNC0z
NGYwLTliZGEtNGY2NjIzNTBkYzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTQ5MzgxYTMtOWM2Zi00N2Q2LTlj
NTItOWZhMDdkMmJmMTg4L2E0OTM4MWEzLTljNmYtNDdkNi05YzUyLTlmYTA3ZDJi
ZjE4OC5jcmwwHwYDVR0jBBgwFoAUYlJh53P6ANsVeqjVvHpystSAfMswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkzODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEw
N2QyYmYxODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6nAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB7WdEvA7zanKr8qBQ0qFaD9bLo0sL5DM/GuFXT/qcoC9HzluaJ0
THMe7jXnegpSUJmcdsFtJF9iL3xy26RQrXVChPRN9qjrXhpAnJhUC87EEGXYaNgV
Z7HBakREEI9F5JDSF7o71K8HVQioTuCcJeiQPDFQlVK5rggVYCNe/VK93TZ874zI
YfIgnBkyecjLPt9oX5RRWoJLq1BUuWhamWG6wHQ5Z84tIbh1QxRi8dVUODh6Z0GV
Fbrd+3DUKE2RhieuRCRoGpfksTCKhLs1BFDd3fcPcHz/M39yNrIHjnQROy5te/lx
wHEtD/UYHMR1ZAFm8rug6OZ/a63enzjzBDk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:09 2026 by rpki-client