Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/c82d7afd-fc6b-3f4d-b7de-b373b5f81778.roa
File:                     c82d7afd-fc6b-3f4d-b7de-b373b5f81778.roa (raw, json)
Hash identifier:          6TfxHQiy6Y8QTHMVKjM9+1ZkHJjJX5GbC+lVpOve5b4=
Subject key identifier:   27:5A:32:E6:4E:0A:AC:1F:B4:D4:A3:FD:0E:54:2A:CD:F0:FE:A5:FC
Certificate issuer:       /CN=37e69330-3024-406b-b60a-0d95e25f2334
Certificate serial:       010D0C9F4328584CF6ECDDD83E3CA33D9E1EA700
Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/c82d7afd-fc6b-3f4d-b7de-b373b5f81778.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     401390
IP address blocks:        2602:f7da:3a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:dd:d8:3e:3c:a3:3d:9e:1e:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=420d1dce-bbf2-438b-864c-7af2215a573b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:96:66:ae:47:a4:d0:06:33:8d:d6:34:19:
                    b6:f7:d9:19:88:20:a1:26:bd:bc:f9:39:22:6e:64:
                    07:15:45:9a:b6:0f:14:0a:82:e2:da:2b:7b:9f:76:
                    11:ac:de:f2:89:cb:6f:96:12:09:23:12:4a:e3:2d:
                    1a:fd:5f:d3:d7:5f:7c:22:62:03:e7:c2:1d:de:fc:
                    b6:ae:96:34:ea:f1:0f:e9:8c:6f:14:c0:17:c4:52:
                    ea:f5:71:e3:da:48:aa:6a:ff:f0:a4:c8:ae:8b:38:
                    21:f1:8b:3f:53:02:4c:53:21:04:bb:a2:2a:37:9c:
                    67:bc:d2:de:05:1e:98:58:00:9c:ff:3e:0f:64:2f:
                    5e:4a:53:f6:b7:32:47:9c:fb:2b:a6:e2:fe:31:dd:
                    f7:82:64:8e:7a:fa:89:59:b1:ef:04:b9:7d:e7:50:
                    f2:d3:6b:b4:db:80:15:d5:f7:94:81:fd:04:38:0d:
                    4c:e2:8e:d7:d2:fa:37:8f:64:af:77:a3:5c:ed:81:
                    6b:56:23:8f:95:d8:18:c5:a2:94:2c:64:ee:97:6b:
                    90:3c:ed:ec:f7:4f:98:c4:6c:c7:e8:7a:d0:50:a6:
                    7f:1b:ff:2d:8c:9d:33:be:25:9c:ae:e3:53:27:4e:
                    78:17:e6:2d:fd:1c:5e:2d:7e:a8:f6:38:22:aa:c0:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5A:32:E6:4E:0A:AC:1F:B4:D4:A3:FD:0E:54:2A:CD:F0:FE:A5:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/c82d7afd-fc6b-3f4d-b7de-b373b5f81778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl

            X509v3 Authority Key Identifier:
                keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7da:3a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:9b:21:4e:1c:86:37:c1:53:9e:8d:d7:61:9e:32:80:65:a2:
         05:66:0e:55:f5:9c:18:07:14:03:d1:2a:31:7e:3d:df:2d:88:
         0e:b9:f9:49:de:8c:fd:e2:bb:f1:66:3b:13:a7:25:7e:f6:03:
         81:35:3e:0f:18:c9:49:4b:50:03:35:8d:ed:26:e3:e7:89:8c:
         31:aa:37:e3:e5:45:f8:0e:cf:76:1b:a9:c1:eb:90:e8:98:ae:
         e5:fe:bf:95:66:31:c2:dc:d3:ec:6d:b2:7a:56:8d:c8:e6:03:
         b5:85:9a:f9:64:ad:f2:61:25:b6:81:36:a8:89:a8:7e:a2:df:
         65:aa:13:40:1d:9c:ee:66:8d:9e:ef:de:6e:79:18:4b:65:31:
         a0:b5:0b:48:1e:6a:37:46:3e:a0:49:ca:ed:fe:a0:d7:16:b0:
         86:d2:f5:13:d0:84:92:e9:3b:cf:94:08:1e:b1:12:a1:96:48:
         91:e2:de:4e:25:f6:38:6c:79:9a:a4:ba:09:39:92:70:11:71:
         0c:fb:58:73:07:75:d4:eb:dd:66:66:6e:d0:02:08:3a:59:e1:
         6c:60:36:6b:21:44:b1:fc:0d:8e:58:4b:e2:95:1c:e2:3d:13:
         b7:aa:9f:83:49:8b:8f:f8:0a:3d:56:2a:62:3f:64:eb:fa:5e:
         cf:ab:92:3e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz27N3YPjyjPZ4epwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYy
MzM0MB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk
NDIwZDFkY2UtYmJmMi00MzhiLTg2NGMtN2FmMjIxNWE1NzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYKWZq5HpNAGM43WNBm299kZiCChJr28+Tki
bmQHFUWatg8UCoLi2it7n3YRrN7yictvlhIJIxJK4y0a/V/T1198ImID58Id3vy2
rpY06vEP6YxvFMAXxFLq9XHj2kiqav/wpMiuizgh8Ys/UwJMUyEEu6IqN5xnvNLe
BR6YWACc/z4PZC9eSlP2tzJHnPsrpuL+Md33gmSOevqJWbHvBLl951Dy02u024AV
1feUgf0EOA1M4o7X0vo3j2Svd6Nc7YFrViOPldgYxaKULGTul2uQPO3s90+YxGzH
6HrQUKZ/G/8tjJ0zviWcruNTJ054F+Yt/RxeLX6o9jgiqsCXLQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCdaMuZOCqwftNSj/Q5UKs3w/qX8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zN2U2
OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvYzgyZDdhZmQtZmM2Yi0z
ZjRkLWI3ZGUtYjM3M2I1ZjgxNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzdlNjkzMzAtMzAyNC00MDZiLWI2
MGEtMGQ5NWUyNWYyMzM0LzM3ZTY5MzMwLTMwMjQtNDA2Yi1iNjBhLTBkOTVlMjVm
MjMzNC5jcmwwHwYDVR0jBBgwFoAUlxapq2aVPz8sQPwdM2OFp0XUZTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1
ZTI1ZjIzMzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL32gA6
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHabIU4chjfBU56N12GeMoBlogVmDlX1nBgHFAPRKjF+Pd8tiA65
+UnejP3iu/FmOxOnJX72A4E1Pg8YyUlLUAM1je0m4+eJjDGqN+PlRfgOz3YbqcHr
kOiYruX+v5VmMcLc0+xtsnpWjcjmA7WFmvlkrfJhJbaBNqiJqH6i32WqE0AdnO5m
jZ7v3m55GEtlMaC1C0geajdGPqBJyu3+oNcWsIbS9RPQhJLpO8+UCB6xEqGWSJHi
3k4l9jhseZqkugk5knARcQz7WHMHddTr3WZmbtACCDpZ4WxgNmshRLH8DY5YS+KV
HOI9E7eqn4NJi4/4Cj1WKmI/ZOv6Xs+rkj4=
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:11 2026 by rpki-client