Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa
File:                     57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa (raw, json)
Hash identifier:          xh2isRvzFffoDNZMbiyRZFX78E/6wfwX5c9eX31gJMU=
Subject key identifier:   A8:72:7B:3F:6C:6D:EA:B5:A3:7B:F2:68:A0:3C:9B:87:E0:48:D1:0D
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F4328584D0647ADD0FD22903C918066C0
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa
Signing time:             Sun 01 Mar 2026 14:00:41 +0000
ROA not before:           Sun 01 Mar 2026 14:00:41 +0000
ROA not after:            Sat 30 May 2026 13:00:41 +0000
asID:                     29802
IP address blocks:        2602:f972:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:47:ad:d0:fd:22:90:3c:91:80:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Mar  1 14:00:41 2026 GMT
            Not After : May 30 13:00:41 2026 GMT
        Subject: CN=32416290-eb0b-430e-a72c-2c2eab28c929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:b1:c9:a9:18:73:9f:80:ca:e6:0e:89:93:
                    bf:63:9e:69:5f:a1:8a:45:44:d5:d1:d3:d8:35:ba:
                    02:32:05:a1:98:58:7a:50:4e:66:2f:db:dd:13:c1:
                    d5:39:f4:98:69:a1:01:42:ab:e4:90:c9:65:88:78:
                    b7:47:39:fa:cd:cc:dd:55:1d:ef:a0:f8:0d:87:75:
                    d5:af:56:dc:d7:d7:e3:ed:5e:4e:71:0a:8e:e8:22:
                    91:bd:cd:77:99:b7:c2:5f:b7:4b:48:f3:48:06:bd:
                    5c:e6:79:7d:cb:1b:a7:81:e7:07:8c:fd:80:16:67:
                    a9:e0:56:6d:7d:bc:5e:b7:eb:b8:80:45:02:da:b0:
                    f0:e5:47:fe:8d:06:a8:60:0a:7b:c0:ec:5f:3e:e7:
                    9f:56:36:80:00:f6:9d:54:a9:f6:e9:db:bf:99:d7:
                    88:18:3f:13:37:9a:f9:91:6d:e4:ce:f8:4f:ef:9c:
                    05:1b:06:b2:24:43:8b:f8:d6:82:18:e1:07:2f:a8:
                    cc:be:fe:4f:f8:dc:a6:0e:98:0e:47:2b:c5:2f:79:
                    d7:e9:c7:14:a2:d5:70:44:c5:6c:e3:03:9b:63:51:
                    e1:04:29:77:d4:5b:d2:25:ae:ec:55:3a:3a:24:02:
                    55:99:e4:58:dc:13:23:54:33:99:ea:74:70:5e:0f:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:72:7B:3F:6C:6D:EA:B5:A3:7B:F2:68:A0:3C:9B:87:E0:48:D1:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:78:6f:ff:83:11:c9:ea:91:d4:b1:3d:84:f8:74:55:c0:dd:
         84:f6:d4:6d:49:aa:b4:77:67:8c:e9:9c:aa:e6:b5:79:8a:e9:
         ef:ff:0a:97:4d:4e:42:94:bc:14:ec:7a:f7:64:7f:e6:4f:10:
         8c:af:e7:cf:ab:19:35:c7:6b:c6:34:4c:55:4d:79:1d:50:0e:
         87:2d:e6:91:2c:f8:1a:7f:fd:88:e7:99:fc:8b:69:8b:bf:c5:
         94:72:ad:bb:45:48:38:2f:40:ad:98:33:2c:36:48:76:c7:f3:
         b1:51:38:5f:4e:e9:f4:a9:51:7b:d7:c5:89:68:09:d0:2d:9f:
         4f:c8:97:bf:25:08:19:bb:2e:de:ff:28:0b:84:ea:eb:a6:5c:
         37:2f:53:ab:36:9c:c3:0d:41:6f:87:9b:08:dc:02:ec:80:f2:
         20:eb:49:49:f1:12:25:ad:80:7d:0d:6f:29:e8:b5:35:2e:38:
         6a:2e:5c:b3:51:8c:b1:d2:9d:a2:a2:85:16:83:35:3d:e6:63:
         f6:62:52:21:50:15:15:24:07:e6:7a:65:f0:b2:04:bb:a7:d1:
         c3:24:29:e9:b2:7e:96:e2:1d:df:5b:3b:09:90:3a:14:d7:ef:
         36:e6:a8:02:2e:3e:18:82:28:1f:44:bf:7b:28:54:a1:85:70:
         22:fa:49:de
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0GR63Q/SKQPJGAZsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGNmYzQzNzAtNTBhMC00ZGE2LTliMTktZWVhM2ExOTg4
Njg4MB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk
MzI0MTYyOTAtZWIwYi00MzBlLWE3MmMtMmMyZWFiMjhjOTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwGxyakYc5+AyuYOiZO/Y55pX6GKRUTV0dPY
NboCMgWhmFh6UE5mL9vdE8HVOfSYaaEBQqvkkMlliHi3Rzn6zczdVR3voPgNh3XV
r1bc19fj7V5OcQqO6CKRvc13mbfCX7dLSPNIBr1c5nl9yxungecHjP2AFmep4FZt
fbxet+u4gEUC2rDw5Uf+jQaoYAp7wOxfPuefVjaAAPadVKn26du/mdeIGD8TN5r5
kW3kzvhP75wFGwayJEOL+NaCGOEHL6jMvv5P+NymDpgORyvFL3nX6ccUotVwRMVs
4wObY1HhBCl31FvSJa7sVTo6JAJVmeRY3BMjVDOZ6nRwXg/vSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKhyez9sbeq1o3vyaKA8m4fgSNENMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84Y2Zj
NDM3MC01MGEwLTRkYTYtOWIxOS1lZWEzYTE5ODg2ODgvNTdhMWNkNWYtMmRhMS0z
OWRkLWI5ZWItNmJkNGYxMDQxNDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGNmYzQzNzAtNTBhMC00ZGE2LTli
MTktZWVhM2ExOTg4Njg4LzhjZmM0MzcwLTUwYTAtNGRhNi05YjE5LWVlYTNhMTk4
ODY4OC5jcmwwHwYDVR0jBBgwFoAU0wDD/F4XeXXk80J9t9Naj5SRmzwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84Y2ZjNDM3MC01MGEwLTRkYTYtOWIxOS1lZWEz
YTE5ODg2ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5cgAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIp4b/+DEcnqkdSxPYT4dFXA3YT21G1JqrR3Z4zpnKrmtXmK6e//
CpdNTkKUvBTsevdkf+ZPEIyv58+rGTXHa8Y0TFVNeR1QDoct5pEs+Bp//YjnmfyL
aYu/xZRyrbtFSDgvQK2YMyw2SHbH87FROF9O6fSpUXvXxYloCdAtn0/Il78lCBm7
Lt7/KAuE6uumXDcvU6s2nMMNQW+HmwjcAuyA8iDrSUnxEiWtgH0NbynotTUuOGou
XLNRjLHSnaKihRaDNT3mY/ZiUiFQFRUkB+Z6ZfCyBLun0cMkKemyfpbiHd9bOwmQ
OhTX7zbmqAIuPhiCKB9Ev3soVKGFcCL6Sd4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:28 2026 by rpki-client