Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/8739209d-0492-3814-9eef-35e5f7d13167.roa
File:                     8739209d-0492-3814-9eef-35e5f7d13167.roa (raw, json)
Hash identifier:          PBMv4VI0fvu527y5NLOZR6/79pivnJdpCQrK30TFZ50=
Subject key identifier:   92:3A:81:B0:DA:BA:E1:B0:BF:22:26:B5:8E:75:F8:DC:F5:C0:6B:7F
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F4328584D60E50A17BBBE94327E47D200
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/8739209d-0492-3814-9eef-35e5f7d13167.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     30690
IP address blocks:        2602:f99b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:0a:17:bb:be:94:32:7e:47:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=46450f57-8870-4951-81fc-aff62943165e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:3a:64:48:27:f0:b2:5d:f6:c4:f9:c9:2c:
                    fe:c3:2c:7c:f2:6a:ff:20:d2:67:6d:b1:4b:34:30:
                    8f:81:3b:10:0a:58:c6:f4:3e:8b:9a:27:a3:60:bc:
                    e7:4b:e3:09:68:0a:d2:ad:99:3a:b0:14:db:48:65:
                    cc:62:90:a9:87:37:4d:e9:bb:4f:37:2f:21:2e:ed:
                    5a:32:1f:3a:52:50:4f:39:cf:44:76:e7:78:ff:46:
                    c2:7b:1c:89:6c:51:a1:11:a2:ab:cd:4d:57:cd:f9:
                    7e:49:d4:01:67:2d:c6:99:7d:6b:42:8d:bd:a6:63:
                    77:66:44:9d:97:a3:67:4d:2e:52:97:a2:7a:11:fa:
                    f9:6d:28:e5:c4:59:6d:d8:b8:9d:f6:25:2f:e8:b4:
                    72:91:35:61:dd:29:b1:ac:10:22:4e:a3:bc:d9:c5:
                    ca:ae:a1:e6:06:cf:a3:ba:ef:39:bc:71:ee:75:3e:
                    22:f2:99:c4:58:f2:9b:15:97:8a:2f:04:31:63:27:
                    19:27:4f:d5:65:f3:15:18:a2:86:7f:a5:13:a6:37:
                    cc:fd:69:53:08:c1:25:66:c1:2c:52:92:8e:77:cc:
                    35:a9:a9:03:be:59:2d:57:ea:54:30:de:ef:ca:88:
                    65:7c:02:ad:28:4d:0f:aa:ce:79:84:63:a1:f2:82:
                    69:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3A:81:B0:DA:BA:E1:B0:BF:22:26:B5:8E:75:F8:DC:F5:C0:6B:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/8739209d-0492-3814-9eef-35e5f7d13167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:6d:4d:1e:c9:bb:ad:da:1a:a0:dd:a3:0a:e1:f8:ca:ac:0b:
         57:65:76:22:5a:63:4b:18:d0:89:cc:1b:96:d8:2a:73:6b:cf:
         b8:e6:75:05:47:8e:fa:06:3b:c4:cc:cc:76:53:0a:dc:49:b0:
         d0:8e:fa:a2:8a:f3:ca:e1:80:a6:bc:0a:46:27:84:18:02:25:
         80:34:7d:2a:01:92:0b:40:82:95:0a:09:a2:8d:08:34:c2:b3:
         1f:11:39:8a:71:39:de:3d:1a:3f:3c:03:55:53:ef:ad:c1:ea:
         14:11:f0:76:30:8d:48:40:5b:2f:8e:42:26:93:b9:a5:77:1e:
         5a:c0:aa:c8:fa:76:4e:1f:bf:a5:46:87:e3:a1:af:52:a0:75:
         de:a9:e7:72:84:2c:55:4d:8a:a7:65:6c:4d:23:bb:60:d7:48:
         5f:b3:07:cd:3a:48:58:f7:98:d9:26:cd:ac:cd:9e:58:a0:fa:
         8f:73:8c:85:66:9b:40:2c:74:b7:04:89:be:13:b8:6d:a4:15:
         f6:68:d6:d2:99:8b:a1:f6:fd:57:a5:12:ac:a3:55:de:60:cb:
         a1:07:e3:f3:13:1a:35:f9:6e:40:dd:e2:00:8c:cf:63:f8:9c:
         2e:64:11:cd:d2:8a:4c:33:90:45:c0:77:00:01:2c:f5:5a:e9:
         47:34:ca:d5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1g5QoXu76UMn5H0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM1ZmMyM2EtZTQyMi00YzYxLWEyNWEtYjczYjA5NjNi
NmY3MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk
NDY0NTBmNTctODg3MC00OTUxLTgxZmMtYWZmNjI5NDMxNjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobE6ZEgn8LJd9sT5ySz+wyx88mr/INJnbbFL
NDCPgTsQCljG9D6LmiejYLznS+MJaArSrZk6sBTbSGXMYpCphzdN6btPNy8hLu1a
Mh86UlBPOc9Edud4/0bCexyJbFGhEaKrzU1Xzfl+SdQBZy3GmX1rQo29pmN3ZkSd
l6NnTS5Sl6J6Efr5bSjlxFlt2Lid9iUv6LRykTVh3SmxrBAiTqO82cXKrqHmBs+j
uu85vHHudT4i8pnEWPKbFZeKLwQxYycZJ0/VZfMVGKKGf6UTpjfM/WlTCMElZsEs
UpKOd8w1qakDvlktV+pUMN7vyohlfAKtKE0Pqs55hGOh8oJpyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJI6gbDauuGwvyImtY51+Nz1wGt/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMzVm
YzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNiMDk2M2I2ZjcvODczOTIwOWQtMDQ5Mi0z
ODE0LTllZWYtMzVlNWY3ZDEzMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjM1ZmMyM2EtZTQyMi00YzYxLWEy
NWEtYjczYjA5NjNiNmY3L2IzNWZjMjNhLWU0MjItNGM2MS1hMjVhLWI3M2IwOTYz
YjZmNy5jcmwwHwYDVR0jBBgwFoAUjS9eZJw3d6zMTnUYB7+cZ2lqHf4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMzVmYzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNi
MDk2M2I2ZjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5mwAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFFtTR7Ju63aGqDdowrh+MqsC1dldiJaY0sY0InMG5bYKnNrz7jm
dQVHjvoGO8TMzHZTCtxJsNCO+qKK88rhgKa8CkYnhBgCJYA0fSoBkgtAgpUKCaKN
CDTCsx8ROYpxOd49Gj88A1VT763B6hQR8HYwjUhAWy+OQiaTuaV3HlrAqsj6dk4f
v6VGh+Ohr1Kgdd6p53KELFVNiqdlbE0ju2DXSF+zB806SFj3mNkmzazNnlig+o9z
jIVmm0AsdLcEib4TuG2kFfZo1tKZi6H2/VelEqyjVd5gy6EH4/MTGjX5bkDd4gCM
z2P4nC5kEc3SikwzkEXAdwABLPVa6Uc0ytU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:04 2026 by rpki-client