Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/a8876c88-36b2-39b3-adc2-be4c05256fda.roa
File:                     a8876c88-36b2-39b3-adc2-be4c05256fda.roa (raw, json)
Hash identifier:          XLOiyIKa9vU+1g1ekFZci44mnmdNhhsGKy/EOzdX8PM=
Subject key identifier:   DD:94:89:52:37:53:9F:A6:04:B4:9B:9F:55:43:49:89:CF:E7:9F:73
Certificate issuer:       /CN=f2cc1c3b-d144-4350-8e42-9af4627c1cdf
Certificate serial:       010D0C9F4328584DFA82D450F2AC4EC6D18E6E00
Authority key identifier: DD:98:CA:96:11:81:EA:1C:37:97:5D:D9:9F:01:2A:4C:67:E6:06:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/a8876c88-36b2-39b3-adc2-be4c05256fda.roa
Signing time:             Thu 28 May 2026 01:37:16 +0000
ROA not before:           Thu 28 May 2026 01:37:16 +0000
ROA not after:            Wed 26 Aug 2026 01:37:16 +0000
asID:                     16509
IP address blocks:        2602:810:400d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:82:d4:50:f2:ac:4e:c6:d1:8e:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2cc1c3b-d144-4350-8e42-9af4627c1cdf
        Validity
            Not Before: May 28 01:37:16 2026 GMT
            Not After : Aug 26 01:37:16 2026 GMT
        Subject: CN=af682635-40b2-4cdc-a7f9-bcfc77a68274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d2:5f:dd:d7:9a:42:c4:31:a4:0f:05:34:7b:
                    92:55:56:06:d2:9f:db:41:d1:d0:29:e2:6d:bb:67:
                    f5:6a:53:f2:46:63:3e:b7:b5:2f:ea:d7:07:5c:05:
                    70:d4:ce:73:84:8e:12:0a:45:42:fc:6f:b2:33:8a:
                    0e:0e:98:4e:7b:bd:8d:3e:60:8c:4d:10:ea:00:20:
                    86:26:33:63:ee:9d:87:3f:1e:3b:a9:54:f4:57:d2:
                    c5:98:c3:1d:d2:ff:3e:cc:71:0b:f4:be:52:7c:75:
                    7e:f9:6a:a6:8f:5a:a4:7e:ac:e4:ee:9c:f3:19:5c:
                    13:2c:d7:0c:cc:f5:bc:ce:bc:da:ba:bf:97:a7:64:
                    ac:e1:ec:d2:16:64:44:ba:44:5e:24:be:d7:af:75:
                    10:f6:cb:e2:31:fe:7a:db:8a:de:f0:07:08:94:9f:
                    fc:60:19:2b:55:58:6d:ee:91:5b:10:3e:c5:a8:e8:
                    61:32:77:e6:a7:7d:c8:1c:c1:28:e0:48:53:e2:f1:
                    25:ff:7a:2e:29:84:58:c0:f0:1d:c1:fa:26:04:ae:
                    73:d3:78:33:13:15:3b:5b:60:26:46:e7:8e:f1:68:
                    39:a2:f9:96:22:3f:81:d3:0e:40:bd:4b:58:7e:d5:
                    58:51:28:e4:d6:a4:3c:c4:94:65:92:a8:bd:0d:ac:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:94:89:52:37:53:9F:A6:04:B4:9B:9F:55:43:49:89:CF:E7:9F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/a8876c88-36b2-39b3-adc2-be4c05256fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:98:CA:96:11:81:EA:1C:37:97:5D:D9:9F:01:2A:4C:67:E6:06:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:400d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:0c:9e:e3:4c:64:da:fb:98:90:97:09:af:0a:ab:93:76:f2:
         48:67:21:62:2e:4f:48:3b:19:a8:d4:57:14:d3:fc:4d:bc:2b:
         ce:48:12:db:3f:83:e0:28:42:e1:ad:bd:d9:dd:f8:4a:8e:76:
         92:3e:3c:a5:3a:66:1d:a2:33:dc:96:51:d5:b2:15:52:d9:2d:
         66:2f:27:a6:45:2b:8f:39:de:76:f3:79:f0:90:96:54:71:a7:
         c8:39:91:70:c1:eb:d3:d1:45:fc:96:45:35:d4:8c:7d:53:47:
         89:a5:a9:a0:a5:25:c5:f7:36:b4:bd:4e:d8:a3:30:7a:25:73:
         67:8a:38:6b:9c:a4:5a:b1:44:58:65:5c:98:a5:32:d2:7f:4b:
         af:1a:7c:06:01:11:62:70:79:09:ee:31:4b:ed:a5:27:f8:96:
         2c:00:97:c8:e1:d9:db:88:5b:1d:f9:72:ef:f0:f0:af:e7:54:
         f5:50:1a:20:3a:05:c5:f9:94:ce:de:52:b6:01:dd:38:d6:7e:
         f2:c9:2a:22:53:06:b0:f3:11:c7:bc:89:61:bf:50:8c:f6:5c:
         90:59:ab:69:97:90:88:1e:cf:22:88:2a:6e:22:57:45:cf:00:
         5c:a1:36:f1:d2:c9:f4:da:94:01:42:35:e2:8e:13:50:3e:64:
         c8:05:02:0e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE36gtRQ8qxOxtGObgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJjYzFjM2ItZDE0NC00MzUwLThlNDItOWFmNDYyN2Mx
Y2RmMB4XDTI2MDUyODAxMzcxNloXDTI2MDgyNjAxMzcxNlowLzEtMCsGA1UEAxMk
YWY2ODI2MzUtNDBiMi00Y2RjLWE3ZjktYmNmYzc3YTY4Mjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdJf3deaQsQxpA8FNHuSVVYG0p/bQdHQKeJt
u2f1alPyRmM+t7Uv6tcHXAVw1M5zhI4SCkVC/G+yM4oODphOe72NPmCMTRDqACCG
JjNj7p2HPx47qVT0V9LFmMMd0v8+zHEL9L5SfHV++Wqmj1qkfqzk7pzzGVwTLNcM
zPW8zrzaur+Xp2Ss4ezSFmREukReJL7Xr3UQ9sviMf5624re8AcIlJ/8YBkrVVht
7pFbED7FqOhhMnfmp33IHMEo4EhT4vEl/3ouKYRYwPAdwfomBK5z03gzExU7W2Am
RueO8Wg5ovmWIj+B0w5AvUtYftVYUSjk1qQ8xJRlkqi9DawllQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN2UiVI3U5+mBLSbn1VDSYnP559zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mMmNj
MWMzYi1kMTQ0LTQzNTAtOGU0Mi05YWY0NjI3YzFjZGYvYTg4NzZjODgtMzZiMi0z
OWIzLWFkYzItYmU0YzA1MjU2ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjJjYzFjM2ItZDE0NC00MzUwLThl
NDItOWFmNDYyN2MxY2RmL2YyY2MxYzNiLWQxNDQtNDM1MC04ZTQyLTlhZjQ2Mjdj
MWNkZi5jcmwwHwYDVR0jBBgwFoAU3ZjKlhGB6hw3l13ZnwEqTGfmBpMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mMmNjMWMzYi1kMTQ0LTQzNTAtOGU0Mi05YWY0
NjI3YzFjZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIEEAN
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKQMnuNMZNr7mJCXCa8Kq5N28khnIWIuT0g7GajUVxTT/E28K85I
Ets/g+AoQuGtvdnd+EqOdpI+PKU6Zh2iM9yWUdWyFVLZLWYvJ6ZFK4853nbzefCQ
llRxp8g5kXDB69PRRfyWRTXUjH1TR4mlqaClJcX3NrS9TtijMHolc2eKOGucpFqx
RFhlXJilMtJ/S68afAYBEWJweQnuMUvtpSf4liwAl8jh2duIWx35cu/w8K/nVPVQ
GiA6BcX5lM7eUrYB3TjWfvLJKiJTBrDzEce8iWG/UIz2XJBZq2mXkIgezyKIKm4i
V0XPAFyhNvHSyfTalAFCNeKOE1A+ZMgFAg4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:15:53 2026 by rpki-client