Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/0a5257bb-5fbd-343a-b7fb-ee958cab0aee.roa
File:                     0a5257bb-5fbd-343a-b7fb-ee958cab0aee.roa (raw, json)
Hash identifier:          R5Pj0PlosRyIWg/nal0ppEsrNpVi03g36r0X7WistTg=
Subject key identifier:   CC:AF:5A:0A:35:13:C5:79:E2:3F:A6:5C:17:A0:A5:67:12:CD:11:66
Certificate issuer:       /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial:       010D0C9F4328584DD8F06DC6F710607FC4855CD0
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/0a5257bb-5fbd-343a-b7fb-ee958cab0aee.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     399805
IP address blocks:        2602:fc88::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:6d:c6:f7:10:60:7f:c4:85:5c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=f2523fbb-d90d-4860-8214-6096489515f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:63:fa:ba:0c:00:44:73:b2:b1:9c:ea:cd:da:
                    0b:65:41:ba:df:7f:11:e1:28:88:31:26:b1:35:39:
                    97:62:b6:8d:38:3a:5a:a0:05:9f:d5:3f:7c:12:fe:
                    94:f0:58:37:82:05:2a:c9:b3:96:aa:6a:84:f1:aa:
                    a7:ff:5e:7d:78:f2:31:4d:26:8a:49:e3:db:f6:cf:
                    13:31:8a:e3:8b:27:6a:76:74:79:e8:84:10:60:52:
                    67:93:3a:49:34:bb:0f:f1:d8:08:37:0b:4e:3e:66:
                    87:6c:d8:ed:a8:72:29:72:d2:d5:93:cc:f4:1d:73:
                    f5:67:0d:cb:1d:30:5d:dc:d3:9d:90:63:b2:81:fc:
                    07:a6:5e:c3:12:73:c6:8d:6c:6a:4f:c2:75:88:32:
                    9e:42:35:dd:96:ce:e1:03:83:92:20:6d:1d:c3:62:
                    c7:0b:2c:50:3f:90:d7:12:66:54:42:52:6a:8a:a5:
                    d8:1f:61:f3:e8:d3:25:81:9f:8f:94:40:dc:ac:7e:
                    61:8f:69:af:5e:ad:30:b5:53:3d:11:72:e2:95:55:
                    bf:94:95:db:f8:9b:1c:ce:0c:dc:62:70:1d:59:cf:
                    2a:8c:76:bd:01:80:d0:fa:da:9f:dc:0b:78:61:1b:
                    d7:50:6b:5d:62:75:e2:06:0a:9a:5b:0c:86:0b:58:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AF:5A:0A:35:13:C5:79:E2:3F:A6:5C:17:A0:A5:67:12:CD:11:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/0a5257bb-5fbd-343a-b7fb-ee958cab0aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl

            X509v3 Authority Key Identifier:
                keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc88::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:46:f5:dd:77:c5:73:6f:14:27:35:4a:cd:3b:31:36:8d:f3:
         d2:22:33:0d:1b:94:a3:7c:c5:69:ef:3c:33:2a:b7:3a:8a:2e:
         c1:4c:ad:7f:4e:ef:2b:0d:12:61:ed:38:77:c7:5d:f4:9d:89:
         41:e2:d1:20:1e:da:cd:3d:b8:08:a5:69:08:ea:14:0c:86:75:
         73:35:9e:9a:3f:49:7a:90:e6:a1:29:1d:b1:f8:ea:82:bc:5b:
         27:69:02:c8:46:9a:dd:d1:8f:6a:9f:16:93:96:f3:02:0c:93:
         7f:a5:15:bd:2a:c8:48:3f:a2:76:6e:59:10:40:4b:6a:c4:b8:
         2e:91:a7:6c:26:8d:20:60:cc:7e:e5:b7:d4:3b:88:cb:9f:3f:
         51:fe:c7:ad:d8:21:6b:43:2f:96:0b:0a:cf:26:45:29:a4:3e:
         97:da:6e:45:00:a3:f8:fa:74:b0:13:ff:7c:27:80:ed:fc:af:
         8b:d0:38:d7:a9:a5:41:6f:c4:5a:f9:f2:9e:79:23:d3:f5:2e:
         6e:ed:21:92:fb:42:18:95:fe:86:fc:0f:9e:00:f4:99:6e:59:
         75:fe:c9:b0:a5:8a:85:5c:fc:87:f3:12:a6:60:2d:80:26:c2:
         e9:44:22:28:7d:83:e7:d5:87:da:bb:c3:aa:6b:f2:37:f5:b8:
         8c:45:37:c8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3Y8G3G9xBgf8SFXNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi
Mzk1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk
ZjI1MjNmYmItZDkwZC00ODYwLTgyMTQtNjA5NjQ4OTUxNWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGP6ugwARHOysZzqzdoLZUG6338R4SiIMSax
NTmXYraNODpaoAWf1T98Ev6U8Fg3ggUqybOWqmqE8aqn/159ePIxTSaKSePb9s8T
MYrjiydqdnR56IQQYFJnkzpJNLsP8dgINwtOPmaHbNjtqHIpctLVk8z0HXP1Zw3L
HTBd3NOdkGOygfwHpl7DEnPGjWxqT8J1iDKeQjXdls7hA4OSIG0dw2LHCyxQP5DX
EmZUQlJqiqXYH2Hz6NMlgZ+PlEDcrH5hj2mvXq0wtVM9EXLilVW/lJXb+Jsczgzc
YnAdWc8qjHa9AYDQ+tqf3At4YRvXUGtdYnXiBgqaWwyGC1jq4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMyvWgo1E8V54j+mXBegpWcSzRFmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1
NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvMGE1MjU3YmItNWZiZC0z
NDNhLWI3ZmItZWU5NThjYWIwYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk
M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk
YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk
NWZiZGIzOTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8iAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGdG9d13xXNvFCc1Ss07MTaN89IiMw0blKN8xWnvPDMqtzqKLsFM
rX9O7ysNEmHtOHfHXfSdiUHi0SAe2s09uAilaQjqFAyGdXM1npo/SXqQ5qEpHbH4
6oK8WydpAshGmt3Rj2qfFpOW8wIMk3+lFb0qyEg/onZuWRBAS2rEuC6Rp2wmjSBg
zH7lt9Q7iMufP1H+x63YIWtDL5YLCs8mRSmkPpfabkUAo/j6dLAT/3wngO38r4vQ
ONeppUFvxFr58p55I9P1Lm7tIZL7QhiV/ob8D54A9JluWXX+ybClioVc/IfzEqZg
LYAmwulEIih9g+fVh9q7w6pr8jf1uIxFN8g=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:11:56 2026 by rpki-client