Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2a45a639-abe6-396e-9150-a4cae7672b65.roa
File:                     2a45a639-abe6-396e-9150-a4cae7672b65.roa (raw, json)
Hash identifier:          tjS3z5NQ0xqVpUQWtdOEZYIn+OydF7yccAg1/bA+UjA=
Subject key identifier:   77:95:FA:65:52:AC:D7:BF:9B:A0:EA:84:06:D5:C0:E8:56:8B:DF:86
Certificate issuer:       /CN=5039f611-54f3-4a44-9153-55949e05704b
Certificate serial:       010D0C9F4328584D6C0FB82736C94F2BDADF5840
Authority key identifier: 9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2a45a639-abe6-396e-9150-a4cae7672b65.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     11004
IP address blocks:        2602:fa66::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:b8:27:36:c9:4f:2b:da:df:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5039f611-54f3-4a44-9153-55949e05704b
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=85921b81-ff80-42fb-933c-258ac4f68f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:d0:fc:0c:63:e8:8c:9f:39:06:10:2b:43:
                    91:3b:43:d1:62:cd:2a:1a:d9:44:75:d0:94:df:4f:
                    8c:53:8d:3f:73:0f:f3:2a:0e:04:74:f0:9d:41:35:
                    63:e8:9d:23:41:f9:57:b3:2d:32:03:ec:fc:89:dc:
                    9a:b2:44:ca:06:0c:c8:c7:b3:cf:78:0d:8c:b1:01:
                    62:be:ba:84:cd:91:24:96:be:44:2c:3c:20:bf:43:
                    37:47:f6:ff:21:67:e5:6d:67:05:9f:1b:50:d3:12:
                    f2:4b:a5:95:9f:29:7b:00:53:b3:84:52:1f:c1:2c:
                    92:07:63:bb:f7:e4:9a:90:cd:bf:b3:c4:b0:5a:b5:
                    ad:94:a6:c8:70:ae:80:3c:d7:03:55:0d:db:c9:aa:
                    07:0b:9d:2d:ea:07:d8:fe:b3:e6:8d:19:17:97:d9:
                    41:ee:28:f5:90:02:01:b5:a9:50:fd:17:96:49:43:
                    53:3d:fd:0e:39:67:f1:de:d2:5c:36:f0:e3:88:5c:
                    1c:6a:69:a5:dc:37:90:16:6c:ff:e1:54:63:46:1e:
                    86:a2:8a:00:30:1d:7d:8c:b3:dc:b5:d9:2f:d2:35:
                    a4:51:d7:8d:d3:2a:e8:bb:5f:30:a6:95:f1:a6:e4:
                    bc:63:bf:c0:66:9d:6e:08:a0:42:a7:80:26:4d:25:
                    23:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:95:FA:65:52:AC:D7:BF:9B:A0:EA:84:06:D5:C0:E8:56:8B:DF:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2a45a639-abe6-396e-9150-a4cae7672b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl

            X509v3 Authority Key Identifier:
                keyid:9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa66::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c5:30:c3:66:3f:6b:77:80:2b:38:51:3b:bd:4b:01:6f:b0:
         0f:6b:1f:1f:29:a8:ae:bc:e8:9d:41:76:b4:06:63:8b:7c:76:
         2e:cd:11:fe:13:c2:e3:6a:65:c1:76:b5:86:33:64:81:56:47:
         8e:bf:c3:07:20:d8:75:48:3d:d8:a1:03:17:1e:f0:c0:34:fc:
         55:48:0b:7e:49:85:93:7c:e4:b5:3a:35:ad:66:fc:bb:0f:3c:
         5f:0d:f9:6d:2a:ff:fc:24:46:11:ab:4f:7f:60:4e:e2:5c:2f:
         dc:3b:0e:0f:86:66:60:fd:0c:b5:25:19:c3:20:4e:8d:10:01:
         b2:5e:f8:0d:e8:85:9f:f7:3d:02:85:2f:0f:5b:31:bc:ae:27:
         3a:34:a5:c6:d1:36:3b:53:89:46:62:96:dd:a0:8f:67:53:e6:
         5d:ee:50:23:96:3e:39:ae:47:a6:f7:15:11:ce:8a:13:17:53:
         f2:28:10:ac:26:f1:66:13:fa:0c:c9:d5:e7:c2:97:77:31:b6:
         8e:47:1e:84:6f:63:76:cf:1e:8c:68:d2:4a:86:ee:36:22:36:
         b9:77:14:73:c4:c5:eb:81:34:51:ac:11:ad:10:d9:01:42:3e:
         f8:8c:f1:a1:c9:12:5a:97:80:8d:1c:fd:b2:f0:23:40:2f:af:
         7e:e1:54:f7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1sD7gnNslPK9rfWEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTAzOWY2MTEtNTRmMy00YTQ0LTkxNTMtNTU5NDllMDU3
MDRiMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk
ODU5MjFiODEtZmY4MC00MmZiLTkzM2MtMjU4YWM0ZjY4ZjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0jQ/Axj6IyfOQYQK0ORO0PRYs0qGtlEddCU
30+MU40/cw/zKg4EdPCdQTVj6J0jQflXsy0yA+z8idyaskTKBgzIx7PPeA2MsQFi
vrqEzZEklr5ELDwgv0M3R/b/IWflbWcFnxtQ0xLyS6WVnyl7AFOzhFIfwSySB2O7
9+SakM2/s8SwWrWtlKbIcK6APNcDVQ3byaoHC50t6gfY/rPmjRkXl9lB7ij1kAIB
talQ/ReWSUNTPf0OOWfx3tJcNvDjiFwcamml3DeQFmz/4VRjRh6GoooAMB19jLPc
tdkv0jWkUdeN0yrou18wppXxpuS8Y7/AZp1uCKBCp4AmTSUjRQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHeV+mVSrNe/m6DqhAbVwOhWi9+GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MDM5
ZjYxMS01NGYzLTRhNDQtOTE1My01NTk0OWUwNTcwNGIvMmE0NWE2MzktYWJlNi0z
OTZlLTkxNTAtYTRjYWU3NjcyYjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTAzOWY2MTEtNTRmMy00YTQ0LTkx
NTMtNTU5NDllMDU3MDRiLzUwMzlmNjExLTU0ZjMtNGE0NC05MTUzLTU1OTQ5ZTA1
NzA0Yi5jcmwwHwYDVR0jBBgwFoAUmzTH91h/g2BjZbWXystOcVbwZMEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81MDM5ZjYxMS01NGYzLTRhNDQtOTE1My01NTk0
OWUwNTcwNGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6ZgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVMUww2Y/a3eAKzhRO71LAW+wD2sfHymorrzonUF2tAZji3x2Ls0R
/hPC42plwXa1hjNkgVZHjr/DByDYdUg92KEDFx7wwDT8VUgLfkmFk3zktTo1rWb8
uw88Xw35bSr//CRGEatPf2BO4lwv3DsOD4ZmYP0MtSUZwyBOjRABsl74DeiFn/c9
AoUvD1sxvK4nOjSlxtE2O1OJRmKW3aCPZ1PmXe5QI5Y+Oa5HpvcVEc6KExdT8igQ
rCbxZhP6DMnV58KXdzG2jkcehG9jds8ejGjSSobuNiI2uXcUc8TF64E0UawRrRDZ
AUI++IzxockSWpeAjRz9svAjQC+vfuFU9w==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:41:24 2026 by rpki-client