Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/fe490bdc-2de1-36ad-bcf0-46889237f409.roa
File:                     fe490bdc-2de1-36ad-bcf0-46889237f409.roa (raw, json)
Hash identifier:          kAqLAkwSUUv8uu4MCaD+AgTs7RTzZ/IAtiZco23oyfs=
Subject key identifier:   6F:66:D3:40:B6:51:ED:88:75:3B:75:22:E4:BE:A2:56:ED:A4:99:8B
Certificate issuer:       /CN=5039f611-54f3-4a44-9153-55949e05704b
Certificate serial:       010D0C9F4328584D6C0FB8424EBF051541B56480
Authority key identifier: 9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/fe490bdc-2de1-36ad-bcf0-46889237f409.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        2602:fa66::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:b8:42:4e:bf:05:15:41:b5:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5039f611-54f3-4a44-9153-55949e05704b
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=da40b3cc-eb26-4369-b450-11cf20c44aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2a:a2:6b:2c:8f:3f:e3:aa:70:fc:d7:17:8d:
                    23:bb:6b:c1:64:36:11:94:c5:06:06:23:5a:ae:d9:
                    c6:e3:59:00:66:af:3a:4e:74:61:16:73:9f:03:a0:
                    c2:43:4b:23:50:8d:e5:d2:c9:5c:e0:4c:34:ba:0c:
                    a9:46:fd:1e:44:82:ac:7e:9e:0c:b4:4a:17:39:db:
                    2e:16:99:27:ef:b4:58:5d:e6:6c:7c:24:06:c1:e5:
                    0d:92:75:95:d2:59:ff:a1:7f:9a:51:5c:80:0b:ab:
                    3d:89:c5:53:44:9e:7b:bc:78:4a:87:e0:22:6d:be:
                    6d:10:e8:b1:c5:e1:dc:30:df:f6:89:02:38:06:22:
                    ca:d9:e7:d6:e8:e6:3f:7b:f6:4a:40:e6:31:7e:ba:
                    a6:05:5a:29:1f:73:9f:ce:ef:7f:87:bf:2d:ab:14:
                    da:af:e7:7d:9b:77:18:6d:83:21:be:8f:4d:00:9b:
                    06:5b:8f:be:78:20:a5:9f:84:06:d1:f4:8e:af:d9:
                    7b:1c:09:75:44:de:ed:b5:b2:a9:d4:4a:af:0e:4e:
                    6c:e2:98:34:d1:d5:5e:3a:e2:f1:00:e4:ec:50:cb:
                    f1:b0:8d:c5:6c:18:35:1b:16:22:7b:da:77:20:ab:
                    6e:16:de:0b:6d:56:55:7c:2e:c6:74:30:a2:5a:93:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:66:D3:40:B6:51:ED:88:75:3B:75:22:E4:BE:A2:56:ED:A4:99:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/fe490bdc-2de1-36ad-bcf0-46889237f409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl

            X509v3 Authority Key Identifier:
                keyid:9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa66::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:8b:6d:5d:3e:d5:d6:5f:2a:aa:8b:45:4b:7b:0c:f5:3e:27:
         df:41:5e:2b:c3:54:81:b0:d8:a5:b3:33:f8:84:0f:8a:96:70:
         b1:fd:5c:5c:dd:0b:f9:e7:52:eb:25:d2:b1:40:e1:c8:cb:7f:
         aa:dc:50:e4:d0:3d:e1:3a:9e:6c:83:5c:b4:2f:c9:11:e5:58:
         1d:ae:1b:2c:af:82:92:79:78:d2:05:90:54:08:54:94:7b:f6:
         e8:6a:4f:a9:af:ce:be:f5:1a:a7:5f:b5:f1:f0:9e:bc:94:48:
         d3:88:cc:73:cc:50:d1:da:39:3b:6b:71:47:c2:00:05:ef:4c:
         88:f4:0b:aa:a0:6a:b5:29:84:20:a0:97:0d:d7:3e:ed:6b:99:
         1c:dd:59:86:99:b6:8f:e4:a1:80:54:91:27:7c:06:a6:bf:10:
         75:ff:f4:ec:95:f9:c9:1e:62:92:bd:09:53:7f:57:8f:5e:86:
         f1:b1:c6:39:a2:e8:86:38:88:97:a3:4f:42:81:7c:6c:f2:74:
         74:f8:5d:61:28:59:1b:96:93:51:21:cb:fe:16:2f:d5:f9:00:
         e3:ce:95:40:fc:b5:33:e6:cd:9f:ee:fe:31:03:86:45:78:aa:
         1b:5e:ca:22:d2:b1:19:0d:0d:17:b7:b7:7e:56:85:93:df:7a:
         08:26:37:dc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1sD7hCTr8FFUG1ZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTAzOWY2MTEtNTRmMy00YTQ0LTkxNTMtNTU5NDllMDU3
MDRiMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk
ZGE0MGIzY2MtZWIyNi00MzY5LWI0NTAtMTFjZjIwYzQ0YWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyqiayyPP+OqcPzXF40ju2vBZDYRlMUGBiNa
rtnG41kAZq86TnRhFnOfA6DCQ0sjUI3l0slc4Ew0ugypRv0eRIKsfp4MtEoXOdsu
Fpkn77RYXeZsfCQGweUNknWV0ln/oX+aUVyAC6s9icVTRJ57vHhKh+Aibb5tEOix
xeHcMN/2iQI4BiLK2efW6OY/e/ZKQOYxfrqmBVopH3Ofzu9/h78tqxTar+d9m3cY
bYMhvo9NAJsGW4++eCCln4QG0fSOr9l7HAl1RN7ttbKp1EqvDk5s4pg00dVeOuLx
AOTsUMvxsI3FbBg1GxYie9p3IKtuFt4LbVZVfC7GdDCiWpOYtwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFG9m00C2Ue2IdTt1IuS+olbtpJmLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MDM5
ZjYxMS01NGYzLTRhNDQtOTE1My01NTk0OWUwNTcwNGIvZmU0OTBiZGMtMmRlMS0z
NmFkLWJjZjAtNDY4ODkyMzdmNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTAzOWY2MTEtNTRmMy00YTQ0LTkx
NTMtNTU5NDllMDU3MDRiLzUwMzlmNjExLTU0ZjMtNGE0NC05MTUzLTU1OTQ5ZTA1
NzA0Yi5jcmwwHwYDVR0jBBgwFoAUmzTH91h/g2BjZbWXystOcVbwZMEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81MDM5ZjYxMS01NGYzLTRhNDQtOTE1My01NTk0
OWUwNTcwNGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6ZgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAqottXT7V1l8qqotFS3sM9T4n30FeK8NUgbDYpbMz+IQPipZwsf1c
XN0L+edS6yXSsUDhyMt/qtxQ5NA94TqebINctC/JEeVYHa4bLK+Cknl40gWQVAhU
lHv26GpPqa/OvvUap1+18fCevJRI04jMc8xQ0do5O2txR8IABe9MiPQLqqBqtSmE
IKCXDdc+7WuZHN1Zhpm2j+ShgFSRJ3wGpr8Qdf/07JX5yR5ikr0JU39Xj16G8bHG
OaLohjiIl6NPQoF8bPJ0dPhdYShZG5aTUSHL/hYv1fkA486VQPy1M+bNn+7+MQOG
RXiqG17KItKxGQ0NF7e3flaFk996CCY33A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:59:04 2026 by rpki-client