Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4139eca6-6259-3ed1-890d-09f137a3cb89.roa
File:                     4139eca6-6259-3ed1-890d-09f137a3cb89.roa (raw, json)
Hash identifier:          n009i7Y5jqQoWEzldB9u6iXFxwdHzTfCEnxUeXUMgt0=
Subject key identifier:   F1:66:A5:D8:AB:86:57:66:D3:97:66:83:72:66:76:5A:CC:8B:BF:90
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584D00B249043F49B9FD3DFC0E00
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4139eca6-6259-3ed1-890d-09f137a3cb89.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     61112
IP address blocks:        2602:fa4f::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:49:04:3f:49:b9:fd:3d:fc:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=f876e2da-1bd6-436b-a88c-279992c297e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6f:43:c6:2e:85:4d:13:98:ec:58:3e:7d:c5:
                    de:af:2c:51:d5:9f:46:1a:f2:34:e6:b4:30:45:65:
                    b2:e6:2c:ab:5b:5b:5c:d4:8c:b1:91:76:e6:47:19:
                    9c:06:a3:ac:ed:7b:72:f0:d7:e6:4a:58:74:52:65:
                    09:06:67:ea:31:a9:3a:9d:04:e6:03:2e:b9:d3:24:
                    34:b1:bf:2d:0e:7a:41:74:f4:00:a1:dd:96:dd:67:
                    70:9a:31:44:32:c3:47:9d:ab:e7:92:f4:04:2a:d6:
                    ff:23:ec:87:18:55:ef:e8:60:64:37:a2:7f:7e:d4:
                    7c:f3:f1:0e:61:6a:46:6d:68:4f:85:d7:47:bb:5f:
                    4f:11:f6:0b:fa:8d:3c:16:2e:4e:2b:49:61:af:8a:
                    61:0f:8d:31:cb:91:9f:c8:e8:41:7c:88:7f:65:c4:
                    1e:3e:aa:f5:3b:22:78:78:b8:50:5d:97:3b:db:28:
                    a8:69:5a:0b:ca:26:8e:61:9f:21:37:77:d8:3d:7a:
                    14:d6:45:1d:73:2e:e6:71:ad:9b:fb:0a:4d:ef:3b:
                    6a:97:db:1b:b9:28:0d:c0:74:8f:cc:16:2c:03:09:
                    21:4b:f1:bd:78:d7:c9:69:fd:fc:aa:42:44:3c:39:
                    10:f2:6f:1d:21:de:92:d0:41:02:d1:37:60:7b:0b:
                    01:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:66:A5:D8:AB:86:57:66:D3:97:66:83:72:66:76:5A:CC:8B:BF:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4139eca6-6259-3ed1-890d-09f137a3cb89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:24:05:de:16:65:4a:b0:11:b4:08:f0:8e:c2:ff:92:81:c8:
         d9:f6:72:b8:5b:99:02:ad:54:92:dd:a0:36:8d:bc:83:2d:c2:
         1f:56:7e:60:90:96:b0:df:aa:d4:c2:e3:43:32:0d:2a:30:ed:
         6c:d1:30:f0:4b:71:4c:19:53:68:92:f1:a6:8f:1c:b8:17:0a:
         30:85:10:70:99:5d:d3:40:2f:e6:f3:7a:9b:7a:75:22:b9:84:
         9b:f5:72:64:7b:77:99:6a:59:7c:b8:46:8a:62:83:da:6b:a1:
         46:97:87:71:f9:68:95:7e:f4:87:9e:a8:b0:55:5a:51:7a:66:
         4c:5c:7b:8c:09:13:92:b6:aa:f1:43:0c:70:cc:15:0d:4c:98:
         42:08:9d:9a:92:d6:c0:34:bd:59:be:86:72:2c:a3:00:22:4f:
         c4:b8:85:02:dd:bc:6f:a7:7f:fb:91:e8:40:c2:be:fa:a4:11:
         d5:95:60:e4:af:87:e6:ed:df:6b:93:00:be:f9:08:97:c8:23:
         bd:04:99:92:f6:be:34:aa:ad:e0:e7:75:22:2f:9d:59:50:b7:
         e5:d5:4d:0c:48:d5:14:f5:a7:e8:84:0e:28:0b:3a:21:e3:10:
         de:f8:6b:a3:52:f1:b2:aa:96:66:d0:fe:ee:7f:df:89:1a:ee:
         9d:0b:b9:22
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0AskkEP0m5/T38DgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2
YmY3MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
Zjg3NmUyZGEtMWJkNi00MzZiLWE4OGMtMjc5OTkyYzI5N2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW9Dxi6FTROY7Fg+fcXeryxR1Z9GGvI05rQw
RWWy5iyrW1tc1IyxkXbmRxmcBqOs7Xty8NfmSlh0UmUJBmfqMak6nQTmAy650yQ0
sb8tDnpBdPQAod2W3WdwmjFEMsNHnavnkvQEKtb/I+yHGFXv6GBkN6J/ftR88/EO
YWpGbWhPhddHu19PEfYL+o08Fi5OK0lhr4phD40xy5GfyOhBfIh/ZcQePqr1OyJ4
eLhQXZc72yioaVoLyiaOYZ8hN3fYPXoU1kUdcy7mca2b+wpN7ztql9sbuSgNwHSP
zBYsAwkhS/G9eNfJaf38qkJEPDkQ8m8dId6S0EEC0TdgewsB+QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPFmpdirhldm05dmg3JmdlrMi7+QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4
ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvNDEzOWVjYTYtNjI1OS0z
ZWQxLTg5MGQtMDlmMTM3YTNjYjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1
ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2
NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4
ZTU2NjZiZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6TwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEApSQF3hZlSrARtAjwjsL/koHI2fZyuFuZAq1Ukt2gNo28gy3CH1Z+
YJCWsN+q1MLjQzINKjDtbNEw8EtxTBlTaJLxpo8cuBcKMIUQcJld00Av5vN6m3p1
IrmEm/VyZHt3mWpZfLhGimKD2muhRpeHcflolX70h56osFVaUXpmTFx7jAkTkraq
8UMMcMwVDUyYQgidmpLWwDS9Wb6GciyjACJPxLiFAt28b6d/+5HoQMK++qQR1ZVg
5K+H5u3fa5MAvvkIl8gjvQSZkva+NKqt4Od1Ii+dWVC35dVNDEjVFPWn6IQOKAs6
IeMQ3vhro1LxsqqWZtD+7n/fiRrunQu5Ig==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:31 2026 by rpki-client