Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa
File:                     1e64ffdf-9888-3fb9-9826-b212648077cd.roa (raw, json)
Hash identifier:          OvhgYWwxEyJTOq0pkyrUau/zxwlg2bE2DFe7/+weDD0=
Subject key identifier:   0D:0D:DC:87:D6:11:F3:AF:9F:C7:A5:B2:86:72:38:11:51:BE:68:42
Certificate issuer:       /CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
Certificate serial:       010D0C9F4328584D07ACFE6E61D40FF739210D00
Authority key identifier: FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     21991
IP address blocks:        2602:fbcf::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:fe:6e:61:d4:0f:f7:39:21:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=f184870e-0d6b-4852-8a86-a1ec9803468b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:6b:b5:dc:39:00:ed:c7:1e:0f:2c:c5:5d:
                    f5:39:ad:1b:d9:09:cd:86:06:a0:f9:a1:d3:60:bc:
                    27:37:f8:4f:8c:b3:2c:e6:bb:de:05:89:c1:5b:4f:
                    a2:67:41:2d:9d:c8:60:4f:96:77:83:31:ae:f3:e0:
                    81:f5:60:3d:58:47:84:67:63:ab:48:ba:19:6d:82:
                    1c:5a:3a:1a:21:31:e6:11:0b:45:4a:23:da:fa:89:
                    df:51:e1:71:28:c1:8d:c9:b2:30:2b:c8:6c:3b:fc:
                    ac:9b:3f:c9:7b:e2:db:ae:12:91:ab:d6:d0:2c:53:
                    fb:6f:fd:ac:06:f9:61:0d:ae:54:ee:74:9e:d1:af:
                    42:b8:5b:92:90:ea:a3:f1:54:7d:67:8b:06:43:68:
                    d8:3f:6f:21:8d:67:50:71:51:a5:ee:3e:bb:70:e9:
                    74:c7:5e:76:7a:f3:89:d5:9e:9c:cc:76:4c:19:ee:
                    9e:38:20:8f:4b:ee:a2:49:01:10:1d:56:e5:cc:f5:
                    ee:4d:7e:cb:82:bb:b3:dd:e2:66:6e:e2:e9:20:fd:
                    ed:79:cb:de:2a:0a:18:90:87:dc:1d:fa:51:12:4f:
                    c1:26:e1:82:02:0f:6e:85:5e:8e:5d:5e:ed:6c:0c:
                    46:9f:27:2e:20:b8:39:51:a3:70:9e:79:1b:ef:00:
                    fe:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0D:DC:87:D6:11:F3:AF:9F:C7:A5:B2:86:72:38:11:51:BE:68:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl

            X509v3 Authority Key Identifier:
                keyid:FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcf::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:9b:d1:c0:d6:a2:e5:55:07:21:60:dc:36:45:68:0b:11:ac:
         4f:e6:25:68:91:c9:a2:42:31:13:11:3b:c2:1d:57:d6:73:6e:
         6d:e0:d9:10:f7:8b:11:ee:72:f9:60:13:71:fd:0b:4b:76:2f:
         76:42:56:58:56:2c:7b:be:c2:6e:96:9b:d2:86:14:71:b2:74:
         6b:3c:09:0a:d8:0f:f9:d2:8f:90:13:fe:82:14:28:db:1f:4d:
         ac:ee:8b:cc:10:08:60:89:42:1c:b9:50:7b:32:97:07:fe:4e:
         73:e9:2e:8d:df:00:5a:16:fa:6e:81:e7:ac:f6:4e:71:4f:eb:
         29:c4:54:fe:2e:3f:5c:a1:1b:30:03:09:f9:c1:41:5c:d6:72:
         22:fc:96:0a:08:a8:38:38:80:d1:8d:66:d4:52:cc:e0:ee:14:
         22:a3:c4:34:f0:28:22:45:16:c8:53:5d:ce:25:96:78:d8:f8:
         d2:53:3d:85:3a:c4:eb:7b:3b:ec:4e:4a:59:6f:8c:06:72:48:
         be:52:57:8f:a0:61:6c:a4:16:39:79:88:71:9e:89:0b:38:3e:
         3a:fd:b8:ca:71:97:94:4a:4e:8c:2d:e6:02:12:9f:9e:37:2c:
         41:3c:80:8b:f0:42:66:a6:0e:e9:b1:6e:d2:30:03:9b:6b:ca:
         9e:ac:22:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0HrP5uYdQP9zkhDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWFlZmRkODAtMzVjZi00N2IxLTk0NWEtNWZhYjkyYzlk
YTk1MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
ZjE4NDg3MGUtMGQ2Yi00ODUyLThhODYtYTFlYzk4MDM0NjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmblrtdw5AO3HHg8sxV31Oa0b2QnNhgag+aHT
YLwnN/hPjLMs5rveBYnBW0+iZ0EtnchgT5Z3gzGu8+CB9WA9WEeEZ2OrSLoZbYIc
WjoaITHmEQtFSiPa+onfUeFxKMGNybIwK8hsO/ysmz/Je+LbrhKRq9bQLFP7b/2s
BvlhDa5U7nSe0a9CuFuSkOqj8VR9Z4sGQ2jYP28hjWdQcVGl7j67cOl0x152evOJ
1Z6czHZMGe6eOCCPS+6iSQEQHVblzPXuTX7Lgruz3eJmbuLpIP3tecveKgoYkIfc
HfpREk/BJuGCAg9uhV6OXV7tbAxGnycuILg5UaNwnnkb7wD+PwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA0N3IfWEfOvn8elsoZyOBFRvmhCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYWVm
ZGQ4MC0zNWNmLTQ3YjEtOTQ1YS01ZmFiOTJjOWRhOTUvMWU2NGZmZGYtOTg4OC0z
ZmI5LTk4MjYtYjIxMjY0ODA3N2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWFlZmRkODAtMzVjZi00N2IxLTk0
NWEtNWZhYjkyYzlkYTk1L2VhZWZkZDgwLTM1Y2YtNDdiMS05NDVhLTVmYWI5MmM5
ZGE5NS5jcmwwHwYDVR0jBBgwFoAU/BfPhpD7I/vmAe3lCgQNrBW7RfIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYWVmZGQ4MC0zNWNmLTQ3YjEtOTQ1YS01ZmFi
OTJjOWRhOTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL7zwAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEib0cDWouVVByFg3DZFaAsRrE/mJWiRyaJCMRMRO8IdV9Zzbm3g
2RD3ixHucvlgE3H9C0t2L3ZCVlhWLHu+wm6Wm9KGFHGydGs8CQrYD/nSj5AT/oIU
KNsfTazui8wQCGCJQhy5UHsylwf+TnPpLo3fAFoW+m6B56z2TnFP6ynEVP4uP1yh
GzADCfnBQVzWciL8lgoIqDg4gNGNZtRSzODuFCKjxDTwKCJFFshTXc4llnjY+NJT
PYU6xOt7O+xOSllvjAZySL5SV4+gYWykFjl5iHGeiQs4Pjr9uMpxl5RKTowt5gIS
n543LEE8gIvwQmamDumxbtIwA5tryp6sIn4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:11 2026 by rpki-client