Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/b019fe12-bb84-38a7-89c4-9595476d5af7.roa
File:                     b019fe12-bb84-38a7-89c4-9595476d5af7.roa (raw, json)
Hash identifier:          /XuXdxn/HbYH2eWJr66ppX7/Y9E3Q95ZNQXmd07oU2c=
Subject key identifier:   6A:E3:D0:AC:16:B9:4F:8E:69:48:8B:A4:6D:DE:17:07:D6:FC:06:56
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584D07ACEAD05737D1A668D513C0
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/b019fe12-bb84-38a7-89c4-9595476d5af7.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     38047
IP address blocks:        2602:f83b:1688::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:ea:d0:57:37:d1:a6:68:d5:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=9026dcd8-e746-4b05-838d-5560c9bb6745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:79:c3:79:87:e5:8a:49:2f:24:e9:cf:9c:57:
                    cf:69:22:a9:15:1e:1e:dc:6e:61:06:9f:47:03:04:
                    86:c5:d9:20:93:f8:06:52:0c:fd:89:94:c2:94:8f:
                    d3:e0:72:e1:83:3e:0c:28:2f:4a:10:00:2b:c6:36:
                    38:82:06:cc:db:66:6b:a8:14:8c:98:ba:e8:ed:87:
                    e4:18:db:4b:1f:d5:56:47:e3:a2:c8:38:65:ea:1a:
                    60:5b:6a:e6:98:07:68:33:39:2b:9f:5b:ac:f8:9b:
                    39:1d:59:b1:0d:5c:59:0e:32:5c:92:d7:3d:08:d6:
                    a4:c9:d7:4b:e4:07:1e:f3:1c:f1:19:60:8f:ec:1d:
                    8a:8c:44:95:8b:f4:9e:fb:7f:95:9e:ae:63:83:02:
                    74:79:20:68:88:37:9d:7f:ce:65:b8:52:2d:b6:77:
                    82:2c:75:c3:79:7f:80:48:c7:a1:31:b6:f6:fb:0b:
                    f3:fe:52:f6:a6:11:03:17:7e:ce:92:9a:d2:29:a7:
                    e2:53:e9:e4:42:3d:39:23:25:75:1d:28:29:27:ce:
                    18:64:bd:3b:bc:ae:15:0c:14:81:a4:ab:36:c2:56:
                    29:04:08:21:7f:bb:5a:50:11:99:30:fd:39:92:7e:
                    68:3d:3f:ef:22:21:0c:1e:93:09:b8:3e:1b:e8:40:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E3:D0:AC:16:B9:4F:8E:69:48:8B:A4:6D:DE:17:07:D6:FC:06:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/b019fe12-bb84-38a7-89c4-9595476d5af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:1688::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:e1:58:a7:38:c6:b3:2d:c4:a2:60:d4:8d:75:11:56:a4:dd:
         64:13:3e:c0:aa:35:83:95:29:ba:0e:64:39:f5:77:12:b7:78:
         75:5d:c7:46:af:0b:42:44:9f:9e:8d:87:e6:a8:b4:7c:45:16:
         3e:11:c8:2d:8c:2e:43:5c:82:2f:17:30:4c:be:ae:83:22:52:
         06:87:68:39:48:1f:72:6a:93:c1:69:e5:11:4d:f6:6e:e3:0c:
         25:76:ca:d8:05:8f:bc:a4:fc:bc:5f:29:0c:89:89:42:38:27:
         cb:85:5d:cf:2b:2d:ec:29:d9:f3:79:a4:0b:86:06:98:85:98:
         78:a5:ea:0c:a7:27:cf:5a:70:80:b0:9b:17:c2:6d:a7:ad:38:
         02:6b:3b:61:1f:66:39:58:ce:61:d3:ba:d3:2c:a0:95:16:d6:
         ce:47:2b:13:61:ef:d5:84:d7:8a:54:74:c5:bf:b5:5b:e8:58:
         a1:96:e8:a9:5e:99:6f:b9:f5:a2:13:cc:4c:07:32:74:69:6a:
         66:40:10:20:7e:f4:ad:0a:af:9b:89:34:ef:3f:6a:67:81:a2:
         77:05:0e:52:68:f4:38:02:da:0e:f6:0c:59:be:29:59:c4:4f:
         71:f4:78:c9:8e:af:af:e3:9c:fa:c2:23:5b:0e:f9:82:53:c2:
         f5:9c:16:18
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0HrOrQVzfRpmjVE8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk
MjYxMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
OTAyNmRjZDgtZTc0Ni00YjA1LTgzOGQtNTU2MGM5YmI2NzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3nDeYflikkvJOnPnFfPaSKpFR4e3G5hBp9H
AwSGxdkgk/gGUgz9iZTClI/T4HLhgz4MKC9KEAArxjY4ggbM22ZrqBSMmLro7Yfk
GNtLH9VWR+OiyDhl6hpgW2rmmAdoMzkrn1us+Js5HVmxDVxZDjJcktc9CNakyddL
5Ace8xzxGWCP7B2KjESVi/Se+3+Vnq5jgwJ0eSBoiDedf85luFIttneCLHXDeX+A
SMehMbb2+wvz/lL2phEDF37OkprSKafiU+nkQj05IyV1HSgpJ84YZL07vK4VDBSB
pKs2wlYpBAghf7taUBGZMP05kn5oPT/vIiEMHpMJuD4b6EAAtQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGrj0KwWuU+OaUiLpG3eFwfW/AZWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4
YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvYjAxOWZlMTItYmI4NC0z
OGE3LTg5YzQtOTU5NTQ3NmQ1YWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1
YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk
ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm
MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4OxaI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGzhWKc4xrMtxKJg1I11EVak3WQTPsCqNYOVKboOZDn1dxK3eHVd
x0avC0JEn56Nh+aotHxFFj4RyC2MLkNcgi8XMEy+roMiUgaHaDlIH3Jqk8Fp5RFN
9m7jDCV2ytgFj7yk/LxfKQyJiUI4J8uFXc8rLewp2fN5pAuGBpiFmHil6gynJ89a
cICwmxfCbaetOAJrO2EfZjlYzmHTutMsoJUW1s5HKxNh79WE14pUdMW/tVvoWKGW
6KlemW+59aITzEwHMnRpamZAECB+9K0Kr5uJNO8/ameBoncFDlJo9DgC2g72DFm+
KVnET3H0eMmOr6/jnPrCI1sO+YJTwvWcFhg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:11:12 2026 by rpki-client