Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/0c266f64-95af-3bd2-88bc-11fae1300adb.roa
File:                     0c266f64-95af-3bd2-88bc-11fae1300adb.roa (raw, json)
Hash identifier:          sxUTeEiKGJRtaqP1SyaI+dKzp52OtaHhSUmi59bGTVs=
Subject key identifier:   5F:7E:63:72:CE:38:B1:8B:FB:3E:54:8B:DF:5E:D4:F1:05:47:46:F1
Certificate issuer:       /CN=fa1ef48c-319b-4888-9b6e-efede6d159ca
Certificate serial:       010D0C9F4328584DE58082426B38584146D10900
Authority key identifier: EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/0c266f64-95af-3bd2-88bc-11fae1300adb.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     401323
IP address blocks:        2602:f83c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:82:42:6b:38:58:41:46:d1:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1ef48c-319b-4888-9b6e-efede6d159ca
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=dc2ee9e0-29c4-4829-8aa3-ddb81ac53121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:de:a6:2c:25:db:13:18:eb:5b:3d:bc:33:f2:
                    e1:54:38:63:c9:a4:58:a4:21:ca:68:4c:85:85:97:
                    0f:fe:0b:a1:95:a5:fd:8d:f1:4e:17:d5:9f:57:83:
                    88:a6:d1:13:88:e6:26:06:d6:ed:fa:9e:ff:95:20:
                    b3:1b:9a:09:92:6e:3a:4a:48:cc:5b:a5:b0:ab:8a:
                    6d:02:9b:44:f9:52:3e:58:16:00:7f:4f:06:45:b0:
                    9f:3b:de:3b:ab:44:bb:1e:6d:e4:ea:c3:96:61:b8:
                    3a:c9:4c:22:a4:f1:67:f7:33:20:bb:ae:db:e9:95:
                    d5:61:32:c9:3c:b7:d8:23:a3:fb:cc:1b:c0:fd:e0:
                    11:b1:75:15:6c:48:5e:36:7a:fc:19:c1:90:09:97:
                    23:5b:28:02:05:0e:8c:ab:f4:49:e2:66:0f:0d:3c:
                    18:8d:2f:f5:dc:c6:b1:6c:c4:2f:5f:52:29:83:41:
                    37:5b:47:9c:25:5e:4b:97:b6:c0:24:f9:e4:98:54:
                    2c:b8:db:8c:ad:57:4e:9a:d2:09:17:94:30:e5:2c:
                    c4:a3:e6:d2:79:ff:58:a4:12:5e:8b:09:dc:76:fb:
                    59:c8:c6:f9:e3:13:ef:ce:79:9a:ff:ad:fd:b0:11:
                    07:ae:82:2a:f7:35:de:6f:5e:d1:c4:4c:b6:bf:c6:
                    ed:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7E:63:72:CE:38:B1:8B:FB:3E:54:8B:DF:5E:D4:F1:05:47:46:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/0c266f64-95af-3bd2-88bc-11fae1300adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl

            X509v3 Authority Key Identifier:
                keyid:EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1d:a0:3f:3f:78:14:35:d7:58:14:c7:f6:49:ba:06:b6:23:
         72:f9:68:d6:05:77:d4:4a:ec:39:8a:ee:84:5c:44:8d:f8:6a:
         ed:40:c7:3d:08:84:62:c2:a0:e6:8d:df:43:a6:a3:39:c6:0b:
         d3:ca:be:5d:0e:8d:2c:8b:59:ab:0f:e8:ce:52:0f:56:9d:13:
         90:2d:4a:c3:e8:d3:a9:33:2a:fd:63:66:07:58:1b:a2:5f:b4:
         c8:b1:67:71:09:db:68:51:9b:54:4e:33:c5:9c:ce:5f:dd:f2:
         cb:e8:f2:2d:a0:0a:7d:66:5c:63:87:b5:ee:17:4c:95:cb:b2:
         93:78:f7:8d:f1:82:da:da:eb:ba:c5:9b:bc:a6:53:d5:74:df:
         1c:7a:12:73:cf:62:63:dc:e9:aa:29:be:e0:1d:9d:b1:0e:2e:
         73:de:33:cd:90:d9:cb:ce:8e:8b:58:b9:9c:72:eb:42:6e:1f:
         49:08:2e:56:c0:5f:c9:90:82:7e:05:37:ec:68:39:9f:fa:03:
         ad:5d:c5:15:d9:7c:5e:35:97:d6:83:dd:04:da:df:42:30:1e:
         bc:35:b9:65:71:53:87:6a:29:5c:82:db:7e:a0:60:b4:19:80:
         13:9d:84:4d:68:40:57:bf:16:2c:eb:f0:c8:45:36:81:3b:c1:
         c3:a0:81:36
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3lgIJCazhYQUbRCQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmExZWY0OGMtMzE5Yi00ODg4LTliNmUtZWZlZGU2ZDE1
OWNhMB4XDTI2MDUyMDEzMDAzMVoXDTI2MDgxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZGMyZWU5ZTAtMjljNC00ODI5LThhYTMtZGRiODFhYzUzMTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl96mLCXbExjrWz28M/LhVDhjyaRYpCHKaEyF
hZcP/guhlaX9jfFOF9WfV4OIptETiOYmBtbt+p7/lSCzG5oJkm46SkjMW6Wwq4pt
AptE+VI+WBYAf08GRbCfO947q0S7Hm3k6sOWYbg6yUwipPFn9zMgu67b6ZXVYTLJ
PLfYI6P7zBvA/eARsXUVbEheNnr8GcGQCZcjWygCBQ6Mq/RJ4mYPDTwYjS/13Max
bMQvX1Ipg0E3W0ecJV5Ll7bAJPnkmFQsuNuMrVdOmtIJF5Qw5SzEo+bSef9YpBJe
iwncdvtZyMb54xPvznma/639sBEHroIq9zXeb17RxEy2v8btmQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFF9+Y3LOOLGL+z5Ui99e1PEFR0bxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mYTFl
ZjQ4Yy0zMTliLTQ4ODgtOWI2ZS1lZmVkZTZkMTU5Y2EvMGMyNjZmNjQtOTVhZi0z
YmQyLTg4YmMtMTFmYWUxMzAwYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmExZWY0OGMtMzE5Yi00ODg4LTli
NmUtZWZlZGU2ZDE1OWNhL2ZhMWVmNDhjLTMxOWItNDg4OC05YjZlLWVmZWRlNmQx
NTljYS5jcmwwHwYDVR0jBBgwFoAU69nfBRO1I+Ljr3Q5iNELI2O6Xo8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mYTFlZjQ4Yy0zMTliLTQ4ODgtOWI2ZS1lZmVk
ZTZkMTU5Y2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4PAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAiB2gPz94FDXXWBTH9km6BrYjcvlo1gV31ErsOYruhFxEjfhq7UDH
PQiEYsKg5o3fQ6ajOcYL08q+XQ6NLItZqw/ozlIPVp0TkC1Kw+jTqTMq/WNmB1gb
ol+0yLFncQnbaFGbVE4zxZzOX93yy+jyLaAKfWZcY4e17hdMlcuyk3j3jfGC2trr
usWbvKZT1XTfHHoSc89iY9zpqim+4B2dsQ4uc94zzZDZy86Oi1i5nHLrQm4fSQgu
VsBfyZCCfgU37Gg5n/oDrV3FFdl8XjWX1oPdBNrfQjAevDW5ZXFTh2opXILbfqBg
tBmAE52ETWhAV78WLOvwyEU2gTvBw6CBNg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:03:42 2026 by rpki-client