Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/20570a30-2951-3964-8c53-b4274dd2eabe.roa
File:                     20570a30-2951-3964-8c53-b4274dd2eabe.roa (raw, json)
Hash identifier:          4WhVucudQLa51p2Up0apYz4n9w4v7tSgrSlECOvjSe0=
Subject key identifier:   3B:44:62:84:D2:45:00:7E:90:2C:47:B2:2C:4A:8D:E5:D5:F9:F0:63
Certificate issuer:       /CN=aabbabc3-cafd-46c0-b90e-e44d061ba2a3
Certificate serial:       010D0C9F4328584E147EDCCD9821899521385980
Authority key identifier: 32:C7:97:1D:40:11:9A:A3:10:7D:7C:66:68:0F:11:BF:70:CC:0F:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/20570a30-2951-3964-8c53-b4274dd2eabe.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     401155
IP address blocks:        2602:819:8000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:dc:cd:98:21:89:95:21:38:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aabbabc3-cafd-46c0-b90e-e44d061ba2a3
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=cc1ea6d5-13a7-4e4b-882b-2ccd4f19de1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fc:75:a2:ba:d4:c6:b1:54:74:9e:01:85:cb:
                    97:38:34:c9:15:3f:6d:fb:9b:25:63:4c:05:69:74:
                    54:db:ea:52:a6:2a:3a:1f:9b:d9:7f:1f:d2:5c:d2:
                    d7:05:34:f2:cb:80:a9:68:c8:47:94:d2:c7:36:5b:
                    42:b1:80:59:08:3a:00:de:54:7f:93:0c:cc:31:92:
                    c6:08:14:7f:94:8d:a0:af:77:fc:c5:ab:1c:ce:90:
                    8d:c1:b1:c9:70:cd:2f:2f:f1:5c:7f:e3:03:b0:1b:
                    b3:fc:d2:19:6d:af:6c:03:ad:94:fa:79:d7:d8:11:
                    e8:eb:fb:0e:21:fe:65:82:94:9f:55:4f:07:2c:9d:
                    92:40:ab:5d:d2:16:91:a0:28:fd:51:d0:3f:62:79:
                    94:a2:c5:99:04:e3:ce:b8:2b:af:a1:98:d7:7b:95:
                    b2:43:78:a1:c8:44:ec:ea:f7:72:95:ad:16:d9:8b:
                    b6:54:32:f1:82:0f:82:35:5e:9d:1d:ed:50:61:b2:
                    12:8c:5d:73:44:fd:75:a0:23:dc:5e:af:6f:b4:f0:
                    3e:35:2a:7e:67:1e:53:29:12:dc:13:d3:06:89:ba:
                    ac:cb:4c:61:fb:54:bb:15:c5:67:09:51:86:75:88:
                    d4:b9:fe:fa:ca:e5:1f:07:23:2a:0e:86:97:e1:83:
                    eb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:44:62:84:D2:45:00:7E:90:2C:47:B2:2C:4A:8D:E5:D5:F9:F0:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/20570a30-2951-3964-8c53-b4274dd2eabe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.crl

            X509v3 Authority Key Identifier:
                keyid:32:C7:97:1D:40:11:9A:A3:10:7D:7C:66:68:0F:11:BF:70:CC:0F:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ac:1b:bd:21:e5:05:fd:11:3e:30:ee:ce:1a:08:9e:17:bc:
         59:6c:0a:f4:16:77:8c:e4:84:12:27:8a:d5:a2:39:4c:59:ec:
         a3:cd:9d:53:66:3f:34:f2:e6:24:33:08:96:44:cb:98:3b:e5:
         80:b0:6f:45:f2:ab:22:88:36:0c:a1:f6:b6:c9:c3:9b:f6:97:
         0f:4e:27:30:e2:11:ff:d3:9f:da:e4:81:8b:2d:7e:c0:5b:41:
         cb:bf:2c:81:ae:bb:6c:08:3e:4b:a7:4a:72:1d:79:e6:65:a3:
         2c:27:1a:f9:99:e5:48:99:62:6c:da:dd:97:d8:7a:f4:c8:83:
         70:91:95:77:ac:9c:e4:47:c6:a0:fa:27:66:d2:65:fc:03:72:
         b1:c1:8d:55:cf:db:cc:a8:63:b8:36:df:85:0b:6c:cd:05:c4:
         14:2d:0b:74:ff:dc:e6:76:a6:41:58:c3:1e:20:2e:4c:50:6b:
         53:d4:1c:95:c1:da:37:da:6c:dc:42:a3:d3:4c:5e:eb:b7:2b:
         49:f1:b9:15:b8:8a:72:e7:77:1f:cd:4f:27:c0:dd:11:ab:87:
         90:18:4c:66:ed:26:26:53:18:e6:c7:8c:33:06:33:32:9b:87:
         db:9c:1d:31:6f:c7:d0:d9:65:b5:a6:42:74:d5:e2:a5:05:e2:
         5c:74:92:d7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4UftzNmCGJlSE4WYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFiYmFiYzMtY2FmZC00NmMwLWI5MGUtZTQ0ZDA2MWJh
MmEzMB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk
Y2MxZWE2ZDUtMTNhNy00ZTRiLTg4MmItMmNjZDRmMTlkZTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPx1orrUxrFUdJ4BhcuXODTJFT9t+5slY0wF
aXRU2+pSpio6H5vZfx/SXNLXBTTyy4CpaMhHlNLHNltCsYBZCDoA3lR/kwzMMZLG
CBR/lI2gr3f8xasczpCNwbHJcM0vL/Fcf+MDsBuz/NIZba9sA62U+nnX2BHo6/sO
If5lgpSfVU8HLJ2SQKtd0haRoCj9UdA/YnmUosWZBOPOuCuvoZjXe5WyQ3ihyETs
6vdyla0W2Yu2VDLxgg+CNV6dHe1QYbISjF1zRP11oCPcXq9vtPA+NSp+Zx5TKRLc
E9MGibqsy0xh+1S7FcVnCVGGdYjUuf76yuUfByMqDoaX4YPr9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDtEYoTSRQB+kCxHsixKjeXV+fBjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hYWJi
YWJjMy1jYWZkLTQ2YzAtYjkwZS1lNDRkMDYxYmEyYTMvMjA1NzBhMzAtMjk1MS0z
OTY0LThjNTMtYjQyNzRkZDJlYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWFiYmFiYzMtY2FmZC00NmMwLWI5
MGUtZTQ0ZDA2MWJhMmEzL2FhYmJhYmMzLWNhZmQtNDZjMC1iOTBlLWU0NGQwNjFi
YTJhMy5jcmwwHwYDVR0jBBgwFoAUMseXHUARmqMQfXxmaA8Rv3DMD6cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hYWJiYWJjMy1jYWZkLTQ2YzAtYjkwZS1lNDRk
MDYxYmEyYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIGYAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHasG70h5QX9ET4w7s4aCJ4XvFlsCvQWd4zkhBInitWiOUxZ7KPN
nVNmPzTy5iQzCJZEy5g75YCwb0XyqyKINgyh9rbJw5v2lw9OJzDiEf/Tn9rkgYst
fsBbQcu/LIGuu2wIPkunSnIdeeZloywnGvmZ5UiZYmza3ZfYevTIg3CRlXesnORH
xqD6J2bSZfwDcrHBjVXP28yoY7g234ULbM0FxBQtC3T/3OZ2pkFYwx4gLkxQa1PU
HJXB2jfabNxCo9NMXuu3K0nxuRW4inLndx/NTyfA3RGrh5AYTGbtJiZTGObHjDMG
MzKbh9ucHTFvx9DZZbWmQnTV4qUF4lx0ktc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:54:03 2026 by rpki-client