Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/55ff741b-f74c-362b-b06e-de431f95a7e5.roa
File:                     55ff741b-f74c-362b-b06e-de431f95a7e5.roa (raw, json)
Hash identifier:          yNFxJ4Cs8XXyDNj41U5s4zWlwlNdZ1e33Ii4D68NxFk=
Subject key identifier:   96:5E:0A:B2:AC:4D:BF:63:B6:A7:B7:BC:15:96:6E:2D:5D:78:A0:D5
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F4328584D6AAA8F3DAAABA924E677B370
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/55ff741b-f74c-362b-b06e-de431f95a7e5.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     399883
IP address blocks:        2602:fc06:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:8f:3d:aa:ab:a9:24:e6:77:b3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=10a10c23-0391-4fec-8fe6-86b91f70fca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:8b:a1:ec:bd:c4:9d:50:6e:4e:39:45:96:
                    83:6a:88:92:00:56:fc:9e:d6:21:55:76:46:98:35:
                    35:eb:99:9a:3d:50:11:39:a3:96:bf:dc:1a:e5:05:
                    16:82:da:a0:ec:d3:cd:9c:b6:f1:ac:a3:a7:97:86:
                    45:c4:c0:ce:0e:28:8b:a9:93:ac:40:f6:10:09:cb:
                    e4:6f:25:2c:07:c2:76:8f:a6:bf:25:4b:49:8d:24:
                    1b:0d:aa:c2:fe:b8:df:e4:d7:45:a6:e9:73:f6:31:
                    93:7f:a5:8b:0f:72:38:7c:8c:43:2d:e0:81:a8:99:
                    53:be:83:f3:03:2a:11:5e:06:a9:d5:9f:f6:bf:68:
                    cd:74:7b:46:d8:a4:a0:e7:5a:fb:04:d6:80:e7:8f:
                    80:48:d5:e5:fd:1c:82:49:69:97:6b:7b:92:d9:ae:
                    f4:3e:cc:e9:d2:c7:25:4c:cb:79:b3:ea:cb:85:ec:
                    8c:31:a3:cb:9b:d8:51:dd:9f:99:2f:b9:41:39:23:
                    8a:c9:98:f7:ae:50:a0:06:45:82:44:0e:a9:2e:f4:
                    24:ce:30:0a:e1:5c:d3:f3:f6:09:a5:d2:61:ea:a6:
                    1f:04:5d:fa:f1:41:64:51:e9:b7:cb:8c:94:b5:d5:
                    ab:74:fe:40:77:5e:f6:bb:30:92:10:46:b7:e6:c2:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5E:0A:B2:AC:4D:BF:63:B6:A7:B7:BC:15:96:6E:2D:5D:78:A0:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/55ff741b-f74c-362b-b06e-de431f95a7e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc06:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e7:6f:80:69:00:b5:24:36:1f:6e:d9:84:2e:16:88:8b:64:
         4e:2f:e1:64:34:b7:a4:c6:db:2d:78:d6:c4:28:12:99:8f:50:
         de:21:bc:06:f4:d1:dd:f1:1c:0b:8f:f3:fb:3e:11:e9:89:8c:
         40:17:f5:67:93:61:05:01:3d:75:38:94:88:97:4e:2f:b0:74:
         33:e2:6d:e2:df:69:10:c4:35:dd:15:fd:17:a3:d6:18:b7:73:
         6c:4e:1f:cd:29:b5:b5:3f:63:23:26:5a:6b:1f:67:96:30:21:
         7a:d0:63:2c:bc:89:76:6b:d6:cc:75:17:42:57:81:97:e1:35:
         4c:3f:24:ce:f3:af:7b:06:d7:b6:4b:80:d8:cf:17:78:55:a4:
         70:d3:9d:c0:26:2b:64:64:d3:cb:92:08:dc:24:e5:9d:8b:77:
         d1:71:c6:e8:65:3f:bc:42:d4:2b:ac:f9:bb:4b:2b:e0:33:e6:
         fc:25:72:22:6d:ac:e2:32:08:88:77:8e:d2:25:06:c2:d6:10:
         39:4c:95:18:47:fb:4c:59:1b:31:7f:ca:7f:0a:92:19:ee:82:
         02:65:0b:59:85:8a:22:9c:50:99:7b:79:97:54:54:e4:60:2a:
         bc:f3:7d:c5:cf:91:1b:ba:49:92:38:71:bf:1a:59:84:64:ed:
         0d:6b:05:0b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1qqo89qqupJOZ3s3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUwOGUwZGUtYWI1ZS00ODgzLThmMDktN2Q5NTcwZjIw
MTg2MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
MTBhMTBjMjMtMDM5MS00ZmVjLThmZTYtODZiOTFmNzBmY2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+mLoey9xJ1Qbk45RZaDaoiSAFb8ntYhVXZG
mDU165maPVAROaOWv9wa5QUWgtqg7NPNnLbxrKOnl4ZFxMDODiiLqZOsQPYQCcvk
byUsB8J2j6a/JUtJjSQbDarC/rjf5NdFpulz9jGTf6WLD3I4fIxDLeCBqJlTvoPz
AyoRXgap1Z/2v2jNdHtG2KSg51r7BNaA54+ASNXl/RyCSWmXa3uS2a70Pszp0scl
TMt5s+rLheyMMaPLm9hR3Z+ZL7lBOSOKyZj3rlCgBkWCRA6pLvQkzjAK4VzT8/YJ
pdJh6qYfBF368UFkUem3y4yUtdWrdP5Ad172uzCSEEa35sIR3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJZeCrKsTb9jtqe3vBWWbi1deKDVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZTA4
ZTBkZS1hYjVlLTQ4ODMtOGYwOS03ZDk1NzBmMjAxODYvNTVmZjc0MWItZjc0Yy0z
NjJiLWIwNmUtZGU0MzFmOTVhN2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmUwOGUwZGUtYWI1ZS00ODgzLThm
MDktN2Q5NTcwZjIwMTg2LzZlMDhlMGRlLWFiNWUtNDg4My04ZjA5LTdkOTU3MGYy
MDE4Ni5jcmwwHwYDVR0jBBgwFoAU62igpaUyYfOMs5A+D0fqSS+zhlkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZTA4ZTBkZS1hYjVlLTQ4ODMtOGYwOS03ZDk1
NzBmMjAxODYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8BgAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAITnb4BpALUkNh9u2YQuFoiLZE4v4WQ0t6TG2y141sQoEpmPUN4h
vAb00d3xHAuP8/s+EemJjEAX9WeTYQUBPXU4lIiXTi+wdDPibeLfaRDENd0V/Rej
1hi3c2xOH80ptbU/YyMmWmsfZ5YwIXrQYyy8iXZr1sx1F0JXgZfhNUw/JM7zr3sG
17ZLgNjPF3hVpHDTncAmK2Rk08uSCNwk5Z2Ld9FxxuhlP7xC1Cus+btLK+Az5vwl
ciJtrOIyCIh3jtIlBsLWEDlMlRhH+0xZGzF/yn8KkhnuggJlC1mFiiKcUJl7eZdU
VORgKrzzfcXPkRu6SZI4cb8aWYRk7Q1rBQs=
-----END CERTIFICATE-----
Generated at Sun Apr 19 15:32:41 2026 by rpki-client