Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/3b3d4011-27b7-384a-a0b5-68c64f0848ce.roa
File:                     3b3d4011-27b7-384a-a0b5-68c64f0848ce.roa (raw, json)
Hash identifier:          +xYgzQWUkPipLvUhjgF8f30wM0ysfOwdf/ZTNEJ22Eg=
Subject key identifier:   5F:B0:ED:70:2A:B5:BD:7F:7F:38:F7:3A:43:95:3E:9F:DF:39:33:52
Certificate issuer:       /CN=b9ee24c4-7325-4cbe-8291-8c22f4eef30c
Certificate serial:       010D0C9F4328584E2809BA73D69351E2453B1DC0
Authority key identifier: FA:06:55:DD:F2:23:C4:68:D6:AE:16:EE:25:04:F2:9D:B9:5A:9E:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/3b3d4011-27b7-384a-a0b5-68c64f0848ce.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        2602:f517::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:ba:73:d6:93:51:e2:45:3b:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ee24c4-7325-4cbe-8291-8c22f4eef30c
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=afca5c9c-3d44-486d-b0ed-9ec365db88a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c5:91:f2:f7:d5:8d:82:81:bf:03:67:c1:88:
                    14:41:bf:5c:8d:49:41:e2:11:82:fa:9e:40:0f:78:
                    44:38:0d:d0:7e:5d:30:9c:9e:89:4c:93:04:fe:0d:
                    76:8d:f4:ad:b7:cb:6a:10:45:ce:f9:93:6c:94:af:
                    3a:86:ec:40:44:ad:19:b1:f9:0d:c8:82:6e:62:2b:
                    c7:23:f6:16:5e:6a:e8:89:66:cc:d9:ca:ed:59:40:
                    a6:7c:e6:00:f3:59:e6:c1:b7:08:91:3e:5c:a8:48:
                    11:e9:b1:d9:1d:33:83:da:47:7a:7e:5d:5b:3d:3d:
                    1e:8b:64:eb:f0:1d:14:39:87:3b:00:28:1a:30:fe:
                    5e:16:f6:01:9c:a2:f5:1a:f2:d1:d3:22:fe:d9:fd:
                    19:ad:90:51:d5:d0:c0:a8:8c:fd:cc:c9:46:88:f5:
                    7a:58:c1:eb:ee:42:d9:c2:5d:e4:45:3b:5f:4a:34:
                    6f:b3:cb:d3:c9:a1:3e:57:a6:a1:ad:4e:6f:99:b8:
                    26:86:09:ee:cb:97:e4:4e:08:ff:fc:7c:59:57:e7:
                    93:78:9b:39:3d:d9:78:27:95:88:c3:91:d9:5c:be:
                    2f:28:a3:fe:65:46:23:0b:4c:e4:0e:43:40:77:83:
                    d5:99:82:ac:b1:1c:11:ea:a1:70:f8:57:6b:b0:bc:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B0:ED:70:2A:B5:BD:7F:7F:38:F7:3A:43:95:3E:9F:DF:39:33:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/3b3d4011-27b7-384a-a0b5-68c64f0848ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:06:55:DD:F2:23:C4:68:D6:AE:16:EE:25:04:F2:9D:B9:5A:9E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f517::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:46:54:69:a2:38:4d:a6:f6:ce:b2:42:8f:13:c0:6a:53:13:
         e4:12:2c:1a:79:5f:d1:a9:94:a9:13:15:e7:5d:75:41:f4:77:
         10:52:11:50:e0:4b:ab:2c:eb:87:e2:a1:78:48:8a:56:33:a2:
         14:8d:b1:af:5f:3b:4b:75:03:91:b4:a5:8f:b0:37:0d:8f:80:
         78:50:d3:27:25:81:dc:5e:10:92:1a:16:e0:db:23:5b:a6:16:
         0e:3f:4d:72:43:8a:01:82:6e:9e:b8:73:45:61:09:be:4c:af:
         7c:38:e9:2c:b6:fa:c3:3b:b7:b9:54:77:50:6b:ff:72:93:b6:
         3e:91:6c:fe:9b:a1:68:9e:3b:20:51:13:b4:dc:8c:98:b6:92:
         62:47:68:68:a4:60:d7:b7:4d:65:c2:98:ba:b8:f3:07:a2:d1:
         e2:5c:cb:76:65:45:7b:81:e4:49:65:c1:59:ca:bd:9d:e4:2a:
         48:fd:58:91:f8:26:fd:73:28:28:51:a3:33:b8:c9:88:aa:b2:
         d7:d5:b3:b8:81:30:2a:5a:61:4c:e4:76:65:28:9e:e8:08:01:
         fc:22:35:dc:69:4d:76:df:da:52:9b:a8:e5:a3:97:e4:eb:66:
         99:78:64:00:e4:3f:4d:2c:78:f0:4c:0d:2e:da:ed:cc:af:aa:
         c8:8a:ab:bd
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4oCbpz1pNR4kU7HcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjllZTI0YzQtNzMyNS00Y2JlLTgyOTEtOGMyMmY0ZWVm
MzBjMB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk
YWZjYTVjOWMtM2Q0NC00ODZkLWIwZWQtOWVjMzY1ZGI4OGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sWR8vfVjYKBvwNnwYgUQb9cjUlB4hGC+p5A
D3hEOA3Qfl0wnJ6JTJME/g12jfStt8tqEEXO+ZNslK86huxARK0ZsfkNyIJuYivH
I/YWXmroiWbM2crtWUCmfOYA81nmwbcIkT5cqEgR6bHZHTOD2kd6fl1bPT0ei2Tr
8B0UOYc7ACgaMP5eFvYBnKL1GvLR0yL+2f0ZrZBR1dDAqIz9zMlGiPV6WMHr7kLZ
wl3kRTtfSjRvs8vTyaE+V6ahrU5vmbgmhgnuy5fkTgj//HxZV+eTeJs5Pdl4J5WI
w5HZXL4vKKP+ZUYjC0zkDkNAd4PVmYKssRwR6qFw+FdrsLyEVQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFF+w7XAqtb1/fzj3OkOVPp/fOTNSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iOWVl
MjRjNC03MzI1LTRjYmUtODI5MS04YzIyZjRlZWYzMGMvM2IzZDQwMTEtMjdiNy0z
ODRhLWEwYjUtNjhjNjRmMDg0OGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjllZTI0YzQtNzMyNS00Y2JlLTgy
OTEtOGMyMmY0ZWVmMzBjL2I5ZWUyNGM0LTczMjUtNGNiZS04MjkxLThjMjJmNGVl
ZjMwYy5jcmwwHwYDVR0jBBgwFoAU+gZV3fIjxGjWrhbuJQTynblanlgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9iOWVlMjRjNC03MzI1LTRjYmUtODI5MS04YzIy
ZjRlZWYzMGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1FwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAA0ZUaaI4Tab2zrJCjxPAalMT5BIsGnlf0amUqRMV5111QfR3EFIR
UOBLqyzrh+KheEiKVjOiFI2xr187S3UDkbSlj7A3DY+AeFDTJyWB3F4QkhoW4Nsj
W6YWDj9NckOKAYJunrhzRWEJvkyvfDjpLLb6wzu3uVR3UGv/cpO2PpFs/puhaJ47
IFETtNyMmLaSYkdoaKRg17dNZcKYurjzB6LR4lzLdmVFe4HkSWXBWcq9neQqSP1Y
kfgm/XMoKFGjM7jJiKqy19WzuIEwKlphTOR2ZSie6AgB/CI13GlNdt/aUpuo5aOX
5OtmmXhkAOQ/TSx48EwNLtrtzK+qyIqrvQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:14:53 2026 by rpki-client