Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/396df5c8-94c4-3cd8-b9cf-03ad9706a71f.roa
File:                     396df5c8-94c4-3cd8-b9cf-03ad9706a71f.roa (raw, json)
Hash identifier:          bj+ONzB8TzG3FegfZWUTFcmgEZsoBlxjfyTLigLgTLo=
Subject key identifier:   9C:B0:30:82:2D:46:94:68:8E:D8:3B:51:1D:16:BC:9B:FF:AC:F4:85
Certificate issuer:       /CN=b1b35dc3-b096-40ba-8edf-87e481b625c4
Certificate serial:       010D0C9F4328584E070098AFE220537A6F73FB80
Authority key identifier: 2E:74:CD:6B:0B:BB:49:7B:EF:E2:32:E4:BB:DA:A2:98:54:EB:C6:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/396df5c8-94c4-3cd8-b9cf-03ad9706a71f.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     393559
IP address blocks:        2602:f8c8:600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/b1b35dc3-b096-40ba-8edf-87e481b625c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/b1b35dc3-b096-40ba-8edf-87e481b625c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:98:af:e2:20:53:7a:6f:73:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1b35dc3-b096-40ba-8edf-87e481b625c4
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=0e1d1118-bc58-4f09-96ce-4883cb93a98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:3b:67:6d:07:44:15:7f:7d:62:ce:03:58:
                    f8:39:f7:1f:d5:d2:c4:14:ff:5e:c1:26:f6:8b:9a:
                    cc:8d:f5:a2:1d:36:3b:cb:f1:93:b5:7b:b6:f0:67:
                    5f:d4:7e:3e:d9:ea:d5:96:d9:d5:a9:a3:02:9e:02:
                    b8:1e:18:7c:6c:5f:2f:e7:99:4f:3e:71:c2:c3:b7:
                    54:ce:84:4c:d7:d7:51:66:5e:26:e2:ae:da:15:3d:
                    02:2a:c1:8b:b1:3f:f6:07:09:e7:ec:3b:08:bd:1c:
                    f7:1b:54:88:1d:ed:63:37:4d:be:08:52:df:a3:57:
                    74:25:fa:eb:16:c9:f2:a4:22:b2:17:1a:97:7f:2b:
                    59:0f:fa:0d:45:e0:f2:4c:83:6a:46:19:15:88:e6:
                    cb:3b:b8:4d:b0:d5:d2:ff:84:bc:d2:be:31:a6:de:
                    16:3c:3c:a6:29:fc:79:35:8f:91:8e:9e:26:1e:6e:
                    2f:2d:da:1c:f0:0e:16:b1:bd:b3:a2:e6:a0:d1:b0:
                    33:31:d4:88:b4:51:d5:fa:90:55:96:7b:be:92:44:
                    17:89:bd:5a:23:f7:16:96:98:4c:80:84:2d:af:3a:
                    49:76:e3:c3:09:4d:35:48:a4:3c:8d:9f:9c:b5:b9:
                    3f:6d:4e:4d:31:0a:77:85:1f:10:5a:7e:ac:fe:b7:
                    ca:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B0:30:82:2D:46:94:68:8E:D8:3B:51:1D:16:BC:9B:FF:AC:F4:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/396df5c8-94c4-3cd8-b9cf-03ad9706a71f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/b1b35dc3-b096-40ba-8edf-87e481b625c4.crl

            X509v3 Authority Key Identifier:
                keyid:2E:74:CD:6B:0B:BB:49:7B:EF:E2:32:E4:BB:DA:A2:98:54:EB:C6:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8c8:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:bd:97:82:ed:7f:6b:e8:50:aa:87:90:05:40:23:c3:a1:2a:
         26:de:3c:11:2a:85:be:c2:25:32:1e:be:c9:84:2f:c8:46:5c:
         dd:dc:60:fa:88:1b:0d:20:d3:99:c4:6a:b0:ee:00:39:9b:95:
         70:a2:a8:a9:44:75:69:00:b7:65:bc:d1:84:b6:27:ac:e3:61:
         85:b6:ed:58:d0:35:85:ca:43:5c:ca:c4:04:2a:59:e2:7c:e1:
         d7:87:ba:c1:05:1a:1d:2a:14:32:f3:66:48:1e:ae:a7:a9:f4:
         25:fa:f3:fe:6f:39:da:e7:7d:e1:54:7d:d6:7a:86:6d:33:7b:
         3d:c8:45:1b:19:04:55:8a:6c:a6:d1:cd:16:44:d6:3c:37:ac:
         e9:2b:16:8f:3a:ee:6c:31:fd:1a:7c:a1:fd:9e:82:ac:b0:47:
         dc:5f:28:c1:9b:f6:11:25:27:da:7a:4f:d0:8e:d0:11:09:b4:
         3c:fa:c2:ae:98:56:1e:06:b2:27:ef:f7:a9:dc:dc:8c:cf:1e:
         6b:bb:19:96:34:a7:98:f6:10:62:1f:a1:26:a5:d1:22:2c:a9:
         dc:6f:3a:3e:ca:48:31:38:58:90:3f:92:51:e0:a8:e9:1f:5c:
         3f:fa:71:f4:a2:9b:a5:21:f3:6d:27:db:c9:b6:6b:b3:36:6d:
         aa:59:5d:dd
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4HAJiv4iBTem9z+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFiMzVkYzMtYjA5Ni00MGJhLThlZGYtODdlNDgxYjYy
NWM0MB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk
MGUxZDExMTgtYmM1OC00ZjA5LTk2Y2UtNDg4M2NiOTNhOThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/s7Z20HRBV/fWLOA1j4Ofcf1dLEFP9ewSb2
i5rMjfWiHTY7y/GTtXu28Gdf1H4+2erVltnVqaMCngK4Hhh8bF8v55lPPnHCw7dU
zoRM19dRZl4m4q7aFT0CKsGLsT/2Bwnn7DsIvRz3G1SIHe1jN02+CFLfo1d0Jfrr
FsnypCKyFxqXfytZD/oNReDyTINqRhkViObLO7hNsNXS/4S80r4xpt4WPDymKfx5
NY+Rjp4mHm4vLdoc8A4Wsb2zouag0bAzMdSItFHV+pBVlnu+kkQXib1aI/cWlphM
gIQtrzpJduPDCU01SKQ8jZ+ctbk/bU5NMQp3hR8QWn6s/rfKUQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJywMIItRpRojtg7UR0WvJv/rPSFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iMWIz
NWRjMy1iMDk2LTQwYmEtOGVkZi04N2U0ODFiNjI1YzQvMzk2ZGY1YzgtOTRjNC0z
Y2Q4LWI5Y2YtMDNhZDk3MDZhNzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjFiMzVkYzMtYjA5Ni00MGJhLThl
ZGYtODdlNDgxYjYyNWM0L2IxYjM1ZGMzLWIwOTYtNDBiYS04ZWRmLTg3ZTQ4MWI2
MjVjNC5jcmwwHwYDVR0jBBgwFoAULnTNawu7SXvv4jLku9qimFTrxuswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iMWIzNWRjMy1iMDk2LTQwYmEtOGVkZi04N2U0
ODFiNjI1YzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4yAYw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAO72Xgu1/a+hQqoeQBUAjw6EqJt48ESqFvsIlMh6+yYQvyEZc3dxg
+ogbDSDTmcRqsO4AOZuVcKKoqUR1aQC3ZbzRhLYnrONhhbbtWNA1hcpDXMrEBCpZ
4nzh14e6wQUaHSoUMvNmSB6up6n0Jfrz/m852ud94VR91nqGbTN7PchFGxkEVYps
ptHNFkTWPDes6SsWjzrubDH9Gnyh/Z6CrLBH3F8owZv2ESUn2npP0I7QEQm0PPrC
rphWHgayJ+/3qdzcjM8ea7sZljSnmPYQYh+hJqXRIiyp3G86PspIMThYkD+SUeCo
6R9cP/px9KKbpSHzbSfbybZrszZtqlld3Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:57 2026 by rpki-client