Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/7670f1ac-ca98-3178-a90b-87f3e498b9a8.roa
File:                     7670f1ac-ca98-3178-a90b-87f3e498b9a8.roa (raw, json)
Hash identifier:          Nell4EP7eaTkL08/s7kwlqVTJh/c5I6+sGPeDZxkofI=
Subject key identifier:   F1:5E:34:D1:46:96:21:8F:9C:BF:2E:2B:35:AE:73:22:BE:E9:3F:2B
Certificate issuer:       /CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Certificate serial:       010D0C9F4328584D5E1A6BBB7D8035C91C49D270
Authority key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/7670f1ac-ca98-3178-a90b-87f3e498b9a8.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     46427
IP address blocks:        2602:2c1::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:6b:bb:7d:80:35:c9:1c:49:d2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=504d5fa7-5a26-4ca0-a161-8152fd3ea5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:59:7d:1a:23:e9:9b:70:a6:19:f9:f8:6b:32:
                    66:af:cf:d0:23:1c:9d:8b:da:ef:78:39:d8:53:e5:
                    a6:60:1f:41:a3:13:af:c9:6a:5c:ad:ae:fb:19:dc:
                    c1:69:68:7e:6e:73:36:57:69:09:c1:5e:24:50:80:
                    b8:7d:fb:09:4b:c6:e3:7c:af:4c:b1:a5:ba:b9:f3:
                    45:36:dc:2f:97:61:cc:95:24:3e:f3:db:4f:98:62:
                    02:13:94:82:33:59:fd:ce:01:20:1b:af:1b:27:62:
                    03:ab:01:4e:0d:65:a0:c5:2b:6c:3d:2d:a6:c8:59:
                    1e:d0:a1:db:0e:3c:d8:b6:20:57:5f:dd:6e:f2:65:
                    a2:16:9a:88:22:f3:63:8a:5b:81:b2:fe:16:58:ff:
                    a4:05:7b:ec:ed:93:84:f0:fd:33:1d:a4:08:58:2b:
                    99:c6:89:bb:2e:de:e3:b3:5e:98:3b:b2:c0:71:88:
                    1a:28:46:bc:81:47:4a:c1:6b:34:2a:01:0c:69:95:
                    2d:c6:ad:3c:20:45:75:2f:37:b1:ec:12:bd:8a:98:
                    19:5a:c2:38:2d:ca:a8:80:cd:6e:a8:64:ce:22:aa:
                    0f:33:24:00:81:36:4d:59:3e:51:be:ff:25:29:79:
                    98:a3:e8:54:e8:a7:3e:ed:71:f5:a7:d1:a9:1b:0d:
                    7a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5E:34:D1:46:96:21:8F:9C:BF:2E:2B:35:AE:73:22:BE:E9:3F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/7670f1ac-ca98-3178-a90b-87f3e498b9a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c9:77:27:5d:e2:4c:37:e7:97:d5:62:11:87:b0:de:62:e4:
         6c:09:81:45:94:18:a5:c1:68:cd:8c:31:0d:25:8d:04:de:ea:
         67:33:99:c5:92:e3:40:d1:57:11:ed:9b:4a:e2:3f:c2:6d:c2:
         6d:cc:ff:33:12:4c:e6:ce:e6:14:cd:b0:54:08:1b:76:17:99:
         94:d5:da:05:5b:e1:a1:e8:ca:3d:96:9c:14:ac:56:88:ca:4d:
         f1:38:09:e3:3b:eb:c6:0f:24:2c:32:89:f4:3e:ee:7a:53:e3:
         50:47:50:bc:10:5c:40:e9:4b:f6:89:2f:b4:37:1f:3e:d2:fb:
         87:f7:cd:1b:49:7e:0f:81:99:40:52:94:de:2d:6d:e9:68:7b:
         ba:bf:fa:1d:f8:e8:2b:0d:9c:70:c0:29:8a:c9:40:7c:7a:d3:
         5d:b7:b3:d8:33:c6:8f:ec:03:54:60:93:4f:f4:13:27:a2:1d:
         a2:d0:f5:cf:4c:57:2a:17:18:1c:f3:cf:61:de:5d:c6:9e:fb:
         11:64:c2:ea:e3:cb:f6:c5:a3:8e:c9:24:7c:aa:8a:d6:b1:2b:
         cb:88:57:36:b4:7c:74:91:cd:15:53:99:db:31:fa:73:a9:7b:
         90:61:cf:ed:7c:a5:e9:db:82:fd:74:fb:b9:39:64:ab:ea:16:
         55:62:ee:9c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1eGmu7fYA1yRxJ0nAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjgyZTVjMTAtYWVlNy00YzE5LWE4MjgtODQ5NzRmY2I4
YWMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
NTA0ZDVmYTctNWEyNi00Y2EwLWExNjEtODE1MmZkM2VhNWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVl9GiPpm3CmGfn4azJmr8/QIxydi9rveDnY
U+WmYB9BoxOvyWpcra77GdzBaWh+bnM2V2kJwV4kUIC4ffsJS8bjfK9MsaW6ufNF
Ntwvl2HMlSQ+89tPmGICE5SCM1n9zgEgG68bJ2IDqwFODWWgxStsPS2myFke0KHb
DjzYtiBXX91u8mWiFpqIIvNjiluBsv4WWP+kBXvs7ZOE8P0zHaQIWCuZxom7Lt7j
s16YO7LAcYgaKEa8gUdKwWs0KgEMaZUtxq08IEV1Lzex7BK9ipgZWsI4LcqogM1u
qGTOIqoPMyQAgTZNWT5Rvv8lKXmYo+hU6Kc+7XH1p9GpGw16KwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPFeNNFGliGPnL8uKzWucyK+6T8rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iODJl
NWMxMC1hZWU3LTRjMTktYTgyOC04NDk3NGZjYjhhYzIvNzY3MGYxYWMtY2E5OC0z
MTc4LWE5MGItODdmM2U0OThiOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjgyZTVjMTAtYWVlNy00YzE5LWE4
MjgtODQ5NzRmY2I4YWMyL2I4MmU1YzEwLWFlZTctNGMxOS1hODI4LTg0OTc0ZmNi
OGFjMi5jcmwwHwYDVR0jBBgwFoAUfHty1WJzWvEh92tWwACWUA0zzHAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iODJlNWMxMC1hZWU3LTRjMTktYTgyOC04NDk3
NGZjYjhhYzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgICwQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATsl3J13iTDfnl9ViEYew3mLkbAmBRZQYpcFozYwxDSWNBN7qZzOZ
xZLjQNFXEe2bSuI/wm3Cbcz/MxJM5s7mFM2wVAgbdheZlNXaBVvhoejKPZacFKxW
iMpN8TgJ4zvrxg8kLDKJ9D7uelPjUEdQvBBcQOlL9okvtDcfPtL7h/fNG0l+D4GZ
QFKU3i1t6Wh7ur/6HfjoKw2ccMApislAfHrTXbez2DPGj+wDVGCTT/QTJ6IdotD1
z0xXKhcYHPPPYd5dxp77EWTC6uPL9sWjjskkfKqK1rEry4hXNrR8dJHNFVOZ2zH6
c6l7kGHP7Xyl6duC/XT7uTlkq+oWVWLunA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:35:48 2026 by rpki-client