Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa
File:                     3ad9037d-cc4e-3a46-981a-715e438d4f71.roa (raw, json)
Hash identifier:          VDtwSk6auQ78flJ4zLMq52GgUP2rzmQ1Na4Rigy6FT4=
Subject key identifier:   37:B9:9E:6A:BC:F9:07:32:4C:12:EE:8B:16:5E:E3:5D:DD:C8:A6:EA
Certificate issuer:       /CN=cd7304e1-3bc1-43c1-b035-93ee027063db
Certificate serial:       010D0C9F4328584D83CAAF3CC2D22B23F18C3980
Authority key identifier: EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     48231
IP address blocks:        2602:fa93::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:af:3c:c2:d2:2b:23:f1:8c:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7304e1-3bc1-43c1-b035-93ee027063db
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=c6f681dc-b0ae-40da-80fa-549025bedc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:2b:a4:1e:59:a3:1d:f6:94:6b:c5:b1:80:
                    dc:82:22:21:de:de:36:0a:52:88:90:1d:5e:3a:be:
                    fa:e3:0e:33:b9:ae:90:c7:6e:4f:d8:a1:5c:5e:21:
                    02:a0:37:b6:6a:a8:ed:23:22:cf:83:11:e8:76:61:
                    62:57:7b:67:c3:94:d6:1d:cd:c6:a4:3b:ef:b0:6a:
                    fd:ba:13:b6:db:4b:7e:ed:69:6e:18:83:72:ce:2a:
                    07:62:d0:58:9a:3e:d7:03:b2:da:6a:2d:66:8b:3e:
                    f5:ce:d6:4a:86:b7:f3:c8:dc:f2:4c:d8:1e:53:a3:
                    6e:ff:a4:e2:e2:da:75:7d:6f:82:56:2d:b5:12:33:
                    3f:d4:48:c7:3d:71:94:c9:7d:52:49:4a:98:04:96:
                    26:8f:d2:be:a4:68:04:74:a9:f8:2b:5a:82:1a:12:
                    20:f3:d6:f4:fd:fe:76:af:7d:f6:15:87:4f:7e:31:
                    af:10:3b:06:f7:bc:ab:3b:30:dc:2f:bd:fc:29:eb:
                    e2:93:27:58:d8:6f:0a:82:66:0f:4d:39:c6:00:7d:
                    bf:50:37:c1:15:d8:cd:50:c7:5e:86:76:79:72:06:
                    65:a0:13:6f:62:64:da:20:38:8b:8b:9a:94:3a:c7:
                    cf:2e:8a:5c:39:32:dc:64:cf:f6:a3:17:57:0b:a7:
                    52:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B9:9E:6A:BC:F9:07:32:4C:12:EE:8B:16:5E:E3:5D:DD:C8:A6:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl

            X509v3 Authority Key Identifier:
                keyid:EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa93::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:4b:2a:be:97:f9:95:9e:f5:aa:6e:42:60:dd:e4:98:23:d3:
         fd:76:12:5e:0b:47:1d:a3:0d:70:e9:c1:85:ff:cb:0f:3d:1f:
         0f:f2:8b:e1:08:ab:fa:2d:c3:63:1e:23:6b:4a:62:5b:3d:90:
         30:49:3e:8f:df:fa:21:50:b4:87:d1:79:e7:ca:9f:bd:18:30:
         b8:e9:be:49:d6:9d:6a:f2:5b:9b:80:00:81:5b:b6:61:13:f8:
         4c:3d:22:57:24:d6:bd:90:dd:95:88:55:77:8d:d5:30:db:f4:
         31:88:c4:55:73:80:19:52:5e:4b:37:c6:b2:ed:61:14:58:28:
         fb:b6:cc:11:81:3c:c1:a1:46:15:1a:a9:e9:de:80:1c:2c:bb:
         dc:95:56:bd:a3:12:6c:36:ae:8f:5e:5b:23:84:6f:22:ec:cf:
         67:1f:8e:0d:4f:13:fd:7b:9b:fc:45:d5:a5:7c:b3:00:29:20:
         06:0d:38:c1:cf:8f:bc:29:b3:fe:6e:3e:5a:d0:6d:9e:66:60:
         b0:b3:05:9d:28:f5:cb:4a:3a:70:41:b7:2e:28:c6:68:ec:c2:
         eb:00:c1:f8:33:8e:9a:5f:bd:3a:af:7c:79:33:61:f4:2e:9f:
         5a:db:a4:d4:b1:dc:36:60:3e:c8:02:11:65:20:63:d2:8e:d6:
         01:57:45:f9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2Dyq88wtIrI/GMOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2Q3MzA0ZTEtM2JjMS00M2MxLWIwMzUtOTNlZTAyNzA2
M2RiMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
YzZmNjgxZGMtYjBhZS00MGRhLTgwZmEtNTQ5MDI1YmVkYzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrUrpB5Zox32lGvFsYDcgiIh3t42ClKIkB1e
Or764w4zua6Qx25P2KFcXiECoDe2aqjtIyLPgxHodmFiV3tnw5TWHc3GpDvvsGr9
uhO220t+7WluGINyzioHYtBYmj7XA7Laai1miz71ztZKhrfzyNzyTNgeU6Nu/6Ti
4tp1fW+CVi21EjM/1EjHPXGUyX1SSUqYBJYmj9K+pGgEdKn4K1qCGhIg89b0/f52
r332FYdPfjGvEDsG97yrOzDcL738KevikydY2G8KgmYPTTnGAH2/UDfBFdjNUMde
hnZ5cgZloBNvYmTaIDiLi5qUOsfPLopcOTLcZM/2oxdXC6dSjwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDe5nmq8+QcyTBLuixZe413dyKbqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZDcz
MDRlMS0zYmMxLTQzYzEtYjAzNS05M2VlMDI3MDYzZGIvM2FkOTAzN2QtY2M0ZS0z
YTQ2LTk4MWEtNzE1ZTQzOGQ0ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2Q3MzA0ZTEtM2JjMS00M2MxLWIw
MzUtOTNlZTAyNzA2M2RiL2NkNzMwNGUxLTNiYzEtNDNjMS1iMDM1LTkzZWUwMjcw
NjNkYi5jcmwwHwYDVR0jBBgwFoAU7rmdZNXt9QBRjGNxx50ffKrFHZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jZDczMDRlMS0zYmMxLTQzYzEtYjAzNS05M2Vl
MDI3MDYzZGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6kwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAuEsqvpf5lZ71qm5CYN3kmCPT/XYSXgtHHaMNcOnBhf/LDz0fD/KL
4Qir+i3DYx4ja0piWz2QMEk+j9/6IVC0h9F558qfvRgwuOm+SdadavJbm4AAgVu2
YRP4TD0iVyTWvZDdlYhVd43VMNv0MYjEVXOAGVJeSzfGsu1hFFgo+7bMEYE8waFG
FRqp6d6AHCy73JVWvaMSbDauj15bI4RvIuzPZx+ODU8T/Xub/EXVpXyzACkgBg04
wc+PvCmz/m4+WtBtnmZgsLMFnSj1y0o6cEG3LijGaOzC6wDB+DOOml+9Oq98eTNh
9C6fWtuk1LHcNmA+yAIRZSBj0o7WAVdF+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:24 2026 by rpki-client