Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/d7d51b6e-3919-3556-9fc3-6fa1914f1e64.roa
File:                     d7d51b6e-3919-3556-9fc3-6fa1914f1e64.roa (raw, json)
Hash identifier:          +GbHbuip1MqzatBWcnMaUfnCfEo9XlSPQ/yOyLN72U4=
Subject key identifier:   94:68:A6:B8:A3:4E:24:EE:B8:7A:67:53:02:79:AB:D8:69:7C:B6:54
Certificate issuer:       /CN=ea022514-ea9e-4ceb-9d1b-9768bee36a4f
Certificate serial:       010D0C9F4328584D5234FC188396358F3175CAE0
Authority key identifier: 28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/d7d51b6e-3919-3556-9fc3-6fa1914f1e64.roa
Signing time:             Sat 28 Mar 2026 18:44:37 +0000
ROA not before:           Sat 28 Mar 2026 18:44:37 +0000
ROA not after:            Sat 09 May 2026 21:33:09 +0000
asID:                     54429
IP address blocks:        2602:fd94::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:fc:18:83:96:35:8f:31:75:ca:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea022514-ea9e-4ceb-9d1b-9768bee36a4f
        Validity
            Not Before: Mar 28 18:44:37 2026 GMT
            Not After : May  9 21:33:09 2026 GMT
        Subject: CN=f070da2a-609b-445b-839e-202f061e4ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:2e:6b:10:64:10:1f:cf:bc:00:a1:2f:52:
                    ae:ae:fc:79:88:87:35:2a:b7:38:c8:03:2a:2f:76:
                    5c:a6:dd:cc:28:e7:b5:c3:0d:d2:39:c8:5d:83:0d:
                    25:e5:e4:10:a1:e7:d3:ed:2c:2e:2a:e3:5c:73:aa:
                    6a:6b:0b:d8:41:03:31:14:9c:31:dd:f8:cd:61:78:
                    67:5f:eb:cc:87:3a:4d:24:bd:8a:13:ca:3d:f2:82:
                    a5:d3:58:cd:df:08:9f:af:ac:7c:66:a6:e6:37:c3:
                    6e:9c:19:35:9b:27:b4:56:d5:d0:52:38:38:ae:ca:
                    56:0f:17:a1:61:82:d6:75:c4:75:99:12:10:f4:40:
                    63:7c:ea:db:d7:49:3f:8d:4b:d1:9b:3c:bb:78:0d:
                    45:c5:31:f5:5f:7c:9e:b7:38:27:de:d8:8d:ae:b1:
                    a7:da:92:0a:db:bc:9c:da:cc:e2:10:db:51:9b:c3:
                    ef:67:66:ab:30:a3:0a:e1:99:ce:24:af:c1:68:23:
                    6a:14:e5:c4:dd:95:da:8f:97:33:de:31:98:0d:5a:
                    1d:fe:e0:e2:4b:c3:e7:51:f9:ca:d6:92:5b:2d:0a:
                    54:e1:24:18:ac:fe:df:45:87:4f:b3:96:9c:9f:17:
                    31:aa:93:9d:1b:ed:17:fd:3f:93:10:3a:93:c9:b5:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:68:A6:B8:A3:4E:24:EE:B8:7A:67:53:02:79:AB:D8:69:7C:B6:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/d7d51b6e-3919-3556-9fc3-6fa1914f1e64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.crl

            X509v3 Authority Key Identifier:
                keyid:28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd94::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:70:4b:ed:f6:c9:7d:a8:0e:7a:9d:3c:ae:77:e2:a8:4d:da:
         91:37:36:1d:2e:c9:00:91:2f:f1:65:99:e0:e7:b9:08:0c:cb:
         53:9e:b5:bf:41:b1:8d:f7:c7:48:b7:b3:c2:bb:18:ac:36:94:
         32:82:08:32:80:6c:7b:95:18:9c:3d:e7:d8:e7:01:13:8f:69:
         ac:22:9c:44:4e:1f:15:a9:50:04:18:37:ac:c5:70:ae:37:e1:
         f3:1b:b9:36:e5:8a:c3:7c:cf:07:12:da:22:7c:24:f6:6c:cf:
         90:c6:ad:8a:33:1d:7c:2e:88:30:a5:ae:fd:fd:ba:04:a1:b8:
         b7:3b:4b:8f:ac:fd:b3:c6:36:c5:5f:36:ec:c1:1c:ff:11:e5:
         fe:82:56:62:18:3b:eb:4f:d5:81:4b:1a:74:a9:60:f2:f6:1b:
         5b:90:3c:76:9a:49:dd:75:a2:21:01:84:e0:b6:2c:92:e3:f0:
         da:d9:79:ec:fc:20:38:c6:64:50:f0:83:20:72:49:15:69:e8:
         44:fc:22:48:7c:60:e8:3d:28:b0:23:18:38:56:be:03:02:a9:
         e8:7e:85:c8:66:77:26:a4:83:15:7b:27:ca:ba:c8:92:5e:c3:
         bd:97:a1:64:e9:3b:9f:7e:d6:f0:b8:4b:f8:1b:1c:6f:01:5c:
         99:08:bf:dd
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1SNPwYg5Y1jzF1yuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWEwMjI1MTQtZWE5ZS00Y2ViLTlkMWItOTc2OGJlZTM2
YTRmMB4XDTI2MDMyODE4NDQzN1oXDTI2MDUwOTIxMzMwOVowLzEtMCsGA1UEAxMk
ZjA3MGRhMmEtNjA5Yi00NDViLTgzOWUtMjAyZjA2MWU0ZmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGAuaxBkEB/PvAChL1Kurvx5iIc1Krc4yAMq
L3Zcpt3MKOe1ww3SOchdgw0l5eQQoefT7SwuKuNcc6pqawvYQQMxFJwx3fjNYXhn
X+vMhzpNJL2KE8o98oKl01jN3wifr6x8ZqbmN8NunBk1mye0VtXQUjg4rspWDxeh
YYLWdcR1mRIQ9EBjfOrb10k/jUvRmzy7eA1FxTH1X3yetzgn3tiNrrGn2pIK27yc
2sziENtRm8PvZ2arMKMK4ZnOJK/BaCNqFOXE3ZXaj5cz3jGYDVod/uDiS8PnUfnK
1pJbLQpU4SQYrP7fRYdPs5acnxcxqpOdG+0X/T+TEDqTybWOywIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJRoprijTiTuuHpnUwJ5q9hpfLZUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lYTAy
MjUxNC1lYTllLTRjZWItOWQxYi05NzY4YmVlMzZhNGYvZDdkNTFiNmUtMzkxOS0z
NTU2LTlmYzMtNmZhMTkxNGYxZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWEwMjI1MTQtZWE5ZS00Y2ViLTlk
MWItOTc2OGJlZTM2YTRmL2VhMDIyNTE0LWVhOWUtNGNlYi05ZDFiLTk3NjhiZWUz
NmE0Zi5jcmwwHwYDVR0jBBgwFoAUKEDCAdB25eH59zQrMjdY49x72H0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lYTAyMjUxNC1lYTllLTRjZWItOWQxYi05NzY4
YmVlMzZhNGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9lAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAn3BL7fbJfagOep08rnfiqE3akTc2HS7JAJEv8WWZ4Oe5CAzLU561
v0GxjffHSLezwrsYrDaUMoIIMoBse5UYnD3n2OcBE49prCKcRE4fFalQBBg3rMVw
rjfh8xu5NuWKw3zPBxLaInwk9mzPkMatijMdfC6IMKWu/f26BKG4tztLj6z9s8Y2
xV827MEc/xHl/oJWYhg760/VgUsadKlg8vYbW5A8dppJ3XWiIQGE4LYskuPw2tl5
7PwgOMZkUPCDIHJJFWnoRPwiSHxg6D0osCMYOFa+AwKp6H6FyGZ3JqSDFXsnyrrI
kl7DvZehZOk7n37W8LhL+BscbwFcmQi/3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:47:35 2026 by rpki-client