Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/cb6367cb-b087-3766-a2ea-7feb91eb3c50.roa
File:                     cb6367cb-b087-3766-a2ea-7feb91eb3c50.roa (raw, json)
Hash identifier:          lpA35ZFzi8EM5ef2e5KFovMvaHQMLlMO7TDiyz6aR8E=
Subject key identifier:   38:53:BD:61:40:DA:06:B6:BF:F4:77:AE:34:19:D6:B3:C9:A2:FB:50
Certificate issuer:       /CN=75f477ee-4cd7-4d8f-9517-9cf25b239fcd
Certificate serial:       010D0C9F4328584CB2871C33909C5E61CA917C00
Authority key identifier: F7:CF:09:69:9F:38:C6:D0:79:08:5A:A8:B5:0B:36:69:CE:0E:BE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/cb6367cb-b087-3766-a2ea-7feb91eb3c50.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     216030
IP address blocks:        2602:f779::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:1c:33:90:9c:5e:61:ca:91:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75f477ee-4cd7-4d8f-9517-9cf25b239fcd
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=d40dfe9e-7b5f-40ab-bcc9-9de6b5c37cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:30:65:ed:8c:40:28:b7:c2:32:22:04:9b:16:
                    d2:b4:09:81:69:d0:dd:2b:b0:9d:b4:0a:54:10:58:
                    ec:2c:15:ef:9f:05:87:8d:79:e5:13:05:a3:9c:f0:
                    d5:12:32:b2:03:61:c3:50:14:ff:30:16:cc:84:54:
                    45:1c:da:b4:55:1e:2a:31:7d:5c:77:ef:ea:28:0f:
                    3b:9f:2c:05:82:6e:08:21:c4:fd:a4:c0:b8:8b:99:
                    f9:3d:7f:e5:a8:8d:62:1b:7b:ec:05:23:37:ad:b0:
                    d9:17:64:d5:08:60:71:4d:98:52:24:69:60:a5:1d:
                    68:da:3f:1d:a5:1b:09:20:e0:57:6e:25:03:95:46:
                    55:8a:68:75:a9:da:9b:b1:2a:dd:f5:d4:aa:d5:f7:
                    26:94:e9:df:cb:ec:25:24:5d:a9:19:de:c0:47:d8:
                    b5:95:ad:2a:8c:48:4f:c0:18:ad:37:e6:b0:de:78:
                    4b:16:e4:c4:b1:b5:bd:86:e5:00:8c:c5:42:ef:61:
                    24:86:33:44:58:6f:a0:13:5b:63:8b:08:3d:78:a5:
                    31:3a:fd:18:9e:6d:48:17:6f:27:2b:59:f5:39:32:
                    96:18:cf:1a:a8:ca:4b:ec:b6:33:b8:2b:1c:f6:42:
                    fa:af:83:55:c3:9f:2b:ed:d1:60:77:64:0d:7d:87:
                    50:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:53:BD:61:40:DA:06:B6:BF:F4:77:AE:34:19:D6:B3:C9:A2:FB:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/cb6367cb-b087-3766-a2ea-7feb91eb3c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.crl

            X509v3 Authority Key Identifier:
                keyid:F7:CF:09:69:9F:38:C6:D0:79:08:5A:A8:B5:0B:36:69:CE:0E:BE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f779::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6b:9f:6b:f7:ad:70:aa:7b:83:0b:44:27:19:45:7e:7d:bc:
         ea:9d:28:26:f6:66:31:b0:5d:7d:ce:e0:76:a1:fa:79:8b:2b:
         c4:d2:a3:63:d0:df:02:10:1f:62:55:08:dc:1c:fb:f4:47:69:
         f4:81:3a:d9:27:53:28:2b:1f:c9:43:f2:ab:ce:69:5f:c5:76:
         6e:a0:aa:5d:13:83:20:0a:6d:b9:4d:a3:18:a5:8b:72:c1:70:
         4a:73:bb:d3:3e:14:2e:8a:fb:2e:db:c4:36:26:df:91:eb:e5:
         78:66:ee:5c:28:77:aa:ce:be:0f:09:13:1c:5e:87:52:e1:e7:
         f8:b4:53:5e:7f:3d:96:55:08:17:af:e7:7f:30:c5:fc:b3:5d:
         21:ad:21:4c:22:62:c9:13:73:2e:78:20:0f:c1:05:59:a8:0e:
         9e:01:e7:a6:5e:3d:6a:db:82:2c:e8:bf:f5:81:ba:0d:09:e0:
         62:da:40:4c:d1:0e:f8:64:47:e0:3b:9e:c3:8f:06:c3:ae:c2:
         81:08:15:77:c1:95:50:5e:7e:7f:f6:fa:1a:f2:38:7b:bc:7b:
         d3:f6:fc:6d:04:84:0c:c9:78:92:96:d8:00:6f:a0:36:dc:77:
         57:fb:90:06:a7:b3:9e:a0:96:07:b3:14:36:03:d3:60:47:30:
         49:d3:1f:07
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyyhxwzkJxeYcqRfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVmNDc3ZWUtNGNkNy00ZDhmLTk1MTctOWNmMjViMjM5
ZmNkMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZDQwZGZlOWUtN2I1Zi00MGFiLWJjYzktOWRlNmI1YzM3Y2Y2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jBl7YxAKLfCMiIEmxbStAmBadDdK7CdtApU
EFjsLBXvnwWHjXnlEwWjnPDVEjKyA2HDUBT/MBbMhFRFHNq0VR4qMX1cd+/qKA87
nywFgm4IIcT9pMC4i5n5PX/lqI1iG3vsBSM3rbDZF2TVCGBxTZhSJGlgpR1o2j8d
pRsJIOBXbiUDlUZVimh1qdqbsSrd9dSq1fcmlOnfy+wlJF2pGd7AR9i1la0qjEhP
wBitN+aw3nhLFuTEsbW9huUAjMVC72EkhjNEWG+gE1tjiwg9eKUxOv0Ynm1IF28n
K1n1OTKWGM8aqMpL7LYzuCsc9kL6r4NVw58r7dFgd2QNfYdQ7QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDhTvWFA2ga2v/R3rjQZ1rPJovtQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NWY0
NzdlZS00Y2Q3LTRkOGYtOTUxNy05Y2YyNWIyMzlmY2QvY2I2MzY3Y2ItYjA4Ny0z
NzY2LWEyZWEtN2ZlYjkxZWIzYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzVmNDc3ZWUtNGNkNy00ZDhmLTk1
MTctOWNmMjViMjM5ZmNkLzc1ZjQ3N2VlLTRjZDctNGQ4Zi05NTE3LTljZjI1YjIz
OWZjZC5jcmwwHwYDVR0jBBgwFoAU988JaZ84xtB5CFqotQs2ac4OvjgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83NWY0NzdlZS00Y2Q3LTRkOGYtOTUxNy05Y2Yy
NWIyMzlmY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3eQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZ2ufa/etcKp7gwtEJxlFfn286p0oJvZmMbBdfc7gdqH6eYsrxNKj
Y9DfAhAfYlUI3Bz79Edp9IE62SdTKCsfyUPyq85pX8V2bqCqXRODIAptuU2jGKWL
csFwSnO70z4ULor7LtvENibfkevleGbuXCh3qs6+DwkTHF6HUuHn+LRTXn89llUI
F6/nfzDF/LNdIa0hTCJiyRNzLnggD8EFWagOngHnpl49atuCLOi/9YG6DQngYtpA
TNEO+GRH4Duew48Gw67CgQgVd8GVUF5+f/b6GvI4e7x70/b8bQSEDMl4kpbYAG+g
Ntx3V/uQBqeznqCWB7MUNgPTYEcwSdMfBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:52 2026 by rpki-client