Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/f8c797e2-c057-39a8-bb12-f8106cb9f864.roa
File:                     f8c797e2-c057-39a8-bb12-f8106cb9f864.roa (raw, json)
Hash identifier:          NbOGnPfRJYSjiMzSIeLqgoMxYNFC/yPfTf6qs3SwfLc=
Subject key identifier:   63:58:A3:76:1D:DB:C0:86:2A:7F:4F:28:F7:2A:45:83:E4:87:FC:69
Certificate issuer:       /CN=44f68f8f-fb3d-449e-a030-4b56b7a51400
Certificate serial:       010D0C9F4328584E086660095F922673FC91E420
Authority key identifier: B4:14:A9:7D:AC:0F:47:A8:85:80:19:DD:CE:38:85:75:EA:66:65:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/f8c797e2-c057-39a8-bb12-f8106cb9f864.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     402274
IP address blocks:        2602:f427::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/44f68f8f-fb3d-449e-a030-4b56b7a51400.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/44f68f8f-fb3d-449e-a030-4b56b7a51400.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:60:09:5f:92:26:73:fc:91:e4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f68f8f-fb3d-449e-a030-4b56b7a51400
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=adfc2205-713f-42b3-8158-b99191d79c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:5a:9a:a7:4d:26:b3:8e:40:dd:c9:64:20:
                    a4:a3:48:7b:99:5d:d0:d6:70:3d:46:4a:71:e1:39:
                    a0:6b:bf:f1:74:b8:24:c6:c1:d8:8a:e0:f7:f6:54:
                    dd:a2:16:03:14:3c:28:b0:ae:5a:34:7b:36:bc:f7:
                    1a:5f:14:a6:00:77:3d:11:f3:ac:e6:16:1b:2a:d7:
                    0b:20:24:fb:76:c8:b9:6b:93:a0:1b:31:56:9c:34:
                    e9:3d:1b:30:e6:4a:23:0a:cf:cf:c8:1d:38:15:ba:
                    1b:ff:de:e0:2c:75:3b:1a:9b:d4:65:90:22:47:ec:
                    da:66:66:26:40:85:51:5a:05:26:57:69:af:4c:61:
                    21:92:42:87:5e:51:dd:0d:08:bc:0b:98:5f:92:d9:
                    c3:fd:2b:e8:23:70:f6:9b:73:9f:3a:34:07:ac:e9:
                    ea:dd:15:77:71:46:1f:f3:1c:81:c9:73:41:8a:40:
                    e8:4c:3c:95:a0:12:a8:fe:f5:6b:61:a8:0f:01:f5:
                    49:63:ee:f1:b6:97:8a:a7:13:8d:e2:b3:69:9c:4c:
                    ff:a9:ee:d8:62:7f:d9:02:6e:3f:60:87:84:c3:19:
                    c6:24:df:b3:6f:07:99:c2:22:17:02:c6:0a:a4:f0:
                    77:5d:9a:d4:59:2b:58:24:2f:94:0a:7a:22:ab:06:
                    91:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:58:A3:76:1D:DB:C0:86:2A:7F:4F:28:F7:2A:45:83:E4:87:FC:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/f8c797e2-c057-39a8-bb12-f8106cb9f864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/44f68f8f-fb3d-449e-a030-4b56b7a51400.crl

            X509v3 Authority Key Identifier:
                keyid:B4:14:A9:7D:AC:0F:47:A8:85:80:19:DD:CE:38:85:75:EA:66:65:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f427::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5d:a8:f4:d3:a2:5d:f1:13:ab:19:09:21:45:1b:14:93:a7:
         65:8c:4f:78:3d:21:53:4b:e7:19:e8:c5:69:b4:af:af:a0:a9:
         3b:4e:f0:63:3e:8f:eb:79:f6:2e:ef:f0:04:9a:1b:dc:b2:ef:
         15:85:ee:51:5b:a7:d4:67:19:b4:14:76:4f:fc:29:0b:da:f9:
         ba:a4:e3:0d:08:73:45:49:bf:f2:09:15:dd:c8:10:9c:bd:05:
         8c:b1:7a:77:47:fe:4e:74:68:c7:5c:5b:cc:51:73:9d:6b:74:
         0f:64:36:9e:c8:57:c6:13:3e:b9:6f:9a:03:c6:1c:27:e3:ed:
         1d:40:8a:f4:20:ee:31:33:93:e4:bc:c2:b6:91:3f:d8:4b:23:
         38:8a:34:b5:29:e4:c0:9e:a4:fd:0e:9b:22:62:d4:6e:bf:a6:
         76:af:5c:f5:ee:50:1d:ce:b8:ef:09:7a:af:22:12:9f:8d:e3:
         3c:b5:af:52:00:da:c9:5a:96:ff:cb:43:b3:15:24:f7:6a:4c:
         7c:b9:01:04:5d:62:2d:dc:00:69:4e:e1:89:cb:2a:c8:98:83:
         d5:46:c8:02:4c:6f:7a:fa:59:37:f4:48:5c:4c:f1:66:a7:e1:
         7f:a6:a9:b7:7b:4e:51:13:20:d8:ec:d9:eb:97:e7:ec:02:a5:
         54:03:f0:c3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4IZmAJX5Imc/yR5CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRmNjhmOGYtZmIzZC00NDllLWEwMzAtNGI1NmI3YTUx
NDAwMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk
YWRmYzIyMDUtNzEzZi00MmIzLTgxNTgtYjk5MTkxZDc5YzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYdamqdNJrOOQN3JZCCko0h7mV3Q1nA9Rkpx
4Tmga7/xdLgkxsHYiuD39lTdohYDFDwosK5aNHs2vPcaXxSmAHc9EfOs5hYbKtcL
ICT7dsi5a5OgGzFWnDTpPRsw5kojCs/PyB04Fbob/97gLHU7GpvUZZAiR+zaZmYm
QIVRWgUmV2mvTGEhkkKHXlHdDQi8C5hfktnD/SvoI3D2m3OfOjQHrOnq3RV3cUYf
8xyByXNBikDoTDyVoBKo/vVrYagPAfVJY+7xtpeKpxON4rNpnEz/qe7YYn/ZAm4/
YIeEwxnGJN+zbweZwiIXAsYKpPB3XZrUWStYJC+UCnoiqwaRdwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGNYo3Yd28CGKn9PKPcqRYPkh/xpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80NGY2
OGY4Zi1mYjNkLTQ0OWUtYTAzMC00YjU2YjdhNTE0MDAvZjhjNzk3ZTItYzA1Ny0z
OWE4LWJiMTItZjgxMDZjYjlmODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDRmNjhmOGYtZmIzZC00NDllLWEw
MzAtNGI1NmI3YTUxNDAwLzQ0ZjY4ZjhmLWZiM2QtNDQ5ZS1hMDMwLTRiNTZiN2E1
MTQwMC5jcmwwHwYDVR0jBBgwFoAUtBSpfawPR6iFgBndzjiFdepmZRYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS80NGY2OGY4Zi1mYjNkLTQ0OWUtYTAzMC00YjU2
YjdhNTE0MDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL0JwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdV2o9NOiXfETqxkJIUUbFJOnZYxPeD0hU0vnGejFabSvr6CpO07w
Yz6P63n2Lu/wBJob3LLvFYXuUVun1GcZtBR2T/wpC9r5uqTjDQhzRUm/8gkV3cgQ
nL0FjLF6d0f+TnRox1xbzFFznWt0D2Q2nshXxhM+uW+aA8YcJ+PtHUCK9CDuMTOT
5LzCtpE/2EsjOIo0tSnkwJ6k/Q6bImLUbr+mdq9c9e5QHc647wl6ryISn43jPLWv
UgDayVqW/8tDsxUk92pMfLkBBF1iLdwAaU7hicsqyJiD1UbIAkxvevpZN/RIXEzx
Zqfhf6apt3tOURMg2OzZ65fn7AKlVAPwww==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:21:59 2026 by rpki-client