Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bdc73024-30c4-4cde-8046-2a9b496ab943/88d5809a-4326-366e-bfb9-9bf439dfd736.roa
File:                     88d5809a-4326-366e-bfb9-9bf439dfd736.roa (raw, json)
Hash identifier:          jx13sAng183WPCugBYPmqtYuNSY7PjiwUSZRczqmqUg=
Subject key identifier:   1A:5D:C3:9D:0B:05:B3:59:34:52:07:82:E7:65:1C:A4:EE:54:CF:EF
Certificate issuer:       /CN=bdc73024-30c4-4cde-8046-2a9b496ab943
Certificate serial:       010D0C9F4328584D5B257220FB1F9A839E562D80
Authority key identifier: 07:16:C9:F8:94:4D:83:AF:31:96:B0:D5:66:1B:C3:2F:C1:89:20:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bdc73024-30c4-4cde-8046-2a9b496ab943.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bdc73024-30c4-4cde-8046-2a9b496ab943/88d5809a-4326-366e-bfb9-9bf439dfd736.roa
Signing time:             Tue 31 Mar 2026 23:35:35 +0000
ROA not before:           Tue 31 Mar 2026 23:35:35 +0000
ROA not after:            Mon 29 Jun 2026 23:35:35 +0000
asID:                     212895
IP address blocks:        2602:f412::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bdc73024-30c4-4cde-8046-2a9b496ab943/bdc73024-30c4-4cde-8046-2a9b496ab943.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bdc73024-30c4-4cde-8046-2a9b496ab943/bdc73024-30c4-4cde-8046-2a9b496ab943.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bdc73024-30c4-4cde-8046-2a9b496ab943.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:25:72:20:fb:1f:9a:83:9e:56:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdc73024-30c4-4cde-8046-2a9b496ab943
        Validity
            Not Before: Mar 31 23:35:35 2026 GMT
            Not After : Jun 29 23:35:35 2026 GMT
        Subject: CN=d7a711f0-e85d-453e-a36a-255c6f9449aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:d0:ba:2c:35:3e:e2:b8:9c:d8:0c:f0:bb:
                    f6:a7:6f:e9:29:33:53:2e:61:c0:9d:96:90:4e:17:
                    e6:0d:74:ce:a9:46:44:8a:f1:e6:91:fb:10:db:55:
                    5e:af:79:2f:2a:36:75:ec:e2:de:8d:b0:82:82:86:
                    8d:4e:3c:6d:11:20:95:83:cb:bc:6f:32:ac:b4:05:
                    5d:0b:40:b6:cd:a3:9d:d6:4b:a0:0a:54:6c:d4:4c:
                    db:a8:9a:67:79:ae:53:dc:a7:22:d5:5b:52:fc:28:
                    92:3d:7e:75:b0:6c:06:2b:ee:68:6b:f5:61:63:17:
                    f6:89:55:d0:8c:05:f3:a8:7d:c4:c7:11:5d:36:e5:
                    2c:bc:a5:a9:b8:5c:8c:ab:f1:7d:10:7b:8b:a6:aa:
                    b7:55:56:44:d9:51:53:52:9a:f9:30:e4:1d:60:03:
                    7c:90:00:7a:fa:e9:01:e8:ec:c7:79:cb:af:b3:c1:
                    79:a4:83:5f:c5:56:1f:bd:97:79:5c:70:74:b3:5b:
                    35:26:92:93:8b:14:53:e2:8f:34:2c:75:f6:5d:54:
                    50:66:12:6d:77:96:50:1f:7b:3a:e6:43:b4:6d:99:
                    7d:06:c7:80:da:f1:7d:8b:de:0e:04:96:74:4c:36:
                    91:ed:40:29:52:a5:f3:64:dc:e9:05:5f:44:89:3d:
                    52:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5D:C3:9D:0B:05:B3:59:34:52:07:82:E7:65:1C:A4:EE:54:CF:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bdc73024-30c4-4cde-8046-2a9b496ab943/88d5809a-4326-366e-bfb9-9bf439dfd736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bdc73024-30c4-4cde-8046-2a9b496ab943/bdc73024-30c4-4cde-8046-2a9b496ab943.crl

            X509v3 Authority Key Identifier:
                keyid:07:16:C9:F8:94:4D:83:AF:31:96:B0:D5:66:1B:C3:2F:C1:89:20:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bdc73024-30c4-4cde-8046-2a9b496ab943.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f412::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:1a:e3:2a:ad:d4:a2:b9:d6:c4:a7:71:c7:2f:75:65:70:14:
         c6:39:94:7f:74:63:4e:c1:a4:b9:e9:1d:01:3d:3a:47:86:49:
         6f:7e:d3:18:6b:ca:3c:f8:ee:f0:04:14:df:99:22:c2:6e:b8:
         05:16:a2:be:ce:73:c6:50:6c:57:7d:1e:e5:f4:9b:e4:dc:92:
         24:8e:9d:2c:87:cb:ea:25:4b:ef:15:50:16:3b:f9:ea:8b:ec:
         2e:f9:00:5e:91:00:97:cc:fc:8b:51:f5:be:6b:ab:75:fb:23:
         6c:dd:92:73:1e:aa:1c:08:41:85:c4:46:08:94:55:fc:63:55:
         df:11:cf:08:05:bb:df:ae:28:a3:74:be:72:5b:16:bd:e4:4d:
         4f:b9:25:85:a9:66:f4:0e:c7:ad:c3:09:e5:41:ea:47:ac:c5:
         c7:bd:07:d7:5f:59:0c:d4:22:30:a2:cd:a6:5e:2d:52:eb:a0:
         55:3d:0a:0b:02:67:41:63:79:43:6e:b7:dc:6d:1a:a7:00:b8:
         3d:c3:16:a2:89:13:5b:b4:51:b0:8e:65:a6:83:e1:1e:69:6d:
         d9:9b:14:23:46:32:66:44:56:cc:ee:ad:d6:3b:8a:ba:02:19:
         c0:1f:3b:0e:6b:c2:63:41:28:9f:51:6c:90:a1:a4:b7:ea:91:
         a0:f5:16:29
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1bJXIg+x+ag55WLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmRjNzMwMjQtMzBjNC00Y2RlLTgwNDYtMmE5YjQ5NmFi
OTQzMB4XDTI2MDMzMTIzMzUzNVoXDTI2MDYyOTIzMzUzNVowLzEtMCsGA1UEAxMk
ZDdhNzExZjAtZTg1ZC00NTNlLWEzNmEtMjU1YzZmOTQ0OWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHTQuiw1PuK4nNgM8Lv2p2/pKTNTLmHAnZaQ
ThfmDXTOqUZEivHmkfsQ21Ver3kvKjZ17OLejbCCgoaNTjxtESCVg8u8bzKstAVd
C0C2zaOd1kugClRs1EzbqJpnea5T3Kci1VtS/CiSPX51sGwGK+5oa/VhYxf2iVXQ
jAXzqH3ExxFdNuUsvKWpuFyMq/F9EHuLpqq3VVZE2VFTUpr5MOQdYAN8kAB6+ukB
6OzHecuvs8F5pINfxVYfvZd5XHB0s1s1JpKTixRT4o80LHX2XVRQZhJtd5ZQH3s6
5kO0bZl9BseA2vF9i94OBJZ0TDaR7UApUqXzZNzpBV9EiT1SRQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBpdw50LBbNZNFIHgudlHKTuVM/vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iZGM3
MzAyNC0zMGM0LTRjZGUtODA0Ni0yYTliNDk2YWI5NDMvODhkNTgwOWEtNDMyNi0z
NjZlLWJmYjktOWJmNDM5ZGZkNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYmRjNzMwMjQtMzBjNC00Y2RlLTgw
NDYtMmE5YjQ5NmFiOTQzL2JkYzczMDI0LTMwYzQtNGNkZS04MDQ2LTJhOWI0OTZh
Yjk0My5jcmwwHwYDVR0jBBgwFoAUBxbJ+JRNg68xlrDVZhvDL8GJINwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iZGM3MzAyNC0zMGM0LTRjZGUtODA0Ni0yYTli
NDk2YWI5NDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL0EgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFRrjKq3UornWxKdxxy91ZXAUxjmUf3RjTsGkuekdAT06R4ZJb37T
GGvKPPju8AQU35kiwm64BRaivs5zxlBsV30e5fSb5NySJI6dLIfL6iVL7xVQFjv5
6ovsLvkAXpEAl8z8i1H1vmurdfsjbN2Scx6qHAhBhcRGCJRV/GNV3xHPCAW7364o
o3S+clsWveRNT7klhalm9A7HrcMJ5UHqR6zFx70H119ZDNQiMKLNpl4tUuugVT0K
CwJnQWN5Q2633G0apwC4PcMWookTW7RRsI5lpoPhHmlt2ZsUI0YyZkRWzO6t1juK
ugIZwB87DmvCY0Eon1FskKGkt+qRoPUWKQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:06 2026 by rpki-client