Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/4cc88e15-b299-3d90-9ac9-02f45c34fcd0.roa
File:                     4cc88e15-b299-3d90-9ac9-02f45c34fcd0.roa (raw, json)
Hash identifier:          EDLUAHku6barravj1dlrxUJNKE1LRKwHoxpjLkJn1vI=
Subject key identifier:   5F:F7:21:9C:F6:32:A1:95:EF:16:B2:BF:EB:D8:DD:97:69:9B:90:2C
Certificate issuer:       /CN=0c4c7001-7459-4ca5-93d2-88612666a768
Certificate serial:       010D0C9F4328584C6B569F29EA976FD096235CC0
Authority key identifier: 56:CD:66:92:09:2D:4C:45:34:F8:56:58:5A:20:ED:02:F3:BE:39:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/4cc88e15-b299-3d90-9ac9-02f45c34fcd0.roa
Signing time:             Mon 05 Jan 2026 02:00:31 +0000
ROA not before:           Mon 05 Jan 2026 02:00:31 +0000
ROA not after:            Sun 05 Apr 2026 01:00:31 +0000
asID:                     16925
IP address blocks:        2602:fd7d::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6b:56:9f:29:ea:97:6f:d0:96:23:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4c7001-7459-4ca5-93d2-88612666a768
        Validity
            Not Before: Jan  5 02:00:31 2026 GMT
            Not After : Apr  5 01:00:31 2026 GMT
        Subject: CN=b245261a-2b16-423d-bd97-198c96a9642d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3c:6d:fd:87:aa:98:5a:ff:5e:c7:2b:b5:7e:
                    41:e6:af:86:97:8c:d1:92:5e:09:6d:64:a6:84:03:
                    3c:fb:f3:bc:1f:36:c6:bd:61:88:19:01:41:cc:1b:
                    34:bb:d7:c3:c9:60:22:44:f6:d5:45:66:5c:ae:0e:
                    a6:08:e6:01:3c:6c:15:38:cf:b5:d2:1b:7f:ee:fb:
                    e0:0b:47:2c:79:64:17:b4:73:bc:a8:4b:0f:c7:db:
                    4a:3a:bd:25:d2:f8:03:06:b1:ea:f4:c2:61:7a:c2:
                    ce:06:b8:1b:c3:fb:2e:b8:1e:36:7c:20:bb:76:f8:
                    d3:7d:af:c2:2e:83:f3:7b:24:c5:6e:5f:cb:07:00:
                    e0:39:aa:2c:41:c4:d5:20:92:a4:40:4e:a4:3c:da:
                    6d:a8:35:83:1f:a0:16:c8:9a:97:3b:e4:4d:9c:77:
                    52:bb:b9:e9:04:48:8a:7d:29:d5:2d:40:55:69:07:
                    a5:53:e1:85:15:49:eb:25:ea:10:cd:57:d4:6e:f5:
                    ca:01:b6:9d:76:f9:be:ad:3b:e5:d0:53:67:2e:19:
                    e1:22:d9:f4:60:3a:e1:ed:4f:1b:dc:48:e6:aa:d7:
                    8e:40:ab:1b:41:2b:3b:a8:ea:a6:df:52:3c:6f:06:
                    88:cb:48:0e:30:43:1d:fa:b7:b3:b7:c3:fb:4c:51:
                    6d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F7:21:9C:F6:32:A1:95:EF:16:B2:BF:EB:D8:DD:97:69:9B:90:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/4cc88e15-b299-3d90-9ac9-02f45c34fcd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.crl

            X509v3 Authority Key Identifier:
                keyid:56:CD:66:92:09:2D:4C:45:34:F8:56:58:5A:20:ED:02:F3:BE:39:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd7d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:13:f1:69:8c:72:f8:95:c0:95:bb:55:9d:8c:a9:53:dc:fb:
         d7:81:c4:ee:56:05:80:25:69:8c:4f:09:82:6b:4f:37:ee:d5:
         03:e7:f6:23:ef:d1:d1:49:bb:e9:b8:b4:16:b7:e2:77:72:ec:
         81:b6:77:d2:7a:1e:c9:ce:68:e1:8f:b5:8a:ba:fc:28:6b:db:
         f7:e0:f9:9b:9c:63:0c:ee:d4:e5:66:80:d4:70:b1:72:a8:8d:
         a4:1d:6f:9a:a4:67:2f:f3:50:b8:5c:82:f4:67:62:64:0a:80:
         67:9a:a3:3f:9a:57:06:60:d2:e9:36:4d:9b:d6:e3:cf:c5:35:
         f7:ff:8c:02:69:b1:74:ff:20:1e:df:48:5c:31:c9:8c:97:c6:
         8e:3e:5f:df:76:c2:69:9e:56:60:54:7a:d1:aa:b8:50:90:74:
         e6:6f:0c:8c:32:a0:9e:05:39:04:7c:82:75:2b:da:fc:17:d8:
         06:54:8e:2c:ef:18:23:c6:6b:1d:e6:5f:8f:a8:e5:49:0c:3f:
         81:10:0b:b9:2a:2c:67:25:29:5f:27:84:81:9e:b7:6e:76:3d:
         f2:82:6e:c6:35:8f:38:52:7f:c0:e1:47:51:fa:5e:7d:ae:0a:
         89:85:0c:14:16:22:f9:56:a8:fa:0e:3a:d1:74:fa:cc:83:56:
         32:94:db:26
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExrVp8p6pdv0JYjXMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM0YzcwMDEtNzQ1OS00Y2E1LTkzZDItODg2MTI2NjZh
NzY4MB4XDTI2MDEwNTAyMDAzMVoXDTI2MDQwNTAxMDAzMVowLzEtMCsGA1UEAxMk
YjI0NTI2MWEtMmIxNi00MjNkLWJkOTctMTk4Yzk2YTk2NDJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Dxt/YeqmFr/XscrtX5B5q+Gl4zRkl4JbWSm
hAM8+/O8HzbGvWGIGQFBzBs0u9fDyWAiRPbVRWZcrg6mCOYBPGwVOM+10ht/7vvg
C0cseWQXtHO8qEsPx9tKOr0l0vgDBrHq9MJhesLOBrgbw/suuB42fCC7dvjTfa/C
LoPzeyTFbl/LBwDgOaosQcTVIJKkQE6kPNptqDWDH6AWyJqXO+RNnHdSu7npBEiK
fSnVLUBVaQelU+GFFUnrJeoQzVfUbvXKAbaddvm+rTvl0FNnLhnhItn0YDrh7U8b
3EjmqteOQKsbQSs7qOqm31I8bwaIy0gOMEMd+rezt8P7TFFthwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFF/3IZz2MqGV7xayv+vY3Zdpm5AsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wYzRj
NzAwMS03NDU5LTRjYTUtOTNkMi04ODYxMjY2NmE3NjgvNGNjODhlMTUtYjI5OS0z
ZDkwLTlhYzktMDJmNDVjMzRmY2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGM0YzcwMDEtNzQ1OS00Y2E1LTkz
ZDItODg2MTI2NjZhNzY4LzBjNGM3MDAxLTc0NTktNGNhNS05M2QyLTg4NjEyNjY2
YTc2OC5jcmwwHwYDVR0jBBgwFoAUVs1mkgktTEU0+FZYWiDtAvO+ObkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wYzRjNzAwMS03NDU5LTRjYTUtOTNkMi04ODYx
MjY2NmE3NjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9fQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACxPxaYxy+JXAlbtVnYypU9z714HE7lYFgCVpjE8JgmtPN+7VA+f2
I+/R0Um76bi0Frfid3LsgbZ30noeyc5o4Y+1irr8KGvb9+D5m5xjDO7U5WaA1HCx
cqiNpB1vmqRnL/NQuFyC9GdiZAqAZ5qjP5pXBmDS6TZNm9bjz8U19/+MAmmxdP8g
Ht9IXDHJjJfGjj5f33bCaZ5WYFR60aq4UJB05m8MjDKgngU5BHyCdSva/BfYBlSO
LO8YI8ZrHeZfj6jlSQw/gRALuSosZyUpXyeEgZ63bnY98oJuxjWPOFJ/wOFHUfpe
fa4KiYUMFBYi+Vao+g460XT6zINWMpTbJg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:18 2026 by rpki-client