Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa
File:                     49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa (raw, json)
Hash identifier:          2brhoqm9j8z8197Or8yu/9mUj3VY489McT3wfjTHq8A=
Subject key identifier:   62:C3:20:3A:F7:81:3F:23:85:84:73:D5:0E:C0:1F:A8:0A:8B:91:93
Certificate issuer:       /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial:       010D0C9F4328584D5E1A6F3EDA2651BBFEAF6CC0
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     54613
IP address blocks:        2602:fd9a:fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:6f:3e:da:26:51:bb:fe:af:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=55372893-c3ee-491c-9d9a-61e52ed6d6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:23:62:07:c9:52:e2:15:1c:d3:87:54:5a:
                    1a:5a:1a:cc:f9:3f:6f:b7:a5:98:e3:21:5f:3c:26:
                    9a:6a:bb:cc:03:b1:31:ac:83:38:e6:6d:90:c8:b2:
                    c8:df:81:2f:ca:9d:15:16:20:b8:24:0d:97:ba:a5:
                    19:9c:ec:11:cd:15:90:9b:7d:bc:7d:fe:8c:be:8a:
                    81:2f:61:9c:02:7a:91:92:83:fa:59:5a:de:83:ea:
                    d5:17:0c:3f:25:d7:b1:39:cc:f7:dd:60:c9:79:d2:
                    26:64:4b:6b:ed:b4:ec:6e:28:97:75:d0:46:4e:d0:
                    2e:4d:81:fe:7f:79:2d:cf:cf:5c:58:79:60:30:23:
                    fb:75:8b:de:a8:1a:02:20:4b:cc:19:04:ed:5f:be:
                    fe:be:61:ae:85:4a:05:54:d9:a0:1d:29:57:75:d8:
                    2d:2f:e5:f7:7e:ff:7a:19:48:1a:11:c7:d6:86:41:
                    69:67:dd:f2:6e:6d:56:52:b4:63:18:6f:72:d7:c0:
                    83:61:ff:9b:8e:cd:a0:f4:5c:67:de:20:c4:2b:b5:
                    de:f5:71:24:a5:10:97:c6:bb:cf:f0:1e:fb:41:42:
                    d3:d7:e0:33:b3:c1:cb:6d:56:ec:8b:51:36:d1:00:
                    70:a1:86:7c:14:dd:82:0e:9e:68:0d:56:4a:7e:91:
                    1f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C3:20:3A:F7:81:3F:23:85:84:73:D5:0E:C0:1F:A8:0A:8B:91:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9a:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:4c:4f:de:a9:66:84:e5:68:8f:07:bb:6f:a3:b7:a9:06:64:
         89:97:f1:3e:af:14:d5:01:fd:be:0b:d5:81:4a:45:8f:c0:01:
         e5:a0:15:92:ab:4f:8f:6c:5c:a7:89:7f:77:ab:f2:14:a3:57:
         d3:60:1b:84:e4:a9:48:c7:c2:71:19:bb:f4:a2:aa:2e:96:9e:
         41:23:0e:45:51:82:dc:a0:c1:4e:28:47:7a:f1:a3:19:3b:52:
         52:c8:a6:96:87:c3:4f:16:50:5d:2c:70:df:4c:53:1c:7c:b2:
         5b:20:b4:87:88:20:dd:06:ce:97:a1:0c:7c:d3:68:22:f1:18:
         fc:2e:5d:ec:6d:92:fd:79:26:c4:ba:4f:87:d4:bc:a0:ab:7c:
         29:b7:ac:ac:dc:82:f1:68:b2:37:5d:9d:1a:15:95:26:9b:1b:
         0d:ba:de:59:ae:f6:7b:43:ca:98:04:bf:29:e0:70:c8:32:be:
         c8:b6:55:88:4e:8b:27:90:a8:9f:79:a5:81:f3:4f:4e:ad:51:
         1e:76:ed:ae:79:ca:08:9e:94:09:30:72:70:62:38:9a:8c:1a:
         05:9c:89:19:db:91:17:fc:62:d7:ec:02:1f:b4:fd:a7:5f:3f:
         e2:15:50:9a:0c:70:db:4d:c2:27:25:81:e5:67:c6:0e:1e:a3:
         ad:20:14:57
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGm8+2iZRu/6vbMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4
OTc2MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
NTUzNzI4OTMtYzNlZS00OTFjLTlkOWEtNjFlNTJlZDZkNmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxgjYgfJUuIVHNOHVFoaWhrM+T9vt6WY4yFf
PCaaarvMA7ExrIM45m2QyLLI34Evyp0VFiC4JA2XuqUZnOwRzRWQm328ff6MvoqB
L2GcAnqRkoP6WVreg+rVFww/JdexOcz33WDJedImZEtr7bTsbiiXddBGTtAuTYH+
f3ktz89cWHlgMCP7dYveqBoCIEvMGQTtX77+vmGuhUoFVNmgHSlXddgtL+X3fv96
GUgaEcfWhkFpZ93ybm1WUrRjGG9y18CDYf+bjs2g9Fxn3iDEK7Xe9XEkpRCXxrvP
8B77QULT1+Azs8HLbVbsi1E20QBwoYZ8FN2CDp5oDVZKfpEf7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGLDIDr3gT8jhYRz1Q7AH6gKi5GTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh
ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvNDlhYmY1YmYtNjY5Zi0z
YzVmLThmZDctOTM5ZTk5MjZjYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy
NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4
ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj
YTU2ODg5NzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9mg//
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFJMT96pZoTlaI8Hu2+jt6kGZImX8T6vFNUB/b4L1YFKRY/AAeWg
FZKrT49sXKeJf3er8hSjV9NgG4TkqUjHwnEZu/Siqi6WnkEjDkVRgtygwU4oR3rx
oxk7UlLIppaHw08WUF0scN9MUxx8slsgtIeIIN0GzpehDHzTaCLxGPwuXextkv15
JsS6T4fUvKCrfCm3rKzcgvFosjddnRoVlSabGw263lmu9ntDypgEvyngcMgyvsi2
VYhOiyeQqJ95pYHzT06tUR527a55ygielAkwcnBiOJqMGgWciRnbkRf8YtfsAh+0
/adfP+IVUJoMcNtNwiclgeVnxg4eo60gFFc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:02 2026 by rpki-client