Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b8cf2895-ac49-3412-9f96-565f1707b420.roa
File:                     b8cf2895-ac49-3412-9f96-565f1707b420.roa (raw, json)
Hash identifier:          5VsCwAHs5G6bqHqZrawKQw5TzrxqzNAv0Qs6hNFzV68=
Subject key identifier:   9B:22:6F:02:9F:F1:4F:10:D3:1D:4F:44:1E:CA:8F:36:A2:D8:29:D5
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584DFEA0753AC6848BAF71280C80
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b8cf2895-ac49-3412-9f96-565f1707b420.roa
Signing time:             Fri 29 May 2026 13:00:10 +0000
ROA not before:           Fri 29 May 2026 13:00:10 +0000
ROA not after:            Thu 27 Aug 2026 13:00:10 +0000
asID:                     16740
IP address blocks:        2602:f5c1:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fe:a0:75:3a:c6:84:8b:af:71:28:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: May 29 13:00:10 2026 GMT
            Not After : Aug 27 13:00:10 2026 GMT
        Subject: CN=cee65b86-6844-4b95-b151-8132b50c0612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:f7:41:f5:7a:d9:0e:46:8a:12:67:e2:e7:
                    a7:be:23:14:30:c7:02:8d:c0:fa:3e:34:55:18:80:
                    ce:da:31:73:64:cb:bd:98:6b:13:c2:c7:3b:b6:fb:
                    df:57:d2:3d:98:71:df:62:7c:3d:f5:cd:c5:e7:c1:
                    88:04:b9:f2:1b:ee:67:db:1c:6f:30:9e:3d:6b:4d:
                    f0:3b:a3:24:9e:75:6d:d8:8d:2e:4c:a7:92:a0:12:
                    af:ad:11:21:71:3b:43:af:e5:ee:50:ca:a9:5d:92:
                    f6:ad:f3:51:59:a2:13:32:07:fb:3d:ee:8e:b0:d0:
                    45:7e:7c:2f:d2:4b:69:78:b5:8e:83:3a:83:0a:d3:
                    20:87:00:c5:0b:2c:42:01:a3:1f:23:26:0f:3e:ac:
                    5a:33:8b:4d:9f:f5:9f:5d:8b:17:6d:91:96:af:a0:
                    71:f3:85:50:56:77:ff:71:58:1d:39:24:f0:5d:16:
                    96:80:7b:3c:7d:28:c2:cc:d6:b3:0d:55:ec:fc:50:
                    d3:8c:58:cd:9a:4a:c0:3c:8e:f8:91:d9:ac:25:ae:
                    4f:9c:6e:34:a1:92:bd:04:cb:9c:e5:d7:89:e7:d4:
                    63:8d:4f:ed:99:3f:25:1c:cc:2d:6f:ad:ae:81:9c:
                    1b:17:c8:17:97:7e:d6:ac:3f:58:33:44:fe:20:a4:
                    89:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:22:6F:02:9F:F1:4F:10:D3:1D:4F:44:1E:CA:8F:36:A2:D8:29:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b8cf2895-ac49-3412-9f96-565f1707b420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:22:55:60:4f:c6:de:c7:24:84:9f:05:ec:63:52:5b:a9:dd:
         53:3b:5a:b6:3f:eb:b3:54:f6:70:90:5b:7f:18:46:d9:3f:4f:
         c6:f7:26:63:2d:8f:41:b8:7d:a0:1f:2c:f5:29:01:dc:87:ba:
         b2:42:b6:93:ec:d4:d9:a5:fe:70:ba:4c:aa:c4:00:1e:d4:30:
         13:10:1c:99:29:4c:19:38:21:a3:2b:da:7a:b6:87:11:24:d6:
         7e:fe:1d:c2:09:59:59:98:a1:96:c9:e8:de:58:6c:a1:22:04:
         9e:d5:92:c3:6a:7a:6d:af:b3:5d:65:8c:aa:98:84:e3:f9:2e:
         77:cf:27:d9:84:8b:9b:0e:48:cd:ea:2c:a8:d9:c3:eb:60:7a:
         9c:5a:45:75:fa:51:57:64:2b:6b:37:73:64:85:25:9e:33:e3:
         ad:8a:98:fd:56:44:f1:d6:f4:7d:17:ac:e8:d5:1c:77:50:30:
         79:b2:2a:f6:9e:25:ea:f1:21:90:d6:c2:d5:05:69:5d:64:0c:
         30:b8:ac:f9:04:eb:05:ab:42:4a:9e:e2:14:25:23:04:51:fe:
         66:8d:2c:90:7a:e6:b2:0f:50:32:6c:9f:42:dc:03:ba:ae:cb:
         76:c4:b7:6d:d5:ad:18:9a:4b:97:8f:99:37:c5:66:0d:5e:d4:
         4d:91:ff:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3+oHU6xoSLr3EoDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0
MjZmMB4XDTI2MDUyOTEzMDAxMFoXDTI2MDgyNzEzMDAxMFowLzEtMCsGA1UEAxMk
Y2VlNjViODYtNjg0NC00Yjk1LWIxNTEtODEzMmI1MGMwNjEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmT3QfV62Q5GihJn4uenviMUMMcCjcD6PjRV
GIDO2jFzZMu9mGsTwsc7tvvfV9I9mHHfYnw99c3F58GIBLnyG+5n2xxvMJ49a03w
O6MknnVt2I0uTKeSoBKvrREhcTtDr+XuUMqpXZL2rfNRWaITMgf7Pe6OsNBFfnwv
0ktpeLWOgzqDCtMghwDFCyxCAaMfIyYPPqxaM4tNn/WfXYsXbZGWr6Bx84VQVnf/
cVgdOSTwXRaWgHs8fSjCzNazDVXs/FDTjFjNmkrAPI74kdmsJa5PnG40oZK9BMuc
5deJ59RjjU/tmT8lHMwtb62ugZwbF8gXl37WrD9YM0T+IKSJdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJsibwKf8U8Q0x1PRB7Kjzai2CnVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh
MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvYjhjZjI4OTUtYWM0OS0z
NDEyLTlmOTYtNTY1ZjE3MDdiNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj
OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh
NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw
N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABEiVWBPxt7HJISfBexjUlup3VM7WrY/67NU9nCQW38YRtk/T8b3
JmMtj0G4faAfLPUpAdyHurJCtpPs1Nml/nC6TKrEAB7UMBMQHJkpTBk4IaMr2nq2
hxEk1n7+HcIJWVmYoZbJ6N5YbKEiBJ7VksNqem2vs11ljKqYhOP5LnfPJ9mEi5sO
SM3qLKjZw+tgepxaRXX6UVdkK2s3c2SFJZ4z462KmP1WRPHW9H0XrOjVHHdQMHmy
KvaeJerxIZDWwtUFaV1kDDC4rPkE6wWrQkqe4hQlIwRR/maNLJB65rIPUDJsn0Lc
A7quy3bEt23VrRiaS5ePmTfFZg1e1E2R/5M=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:05:06 2026 by rpki-client