Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa
File:                     51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa (raw, json)
Hash identifier:          qfIBX+5NJH1ZwaA5n42W6QGVHUWpDN1n0ylYPeWQG88=
Subject key identifier:   63:5C:80:64:02:9C:50:A7:3A:D8:C6:F2:FF:C6:54:A1:7E:9B:90:7C
Certificate issuer:       /CN=d3a00337-0fdf-42e1-9343-424fd474da93
Certificate serial:       010D0C9F4328584D3F64DEC4CD746F96051C9D00
Authority key identifier: CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     27398
IP address blocks:        2602:fed5::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:de:c4:cd:74:6f:96:05:1c:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a00337-0fdf-42e1-9343-424fd474da93
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=4d3a361d-ba20-4bf5-a51d-333aa46cc4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f0:ae:50:37:55:58:bb:8f:a9:ae:cc:2b:4d:
                    25:a8:d4:b8:6d:bc:81:4f:42:1f:99:1e:00:63:df:
                    7a:2d:f1:ec:5c:f5:b7:17:8d:07:1f:6c:59:e0:cc:
                    d2:e4:42:90:cf:86:c4:89:0c:3d:47:47:13:0a:67:
                    5e:2f:05:85:75:36:91:d8:9c:98:e1:bf:59:a5:33:
                    06:b4:dd:81:5b:82:77:19:ec:3a:a1:de:1d:2c:67:
                    c0:c0:f9:ce:4f:31:95:92:b6:2a:4f:79:31:81:b3:
                    91:e6:2b:03:c6:34:58:ba:8b:eb:8f:52:7a:b4:a7:
                    e0:09:52:7a:a7:7f:93:b4:14:81:ae:82:0e:f4:2d:
                    cb:09:a4:65:eb:89:e7:b6:6e:12:63:2d:a5:30:ee:
                    9e:0f:75:d7:67:e3:65:64:4a:d2:4a:d6:c8:a6:2c:
                    ec:7d:0a:3c:ff:61:30:18:d6:bd:77:49:99:72:e3:
                    98:25:8a:2f:64:8a:50:97:0f:23:d4:0e:98:1c:c9:
                    2e:c6:1c:cc:1a:6a:99:4b:fe:2c:81:ae:f8:67:02:
                    bf:29:a7:cd:a7:4d:5f:cb:c6:1a:ca:3a:e9:c8:ba:
                    58:3c:3b:6e:b3:0c:96:13:1d:88:0e:86:d4:4d:86:
                    05:27:93:fe:01:df:ff:5e:c9:80:78:04:59:d7:76:
                    5d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5C:80:64:02:9C:50:A7:3A:D8:C6:F2:FF:C6:54:A1:7E:9B:90:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl

            X509v3 Authority Key Identifier:
                keyid:CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:63:1c:45:7b:7a:15:65:8c:bb:a9:49:fc:17:e0:c1:e9:c4:
         d8:7e:62:67:de:85:c3:9d:90:65:54:34:aa:65:9f:e4:d8:f7:
         cf:70:ee:a2:59:14:42:82:2e:04:32:03:35:3e:97:af:7f:22:
         d0:e4:c3:3a:ef:78:52:b1:ee:77:e4:6a:d4:7a:98:58:95:68:
         ab:70:9d:bc:81:15:45:4c:96:81:20:f8:12:6e:ed:55:6e:5c:
         a8:83:8a:fb:27:d4:1e:12:2e:c6:1b:f3:eb:19:0c:25:84:2c:
         4c:c3:55:e4:f1:fa:2a:ad:e0:18:ab:f8:b7:9f:c2:ed:14:3e:
         11:f9:af:81:81:7c:0b:2f:be:29:0b:53:b9:24:26:fb:1f:ff:
         32:94:37:44:2f:a8:37:99:91:bc:f6:99:9c:9d:2d:fb:5a:13:
         c6:c8:52:f4:68:3a:7b:52:6b:2b:64:d7:48:89:43:5e:c7:a8:
         26:20:66:67:1f:48:ad:3f:65:ae:cf:01:22:fe:aa:9f:26:a4:
         cb:64:6d:13:7e:c2:c8:4a:ce:41:d1:04:62:0d:f2:45:db:8d:
         91:90:10:bd:a9:aa:be:65:10:12:63:0c:64:70:10:c7:01:a6:
         aa:65:01:45:29:6d:38:d6:cb:47:3e:3d:ea:43:ff:d6:df:fc:
         9c:1c:93:3c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0/ZN7EzXRvlgUcnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDNhMDAzMzctMGZkZi00MmUxLTkzNDMtNDI0ZmQ0NzRk
YTkzMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
NGQzYTM2MWQtYmEyMC00YmY1LWE1MWQtMzMzYWE0NmNjNGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvCuUDdVWLuPqa7MK00lqNS4bbyBT0IfmR4A
Y996LfHsXPW3F40HH2xZ4MzS5EKQz4bEiQw9R0cTCmdeLwWFdTaR2JyY4b9ZpTMG
tN2BW4J3Gew6od4dLGfAwPnOTzGVkrYqT3kxgbOR5isDxjRYuovrj1J6tKfgCVJ6
p3+TtBSBroIO9C3LCaRl64nntm4SYy2lMO6eD3XXZ+NlZErSStbIpizsfQo8/2Ew
GNa9d0mZcuOYJYovZIpQlw8j1A6YHMkuxhzMGmqZS/4sga74ZwK/KafNp01fy8Ya
yjrpyLpYPDtuswyWEx2IDobUTYYFJ5P+Ad//XsmAeARZ13ZdYwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGNcgGQCnFCnOtjG8v/GVKF+m5B8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kM2Ew
MDMzNy0wZmRmLTQyZTEtOTM0My00MjRmZDQ3NGRhOTMvNTFkYjZkNmYtNzBhMS0z
ZDg5LWFiNmUtZTU1NmE1YWYxYzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDNhMDAzMzctMGZkZi00MmUxLTkz
NDMtNDI0ZmQ0NzRkYTkzL2QzYTAwMzM3LTBmZGYtNDJlMS05MzQzLTQyNGZkNDc0
ZGE5My5jcmwwHwYDVR0jBBgwFoAUyzc6BtDWYTvBLucznooR2q7JVQ0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kM2EwMDMzNy0wZmRmLTQyZTEtOTM0My00MjRm
ZDQ3NGRhOTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL+1QAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAYmMcRXt6FWWMu6lJ/BfgwenE2H5iZ96Fw52QZVQ0qmWf5Nj3z3Du
olkUQoIuBDIDNT6Xr38i0OTDOu94UrHud+Rq1HqYWJVoq3CdvIEVRUyWgSD4Em7t
VW5cqIOK+yfUHhIuxhvz6xkMJYQsTMNV5PH6Kq3gGKv4t5/C7RQ+EfmvgYF8Cy++
KQtTuSQm+x//MpQ3RC+oN5mRvPaZnJ0t+1oTxshS9Gg6e1JrK2TXSIlDXseoJiBm
Zx9IrT9lrs8BIv6qnyaky2RtE37CyErOQdEEYg3yRduNkZAQvamqvmUQEmMMZHAQ
xwGmqmUBRSltONbLRz496kP/1t/8nByTPA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:13:37 2026 by rpki-client