Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/c7f81528-d3f7-3184-87f0-d2670a835419.roa
File:                     c7f81528-d3f7-3184-87f0-d2670a835419.roa (raw, json)
Hash identifier:          GgO+hKEeDo+8+DigeBoORpAgiGvcmyM9Fxqil8nnNqI=
Subject key identifier:   6D:9D:1C:15:2E:98:18:98:7A:55:ED:88:8C:D6:02:79:84:6F:80:F8
Certificate issuer:       /CN=e97da778-a1f6-4dad-9d0a-d3a070010373
Certificate serial:       010D0C9F4328584D24DF8514133C3E1210267BE0
Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/c7f81528-d3f7-3184-87f0-d2670a835419.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     21538
IP address blocks:        2602:fc30:a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:85:14:13:3c:3e:12:10:26:7b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=c3e43d08-d07b-4044-be46-fd50b28176ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:b1:ac:80:e4:fc:36:27:ff:d3:d4:28:cf:
                    32:7f:ae:d2:07:0e:b2:7a:d8:ec:07:ad:a1:15:4f:
                    6a:5e:31:81:66:6d:a9:3b:b9:2b:93:a4:90:8f:b9:
                    9f:20:52:87:2c:30:4a:61:23:72:21:88:c4:a3:90:
                    52:26:e7:be:cd:64:3c:6c:ce:da:33:f8:73:73:c5:
                    7a:ad:cc:85:1b:66:aa:c5:1c:c8:86:6e:67:da:df:
                    53:a2:f3:d4:1f:fe:39:49:28:c4:2e:ab:22:71:0a:
                    54:a6:97:d6:80:2e:15:87:0d:40:5e:a5:24:b9:89:
                    3f:8f:5d:1e:b5:ce:de:b7:54:9c:ed:48:99:81:46:
                    1a:2a:66:3a:88:8f:06:eb:d3:f7:4d:a3:0f:e3:c2:
                    49:d4:08:04:dc:e9:af:36:9b:74:5b:76:94:63:eb:
                    97:f8:2b:e9:0b:82:96:5e:d8:ad:00:80:66:27:8c:
                    ee:1e:f3:c6:96:6f:f3:c5:99:ce:d1:be:3d:65:03:
                    79:eb:88:4c:97:d4:e1:1d:c5:8d:76:11:bc:30:36:
                    ba:0f:b6:cf:39:c8:57:86:76:63:a3:8b:0b:50:38:
                    03:a8:ea:4d:68:02:4b:a8:ad:43:02:45:0a:d9:04:
                    b9:8a:76:47:ac:5b:9b:a3:14:e4:59:63:35:95:9a:
                    05:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9D:1C:15:2E:98:18:98:7A:55:ED:88:8C:D6:02:79:84:6F:80:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/c7f81528-d3f7-3184-87f0-d2670a835419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl

            X509v3 Authority Key Identifier:
                keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc30:a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:5c:d8:0c:68:de:d0:5d:eb:75:5b:25:37:11:9f:c6:d0:eb:
         3e:7d:1c:54:91:09:be:8e:0b:67:cd:ce:80:7c:57:a5:9f:92:
         28:3c:c5:3f:60:2e:7f:a9:94:b1:36:c3:e5:13:f8:e2:8d:6d:
         7e:71:71:3b:9c:35:12:e1:cb:62:4d:bd:d9:de:34:6b:74:c9:
         b3:9f:6f:3b:76:ac:07:bb:b7:b2:14:6d:9b:9b:15:c2:09:9c:
         24:a3:46:2c:7e:f1:d3:cb:67:43:fb:2d:88:08:19:c7:49:67:
         5c:70:f8:a8:5c:d3:09:fd:e2:f9:d1:4d:d0:30:97:92:14:19:
         8c:09:5e:93:a1:fd:eb:66:14:c3:00:d1:27:fa:72:f0:8b:22:
         75:47:8d:3c:b6:43:9d:ab:05:d1:f4:cc:5d:df:36:06:a8:fb:
         a5:0e:bd:43:3f:f9:2c:74:bc:81:41:56:e3:7a:30:34:66:0b:
         51:ac:52:53:e6:70:45:18:b7:e5:1f:11:85:10:28:eb:5b:4e:
         ec:3e:74:ba:64:b0:2a:10:44:9f:d5:95:96:48:80:41:f1:5e:
         e9:9e:2e:0b:dc:0e:af:50:81:1c:3a:17:8c:76:55:3e:f7:94:
         fe:f6:10:19:2a:fb:ad:31:8b:13:b1:4b:aa:ce:71:54:fa:ed:
         aa:ed:39:aa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k34UUEzw+EhAme+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk3ZGE3NzgtYTFmNi00ZGFkLTlkMGEtZDNhMDcwMDEw
MzczMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
YzNlNDNkMDgtZDA3Yi00MDQ0LWJlNDYtZmQ1MGIyODE3NmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo72xrIDk/DYn/9PUKM8yf67SBw6yetjsB62h
FU9qXjGBZm2pO7krk6SQj7mfIFKHLDBKYSNyIYjEo5BSJue+zWQ8bM7aM/hzc8V6
rcyFG2aqxRzIhm5n2t9TovPUH/45SSjELqsicQpUppfWgC4Vhw1AXqUkuYk/j10e
tc7et1Sc7UiZgUYaKmY6iI8G69P3TaMP48JJ1AgE3OmvNpt0W3aUY+uX+CvpC4KW
XtitAIBmJ4zuHvPGlm/zxZnO0b49ZQN564hMl9ThHcWNdhG8MDa6D7bPOchXhnZj
o4sLUDgDqOpNaAJLqK1DAkUK2QS5inZHrFuboxTkWWM1lZoFywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG2dHBUumBiYelXtiIzWAnmEb4D4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdk
YTc3OC1hMWY2LTRkYWQtOWQwYS1kM2EwNzAwMTAzNzMvYzdmODE1MjgtZDNmNy0z
MTg0LTg3ZjAtZDI2NzBhODM1NDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk3ZGE3NzgtYTFmNi00ZGFkLTlk
MGEtZDNhMDcwMDEwMzczL2U5N2RhNzc4LWExZjYtNGRhZC05ZDBhLWQzYTA3MDAx
MDM3My5jcmwwHwYDVR0jBBgwFoAUMuC2ppBpQiEgQL1KkOWS4I8ee6owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdkYTc3OC1hMWY2LTRkYWQtOWQwYS1kM2Ew
NzAwMTAzNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8MACj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGdc2Axo3tBd63VbJTcRn8bQ6z59HFSRCb6OC2fNzoB8V6Wfkig8
xT9gLn+plLE2w+UT+OKNbX5xcTucNRLhy2JNvdneNGt0ybOfbzt2rAe7t7IUbZub
FcIJnCSjRix+8dPLZ0P7LYgIGcdJZ1xw+Khc0wn94vnRTdAwl5IUGYwJXpOh/etm
FMMA0Sf6cvCLInVHjTy2Q52rBdH0zF3fNgao+6UOvUM/+Sx0vIFBVuN6MDRmC1Gs
UlPmcEUYt+UfEYUQKOtbTuw+dLpksCoQRJ/VlZZIgEHxXumeLgvcDq9QgRw6F4x2
VT73lP72EBkq+60xixOxS6rOcVT67artOao=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:37 2026 by rpki-client