Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d5a57f5c-d8f9-38bb-8ac7-26ed5bae44ae.roa
File:                     d5a57f5c-d8f9-38bb-8ac7-26ed5bae44ae.roa (raw, json)
Hash identifier:          4SJ7u2x3j1Crlgmllg2YGbwl2EM6z8Z1u0ff2AcuHl8=
Subject key identifier:   A8:44:DE:2C:9E:71:1D:85:C2:7B:D1:BF:9C:8F:05:96:DD:A5:05:A2
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584D95F00A69DAD4B3D117DEDB60
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d5a57f5c-d8f9-38bb-8ac7-26ed5bae44ae.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     399976
IP address blocks:        2602:80c:20b3::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:0a:69:da:d4:b3:d1:17:de:db:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=2f4b8201-e039-463d-a842-4c64bfab940e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1b:0b:ab:04:bf:f3:26:e6:fc:a6:43:11:1b:
                    4b:06:17:dc:05:92:91:62:f8:45:b5:e9:44:75:99:
                    da:84:f5:33:8c:7f:40:1a:e5:3c:49:48:21:c5:19:
                    72:2e:43:ab:3b:a9:97:e6:0c:a0:3b:8e:fe:ed:a4:
                    dc:f7:46:70:f9:0e:f5:1c:3c:15:f5:16:b8:fc:9b:
                    54:c3:ce:23:41:df:61:81:24:51:d8:a3:53:14:4a:
                    de:1a:29:b3:55:e2:53:bb:31:a9:2b:46:ca:7d:29:
                    ad:eb:11:6c:31:00:e1:77:a1:67:30:c6:43:00:d2:
                    9c:8b:2a:f4:0e:13:6b:66:2a:e3:bd:bc:69:e4:e7:
                    a7:7e:db:89:e1:1e:25:4a:8e:23:b0:97:86:78:3d:
                    b1:2e:52:3a:e8:a0:33:25:a2:b4:b4:6f:d7:22:99:
                    c0:81:72:44:2c:59:09:ba:9c:ae:da:ba:13:ce:2d:
                    8d:68:3f:b7:11:81:ee:a7:7e:aa:47:11:97:d4:a3:
                    1b:0f:0d:f3:eb:8d:2f:f5:eb:43:f8:70:ef:2e:fb:
                    9c:67:9e:1c:90:47:32:ee:bd:36:74:ed:3e:50:b6:
                    fd:fd:5d:11:7c:95:61:e4:60:42:ea:e2:e0:ab:16:
                    e5:08:3c:e9:5e:08:03:ef:a9:7e:87:a6:94:5a:de:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:44:DE:2C:9E:71:1D:85:C2:7B:D1:BF:9C:8F:05:96:DD:A5:05:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d5a57f5c-d8f9-38bb-8ac7-26ed5bae44ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:19:94:4b:53:59:7f:6f:d2:bf:dd:d4:ec:e2:35:ba:14:a2:
         ce:52:c0:44:cb:07:f4:ed:14:da:4e:c2:6b:bc:b9:7c:08:e7:
         cc:81:ae:ef:00:b3:9e:a5:ed:e8:02:75:cb:43:07:c2:d9:d2:
         b5:84:9b:46:ea:d6:35:02:a2:ed:da:34:da:ea:10:a4:06:6c:
         ee:cb:f5:8f:db:39:49:a6:48:bf:9d:c1:b9:72:28:28:5a:7b:
         ec:97:e9:4d:6b:f4:f1:da:39:82:b2:67:d7:c6:b6:9a:77:59:
         0b:90:ba:e0:42:13:5a:b6:b8:eb:1a:71:74:0f:da:f9:0a:24:
         35:1d:25:21:b0:01:6f:31:b8:66:8d:96:93:9c:79:78:7c:75:
         92:d1:ae:3b:bb:03:05:5a:b5:77:61:96:40:79:f7:a5:0c:41:
         67:d5:df:8e:93:57:1a:4b:84:58:15:44:55:80:b2:c9:86:3a:
         d2:98:1e:e8:66:bb:26:65:9c:c8:d2:24:7c:18:99:d7:5a:d4:
         5c:33:ae:1f:9f:a0:00:8f:4f:8c:b0:d9:3f:aa:c0:ac:63:3b:
         f8:7e:19:e7:40:66:89:8b:8a:f8:14:90:97:1d:dc:cb:09:8e:
         d7:f0:51:8a:d8:3a:aa:92:1c:6d:67:a4:f2:c3:dd:fa:14:05:
         d4:15:12:dd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2V8App2tSz0Rfe22AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
MmY0YjgyMDEtZTAzOS00NjNkLWE4NDItNGM2NGJmYWI5NDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRsLqwS/8ybm/KZDERtLBhfcBZKRYvhFtelE
dZnahPUzjH9AGuU8SUghxRlyLkOrO6mX5gygO47+7aTc90Zw+Q71HDwV9Ra4/JtU
w84jQd9hgSRR2KNTFEreGimzVeJTuzGpK0bKfSmt6xFsMQDhd6FnMMZDANKciyr0
DhNrZirjvbxp5OenftuJ4R4lSo4jsJeGeD2xLlI66KAzJaK0tG/XIpnAgXJELFkJ
upyu2roTzi2NaD+3EYHup36qRxGX1KMbDw3z640v9etD+HDvLvucZ54ckEcy7r02
dO0+ULb9/V0RfJVh5GBC6uLgqxblCDzpXggD76l+h6aUWt7SFQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKhE3iyecR2FwnvRv5yPBZbdpQWiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvZDVhNTdmNWMtZDhmOS0z
OGJiLThhYzctMjZlZDViYWU0NGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCCz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEYZlEtTWX9v0r/d1OziNboUos5SwETLB/TtFNpOwmu8uXwI58yB
ru8As56l7egCdctDB8LZ0rWEm0bq1jUCou3aNNrqEKQGbO7L9Y/bOUmmSL+dwbly
KChae+yX6U1r9PHaOYKyZ9fGtpp3WQuQuuBCE1q2uOsacXQP2vkKJDUdJSGwAW8x
uGaNlpOceXh8dZLRrju7AwVatXdhlkB596UMQWfV346TVxpLhFgVRFWAssmGOtKY
HuhmuyZlnMjSJHwYmdda1Fwzrh+foACPT4yw2T+qwKxjO/h+GedAZomLivgUkJcd
3MsJjtfwUYrYOqqSHG1npPLD3foUBdQVEt0=
-----END CERTIFICATE-----
Generated at Wed May 13 10:55:21 2026 by rpki-client