Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/da2a649a-ac6f-3d71-8e8b-c98c4bef3f7a.roa
File:                     da2a649a-ac6f-3d71-8e8b-c98c4bef3f7a.roa (raw, json)
Hash identifier:          1S+Lggt9fYMK22v1ytdFR7xPS8stmQmC4QP6CQuDrwQ=
Subject key identifier:   5A:D4:44:AA:26:0E:D8:E3:E5:E1:C0:F9:13:64:88:FF:C2:80:F3:74
Certificate issuer:       /CN=04efd7cc-0d91-448d-bd9a-256355cac421
Certificate serial:       010D0C9F4328584DC61DA6E808E7F8FAD32D2C40
Authority key identifier: 2C:AF:48:10:50:AB:80:1B:43:FC:88:46:91:F1:4E:9A:B6:BA:A8:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/da2a649a-ac6f-3d71-8e8b-c98c4bef3f7a.roa
Signing time:             Sat 09 May 2026 07:11:22 +0000
ROA not before:           Sat 09 May 2026 07:11:22 +0000
ROA not after:            Fri 07 Aug 2026 07:11:22 +0000
asID:                     9304
IP address blocks:        2602:f3d9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:1d:a6:e8:08:e7:f8:fa:d3:2d:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04efd7cc-0d91-448d-bd9a-256355cac421
        Validity
            Not Before: May  9 07:11:22 2026 GMT
            Not After : Aug  7 07:11:22 2026 GMT
        Subject: CN=3be34891-2d98-4993-b341-ee2b0502bb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:db:de:ec:e7:df:5c:01:8f:4e:12:50:a3:dc:
                    a8:58:48:95:e3:f5:6a:74:48:cc:f9:02:68:57:49:
                    4f:ea:2e:bd:8b:35:5d:a2:04:99:07:9d:01:1d:fb:
                    be:42:58:85:41:79:6d:d4:ac:31:67:bf:63:15:ee:
                    5c:c0:b4:a1:11:ec:0b:5a:b2:33:1b:3e:94:da:49:
                    a2:04:9c:95:e6:bc:0e:5c:b2:4b:fe:e3:4c:fe:78:
                    0c:5f:74:b5:ac:28:82:d0:91:56:7d:58:38:a5:0a:
                    7b:20:af:6e:44:1e:ee:52:7b:a9:ba:b7:8d:b1:6e:
                    36:13:4c:3c:d4:a9:72:ab:00:f8:c2:b2:52:b1:b2:
                    c3:c3:48:67:f8:16:37:3f:46:96:86:db:54:89:fe:
                    43:85:2f:73:92:cc:c9:bd:32:21:85:9f:ec:15:eb:
                    b0:f8:89:1c:90:53:08:be:26:7d:7a:57:d0:28:8e:
                    a8:f0:92:7b:b9:5e:4b:a8:a8:9a:2e:ab:a2:f5:d8:
                    a6:2b:37:fc:41:3f:ab:1d:9d:45:9f:ca:36:0d:15:
                    60:ca:ff:f1:a7:0c:bc:37:56:81:6a:4f:f2:22:c9:
                    c4:b1:7b:f1:5e:1f:f2:1b:df:3d:ee:4e:d9:86:22:
                    4e:ea:35:94:06:7e:50:7a:fa:1c:9c:5d:2c:39:e5:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D4:44:AA:26:0E:D8:E3:E5:E1:C0:F9:13:64:88:FF:C2:80:F3:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/da2a649a-ac6f-3d71-8e8b-c98c4bef3f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.crl

            X509v3 Authority Key Identifier:
                keyid:2C:AF:48:10:50:AB:80:1B:43:FC:88:46:91:F1:4E:9A:B6:BA:A8:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3d9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:bb:20:45:2f:83:ef:eb:72:b6:5f:61:d8:d1:19:eb:c2:45:
         ec:c5:8b:6b:bb:87:be:0f:04:fc:06:44:87:5a:a6:7f:9e:c5:
         3b:43:a1:28:18:3a:9c:67:42:ba:96:a6:50:a7:6c:73:89:7d:
         d7:5f:39:bf:23:3d:1c:01:25:1d:04:31:93:bc:d8:6a:e8:a6:
         60:7f:b2:3b:7a:57:40:46:53:46:58:e6:32:7f:65:44:a8:f7:
         27:e6:db:41:35:e6:c7:17:b4:b1:d5:90:b0:c0:fc:71:fd:71:
         72:b4:1e:0a:d7:25:a9:1e:8d:7b:84:6f:e7:ab:e0:f0:a3:9f:
         61:d1:e9:6b:98:1f:74:c7:c4:ce:3f:f7:dd:1d:d8:a3:8c:54:
         17:99:8a:ed:79:69:0a:e6:05:ad:8a:cc:33:91:f0:89:2b:c6:
         08:c3:2d:5d:79:e0:0f:bc:5b:4f:fa:15:43:96:c9:39:3c:57:
         b3:40:61:b7:ae:de:9d:7f:89:b3:e5:6d:90:df:0e:71:45:74:
         c9:58:7b:50:7a:4a:c1:45:b0:6c:c2:01:31:1a:ee:e5:b9:58:
         27:13:d3:df:f4:96:e6:0f:91:14:b2:25:94:9c:84:39:e4:30:
         52:c0:96:eb:a9:dc:d1:97:1b:f0:4d:83:29:b1:2c:5c:04:3b:
         d5:0f:d6:87
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3GHaboCOf4+tMtLEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDRlZmQ3Y2MtMGQ5MS00NDhkLWJkOWEtMjU2MzU1Y2Fj
NDIxMB4XDTI2MDUwOTA3MTEyMloXDTI2MDgwNzA3MTEyMlowLzEtMCsGA1UEAxMk
M2JlMzQ4OTEtMmQ5OC00OTkzLWIzNDEtZWUyYjA1MDJiYjc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNve7OffXAGPThJQo9yoWEiV4/VqdEjM+QJo
V0lP6i69izVdogSZB50BHfu+QliFQXlt1KwxZ79jFe5cwLShEewLWrIzGz6U2kmi
BJyV5rwOXLJL/uNM/ngMX3S1rCiC0JFWfVg4pQp7IK9uRB7uUnupureNsW42E0w8
1KlyqwD4wrJSsbLDw0hn+BY3P0aWhttUif5DhS9zkszJvTIhhZ/sFeuw+IkckFMI
viZ9elfQKI6o8JJ7uV5LqKiaLqui9dimKzf8QT+rHZ1Fn8o2DRVgyv/xpwy8N1aB
ak/yIsnEsXvxXh/yG9897k7ZhiJO6jWUBn5QevocnF0sOeUNAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFrURKomDtjj5eHA+RNkiP/CgPN0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wNGVm
ZDdjYy0wZDkxLTQ0OGQtYmQ5YS0yNTYzNTVjYWM0MjEvZGEyYTY0OWEtYWM2Zi0z
ZDcxLThlOGItYzk4YzRiZWYzZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDRlZmQ3Y2MtMGQ5MS00NDhkLWJk
OWEtMjU2MzU1Y2FjNDIxLzA0ZWZkN2NjLTBkOTEtNDQ4ZC1iZDlhLTI1NjM1NWNh
YzQyMS5jcmwwHwYDVR0jBBgwFoAULK9IEFCrgBtD/IhGkfFOmra6qDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8wNGVmZDdjYy0wZDkxLTQ0OGQtYmQ5YS0yNTYz
NTVjYWM0MjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgLz2QAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB27IEUvg+/rcrZfYdjRGevCRezFi2u7h74PBPwGRIdapn+exTtD
oSgYOpxnQrqWplCnbHOJfddfOb8jPRwBJR0EMZO82GropmB/sjt6V0BGU0ZY5jJ/
ZUSo9yfm20E15scXtLHVkLDA/HH9cXK0HgrXJakejXuEb+er4PCjn2HR6WuYH3TH
xM4/990d2KOMVBeZiu15aQrmBa2KzDOR8IkrxgjDLV154A+8W0/6FUOWyTk8V7NA
Ybeu3p1/ibPlbZDfDnFFdMlYe1B6SsFFsGzCATEa7uW5WCcT09/0luYPkRSyJZSc
hDnkMFLAluup3NGXG/BNgymxLFwEO9UP1oc=
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:25 2026 by rpki-client