Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/accc406e-d7a8-3c77-9d8f-fd5928a588ea.roa
File:                     accc406e-d7a8-3c77-9d8f-fd5928a588ea.roa (raw, json)
Hash identifier:          Wpab2KmleVkifTUgW6WDJDp4vLd+432yuTuvCQOw+aQ=
Subject key identifier:   64:69:8F:25:23:E8:1B:FF:92:C7:EF:4F:D6:C4:2A:69:9F:78:5D:B9
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584D2EC8A8329BB2253341E80A00
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/accc406e-d7a8-3c77-9d8f-fd5928a588ea.roa
Signing time:             Mon 16 Mar 2026 02:13:03 +0000
ROA not before:           Mon 16 Mar 2026 02:13:03 +0000
ROA not after:            Sun 14 Jun 2026 02:13:03 +0000
asID:                     39753
IP address blocks:        2602:f66c::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2e:c8:a8:32:9b:b2:25:33:41:e8:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Mar 16 02:13:03 2026 GMT
            Not After : Jun 14 02:13:03 2026 GMT
        Subject: CN=0eb4ef5f-0f7b-4b55-8303-237606325e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:f7:7a:20:e6:3e:12:8e:36:a8:0e:09:c6:
                    a1:19:64:fd:ad:f1:1a:55:b0:eb:a5:3e:6a:27:df:
                    82:1b:cf:0c:08:ca:ac:62:4a:b6:6c:07:fd:84:07:
                    e6:57:ee:d7:af:b6:49:48:d3:70:8e:42:1d:d9:ed:
                    72:f0:68:8b:6d:1e:0c:b2:9c:b9:8c:d4:e6:48:ca:
                    f2:f8:46:7b:2d:0d:6f:02:14:57:b0:9b:85:af:aa:
                    95:74:55:ed:2f:df:e1:ff:0c:7c:07:cd:b6:f1:c9:
                    6d:25:13:28:88:71:bf:13:14:25:eb:b4:b5:e5:52:
                    f1:aa:88:b3:86:0b:cd:e9:9e:ee:7d:b0:81:96:8b:
                    6d:8c:bf:ef:f2:80:8f:e7:6f:0d:2a:cb:f4:6c:4d:
                    69:37:5c:70:4f:f7:a0:38:35:f8:4d:3c:cc:7d:66:
                    65:ac:f2:e4:d4:43:19:79:2b:95:42:4b:47:6d:93:
                    11:d9:f6:9e:af:8d:9e:d1:a6:4a:cb:d0:64:1e:5a:
                    55:b5:fe:1c:31:29:7a:51:9a:91:fc:13:73:41:30:
                    17:4f:56:d1:5a:95:7d:c3:92:03:35:aa:3b:87:ed:
                    68:00:a0:cb:98:fd:1e:b2:45:fb:ef:55:56:d0:6a:
                    45:b5:dd:43:75:45:da:40:33:7e:87:a7:1f:c4:6f:
                    ad:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:69:8F:25:23:E8:1B:FF:92:C7:EF:4F:D6:C4:2A:69:9F:78:5D:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/accc406e-d7a8-3c77-9d8f-fd5928a588ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f66c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:60:1b:a0:39:5b:cb:03:f5:10:f7:57:a3:b1:5d:0b:9f:cb:
         98:51:0d:a5:80:d6:27:51:57:52:a1:f3:1d:07:e6:25:8c:b5:
         de:5e:2b:c5:29:c3:e2:69:ea:72:2d:e9:66:99:35:f5:65:9b:
         0e:a2:39:75:c6:cf:0c:47:c2:23:79:e6:83:b6:3d:bc:7a:1c:
         cb:aa:a8:c6:be:55:9f:1e:94:66:c2:16:44:82:21:22:80:46:
         23:a9:33:0c:e0:9e:b5:f0:7a:f9:87:20:d4:50:ab:81:3d:85:
         7a:69:b5:8e:34:4b:cd:ac:fa:ca:37:ce:e0:a2:29:1b:04:60:
         3c:f3:7d:d7:ef:0d:87:05:28:28:eb:e2:1f:25:02:cc:70:37:
         62:63:14:bf:63:d7:27:2f:5f:96:4d:aa:d4:b8:32:0c:41:a8:
         69:3d:57:b1:60:f1:2c:9b:6e:cd:f4:7c:d6:60:d8:52:3f:32:
         c5:ec:58:da:e3:a8:b1:be:6c:1f:54:57:a5:82:79:c9:45:99:
         91:4b:63:47:8d:ef:7f:58:17:4f:4b:53:ff:ac:6c:ba:db:fe:
         9a:31:85:55:55:29:48:48:8e:c9:cc:53:46:1b:6e:a8:29:14:
         2f:76:5a:ff:a6:c4:e4:4d:e2:fb:37:43:2a:38:71:25:52:1b:
         01:52:8a:bc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0uyKgym7IlM0HoCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1
MjgxMB4XDTI2MDMxNjAyMTMwM1oXDTI2MDYxNDAyMTMwM1owLzEtMCsGA1UEAxMk
MGViNGVmNWYtMGY3Yi00YjU1LTgzMDMtMjM3NjA2MzI1ZTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPL3eiDmPhKONqgOCcahGWT9rfEaVbDrpT5q
J9+CG88MCMqsYkq2bAf9hAfmV+7Xr7ZJSNNwjkId2e1y8GiLbR4Mspy5jNTmSMry
+EZ7LQ1vAhRXsJuFr6qVdFXtL9/h/wx8B8228cltJRMoiHG/ExQl67S15VLxqoiz
hgvN6Z7ufbCBlottjL/v8oCP528NKsv0bE1pN1xwT/egODX4TTzMfWZlrPLk1EMZ
eSuVQktHbZMR2faer42e0aZKy9BkHlpVtf4cMSl6UZqR/BNzQTAXT1bRWpV9w5ID
Nao7h+1oAKDLmP0eskX771VW0GpFtd1DdUXaQDN+h6cfxG+tBQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGRpjyUj6Bv/ksfvT9bEKmmfeF25MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl
MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvYWNjYzQwNmUtZDdhOC0z
Yzc3LTlkOGYtZmQ1OTI4YTU4OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0
ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw
NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx
NjEzMDUyODEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2bAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAamAboDlbywP1EPdXo7FdC5/LmFENpYDWJ1FXUqHzHQfmJYy13l4r
xSnD4mnqci3pZpk19WWbDqI5dcbPDEfCI3nmg7Y9vHocy6qoxr5Vnx6UZsIWRIIh
IoBGI6kzDOCetfB6+Ycg1FCrgT2Femm1jjRLzaz6yjfO4KIpGwRgPPN91+8NhwUo
KOviHyUCzHA3YmMUv2PXJy9flk2q1LgyDEGoaT1XsWDxLJtuzfR81mDYUj8yxexY
2uOosb5sH1RXpYJ5yUWZkUtjR43vf1gXT0tT/6xsutv+mjGFVVUpSEiOycxTRhtu
qCkUL3Za/6bE5E3i+zdDKjhxJVIbAVKKvA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:50 2026 by rpki-client