Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa
File:                     62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa (raw, json)
Hash identifier:          Ni3eowToxT1OAIFSoGEW8AZOs4zeRRwduog2/0qV2gg=
Subject key identifier:   C1:C2:DF:DA:93:0A:07:7F:02:EE:BB:67:6E:A4:C4:09:43:28:16:3C
Certificate issuer:       /CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
Certificate serial:       010D0C9F4328584D11726B9657ABE87D922E6080
Authority key identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     399525
IP address blocks:        2602:fc9e::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:6b:96:57:ab:e8:7d:92:2e:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=5ba7ea61-6d3f-4ca8-8cf8-b4e26b5eb900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:3d:41:fe:6d:08:7a:8a:ff:78:fc:68:88:
                    01:1b:7d:f0:ee:c4:6a:f8:57:7e:b6:46:de:d4:29:
                    8b:0d:5d:c2:8b:de:47:8a:50:e9:43:0f:28:e2:e4:
                    6f:a8:e8:98:b3:78:0e:7e:ea:38:59:77:ba:84:ec:
                    b9:31:39:77:3d:e9:f7:96:8e:6c:95:75:69:8d:2c:
                    9d:42:19:38:6c:c9:cf:5c:07:bf:fd:ec:6a:d6:80:
                    1e:97:b6:a7:5d:f8:4d:7c:60:2a:dd:fd:2a:f0:7d:
                    45:aa:26:e1:58:cf:e7:2e:95:d4:9b:70:63:ce:09:
                    51:8f:81:bc:6c:2d:59:13:de:26:81:1c:24:e0:b9:
                    cd:60:cb:8b:6d:92:58:26:75:d9:aa:98:2d:75:63:
                    75:0b:d9:2e:2a:e9:5f:82:ee:72:1b:78:74:42:c9:
                    5c:4c:c7:48:ba:1a:28:ae:9c:6d:aa:54:b1:36:8b:
                    5d:9c:35:d4:4e:0c:fc:30:a1:e2:70:ec:28:dd:f6:
                    17:42:ad:21:ff:36:8f:68:bf:b2:f9:9c:8a:d5:36:
                    ae:3b:fe:86:24:e2:a1:75:16:97:17:04:04:1c:05:
                    9a:e1:4d:bd:5b:d4:67:76:03:dd:dc:42:ee:da:c1:
                    00:1e:5e:ed:27:b3:3c:dc:1e:1a:37:44:a7:31:de:
                    d6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C2:DF:DA:93:0A:07:7F:02:EE:BB:67:6E:A4:C4:09:43:28:16:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl

            X509v3 Authority Key Identifier:
                keyid:FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc9e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:2e:fb:a8:91:20:68:07:45:40:e8:4b:cb:38:0f:55:05:35:
         16:f2:7f:ed:c4:68:c9:e6:0c:36:0b:6a:6f:7e:55:f3:53:d3:
         d1:04:ec:f8:62:7d:7d:67:dc:d0:14:65:a8:a4:cf:67:ce:a7:
         87:db:28:91:68:d5:7b:60:18:00:ef:0d:a8:e9:4f:34:3c:c8:
         b5:2e:64:42:74:1c:04:88:24:1a:be:71:5f:6e:af:f6:5b:13:
         c5:59:16:d5:67:64:12:40:dd:95:29:68:ef:f1:0c:53:f2:cc:
         f3:85:92:71:f2:dc:f6:8b:71:74:54:de:ac:12:e4:ac:3f:77:
         42:d8:25:c5:6e:bc:8e:fe:29:d3:8c:b4:44:10:cf:c7:12:0f:
         20:28:13:f6:91:e6:45:e3:7f:12:61:e1:93:ed:b4:a0:55:bd:
         23:e7:ca:32:d6:e9:bf:72:21:29:5f:59:cd:81:e0:50:9a:b5:
         3b:94:e6:c4:91:d3:b6:2d:52:c7:c1:d9:04:dc:ad:86:ac:97:
         f8:11:24:27:d6:fd:ae:91:10:80:f2:43:e7:a5:b6:e1:05:32:
         ee:64:70:32:4c:9b:b3:bc:dc:a4:e1:ab:48:20:66:d9:4f:20:
         e9:12:44:4f:1c:44:d5:31:d9:3e:f0:d5:58:09:33:e4:60:16:
         ef:e9:1a:85
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0RcmuWV6vofZIuYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWYxMjM5ZTYtM2FlNy00M2JlLTk2NmItMmY1Yjk2NzFj
MjlkMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk
NWJhN2VhNjEtNmQzZi00Y2E4LThjZjgtYjRlMjZiNWViOTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtY9Qf5tCHqK/3j8aIgBG33w7sRq+Fd+tkbe
1CmLDV3Ci95HilDpQw8o4uRvqOiYs3gOfuo4WXe6hOy5MTl3Pen3lo5slXVpjSyd
Qhk4bMnPXAe//exq1oAel7anXfhNfGAq3f0q8H1FqibhWM/nLpXUm3BjzglRj4G8
bC1ZE94mgRwk4LnNYMuLbZJYJnXZqpgtdWN1C9kuKulfgu5yG3h0QslcTMdIuhoo
rpxtqlSxNotdnDXUTgz8MKHicOwo3fYXQq0h/zaPaL+y+ZyK1TauO/6GJOKhdRaX
FwQEHAWa4U29W9RndgPd3ELu2sEAHl7tJ7M83B4aN0SnMd7W8wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMHC39qTCgd/Au67Z26kxAlDKBY8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lZjEy
MzllNi0zYWU3LTQzYmUtOTY2Yi0yZjViOTY3MWMyOWQvNjJiYTFiODAtMTc1MC0z
MGNjLWFlMDMtMGFkMmUxYzRmZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWYxMjM5ZTYtM2FlNy00M2JlLTk2
NmItMmY1Yjk2NzFjMjlkL2VmMTIzOWU2LTNhZTctNDNiZS05NjZiLTJmNWI5Njcx
YzI5ZC5jcmwwHwYDVR0jBBgwFoAU/L0bsopZ7ba7VJ2Dycy8rEO3tMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lZjEyMzllNi0zYWU3LTQzYmUtOTY2Yi0yZjVi
OTY3MWMyOWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8ngAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAly77qJEgaAdFQOhLyzgPVQU1FvJ/7cRoyeYMNgtqb35V81PT0QTs
+GJ9fWfc0BRlqKTPZ86nh9sokWjVe2AYAO8NqOlPNDzItS5kQnQcBIgkGr5xX26v
9lsTxVkW1WdkEkDdlSlo7/EMU/LM84WScfLc9otxdFTerBLkrD93QtglxW68jv4p
04y0RBDPxxIPICgT9pHmReN/EmHhk+20oFW9I+fKMtbpv3IhKV9ZzYHgUJq1O5Tm
xJHTti1Sx8HZBNythqyX+BEkJ9b9rpEQgPJD56W24QUy7mRwMkybs7zcpOGrSCBm
2U8g6RJETxxE1THZPvDVWAkz5GAW7+kahQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:03:00 2026 by rpki-client