Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa
File:                     63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa (raw, json)
Hash identifier:          Bt06tvHP6UvGXFtfe4jfxRrNWs13+wD7O6xkUwAtZ8o=
Subject key identifier:   9C:08:F5:95:10:1C:09:38:BD:17:80:85:A9:F3:0E:6A:63:0C:89:33
Certificate issuer:       /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial:       010D0C9F4328584D4D5A72A41C0679B46C61CB80
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     13638
IP address blocks:        2606:5100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:72:a4:1c:06:79:b4:6c:61:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=98486741-f2ae-44da-a4b4-f87775f23a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:2c:72:2c:72:37:6a:e2:a5:38:6c:11:03:
                    e9:b7:a1:8e:94:e5:a3:c7:f3:a3:ce:66:71:4d:91:
                    71:ef:94:6b:8b:3a:ad:35:d6:aa:30:05:64:c3:4f:
                    14:d1:27:28:8b:a9:59:1d:64:8d:53:6a:7d:4f:57:
                    47:b8:e8:ac:49:c5:d1:8f:4d:0b:fc:21:60:0a:c1:
                    3d:1c:77:45:4d:46:39:93:6a:c3:fc:2c:1f:47:b9:
                    44:17:ab:0a:13:22:d9:69:be:6b:5d:54:98:40:19:
                    13:38:8b:6f:db:64:a3:3f:72:df:f5:c5:cc:b5:38:
                    3b:28:2d:7e:af:46:f7:27:43:1f:9c:e6:5e:e7:6b:
                    7e:34:3c:29:06:73:34:27:b0:d9:b1:20:fc:2f:ac:
                    31:dc:14:e0:89:49:b0:85:1f:d7:24:c4:39:9b:24:
                    50:e3:e7:5f:e8:ca:88:1e:ff:fd:89:84:c7:4c:34:
                    07:bd:34:d8:2d:17:b3:68:08:12:f8:5d:eb:23:15:
                    a3:0e:4d:0f:9c:a6:7a:bf:0a:ca:9a:b1:ab:1d:27:
                    3c:08:d2:19:04:73:ba:f3:e7:c1:2e:8f:d7:7d:11:
                    39:68:83:13:88:44:5e:0b:a0:9c:b6:77:99:24:92:
                    7a:89:15:a7:96:2d:86:7c:31:b9:66:31:bc:22:e1:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:08:F5:95:10:1C:09:38:BD:17:80:85:A9:F3:0E:6A:63:0C:89:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl

            X509v3 Authority Key Identifier:
                keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c9:81:5c:4a:9e:fe:7f:46:bd:77:1b:f4:b6:25:4f:a1:72:
         8f:d2:5c:1b:a9:f2:36:cc:05:31:03:10:ab:51:cb:e3:87:a4:
         79:76:49:74:63:4e:38:c0:51:ab:62:35:7b:7b:95:24:5c:ba:
         96:72:36:ba:b2:bb:d4:53:26:27:01:67:dd:2d:86:84:1a:6f:
         2d:34:e0:a1:c2:61:33:27:16:36:62:cf:21:9a:a3:1c:8d:f2:
         0b:18:1b:55:91:29:fb:04:28:7c:26:88:b9:c9:c1:1b:29:ed:
         43:ee:01:8c:70:cb:2b:69:09:51:1e:18:fe:bd:a7:31:0d:f3:
         8a:f2:8e:78:f1:75:e1:c2:d4:f5:d9:a9:6a:e5:83:6d:38:83:
         b3:03:19:3d:5d:ab:2d:89:f7:e1:37:14:db:91:ae:90:c2:be:
         31:50:c6:0a:64:27:c8:28:85:a7:87:e7:d8:7c:b3:2e:90:8c:
         87:99:0f:a7:3a:89:4c:b1:54:b9:35:c2:28:65:5a:3c:c4:e9:
         1d:d2:6b:27:da:97:38:a9:f5:86:8e:70:66:e0:50:5d:24:7a:
         39:eb:73:fa:94:be:1d:4f:8d:6b:8e:52:6f:65:e3:05:de:91:
         cb:55:c8:7d:a3:68:07:85:a4:ea:59:08:69:06:54:b2:30:4a:
         dd:92:9f:f7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1NWnKkHAZ5tGxhy4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4
ZmI3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
OTg0ODY3NDEtZjJhZS00NGRhLWE0YjQtZjg3Nzc1ZjIzYTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLUscixyN2ripThsEQPpt6GOlOWjx/OjzmZx
TZFx75RrizqtNdaqMAVkw08U0Scoi6lZHWSNU2p9T1dHuOisScXRj00L/CFgCsE9
HHdFTUY5k2rD/CwfR7lEF6sKEyLZab5rXVSYQBkTOItv22SjP3Lf9cXMtTg7KC1+
r0b3J0MfnOZe52t+NDwpBnM0J7DZsSD8L6wx3BTgiUmwhR/XJMQ5myRQ4+df6MqI
Hv/9iYTHTDQHvTTYLRezaAgS+F3rIxWjDk0PnKZ6vwrKmrGrHSc8CNIZBHO68+fB
Lo/XfRE5aIMTiEReC6CctneZJJJ6iRWnli2GfDG5ZjG8IuFzlwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJwI9ZUQHAk4vReAhanzDmpjDIkzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2
YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvNjNiYzhiODEtZjdkNy0z
YzI5LTgyMmQtNTk3YzJmNWJmZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3
NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy
OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5
MGUwMjhmYjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZRADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCZyYFcSp7+f0a9dxv0tiVPoXKP0lwbqfI2zAUxAxCrUcvjh6R5dkl0
Y044wFGrYjV7e5UkXLqWcja6srvUUyYnAWfdLYaEGm8tNOChwmEzJxY2Ys8hmqMc
jfILGBtVkSn7BCh8Joi5ycEbKe1D7gGMcMsraQlRHhj+vacxDfOK8o548XXhwtT1
2alq5YNtOIOzAxk9XastiffhNxTbka6Qwr4xUMYKZCfIKIWnh+fYfLMukIyHmQ+n
OolMsVS5NcIoZVo8xOkd0msn2pc4qfWGjnBm4FBdJHo563P6lL4dT41rjlJvZeMF
3pHLVch9o2gHhaTqWQhpBlSyMErdkp/3
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:29:50 2026 by rpki-client