Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/c683c6fe-8f20-30a3-9dfe-741f74e0ac01.roa
File:                     c683c6fe-8f20-30a3-9dfe-741f74e0ac01.roa (raw, json)
Hash identifier:          NgVfYvDcCQ13yxJIA2Tt2yjhlBBPD/QgsNSTfv5513k=
Subject key identifier:   59:72:64:58:60:63:9C:1C:07:F4:63:FF:0A:E8:93:92:BD:68:57:F3
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F4328584D3F64F1BFB02F31F74D434380
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/c683c6fe-8f20-30a3-9dfe-741f74e0ac01.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     14490
IP address blocks:        2602:fa70::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:f1:bf:b0:2f:31:f7:4d:43:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=ae2ca1c6-5f44-4132-9c95-fc11006b267c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:6a:2c:0e:dc:45:0c:35:e8:6a:4c:da:2a:
                    30:2a:3d:c9:26:21:f4:15:64:37:70:e9:2a:a7:3b:
                    11:d9:91:c8:df:b5:91:ef:04:a6:7b:bc:4f:cd:ca:
                    24:33:d0:24:bf:f4:c2:1b:05:b3:ab:29:bf:cc:a1:
                    12:89:c5:30:91:65:45:22:34:f9:8f:51:12:27:24:
                    58:ef:c0:3f:da:0e:b9:39:5d:4d:f4:04:5f:44:62:
                    6c:21:f7:54:35:5f:14:c1:dd:b3:0a:d2:47:62:c2:
                    f2:df:94:de:27:0a:b8:a4:98:c3:72:a0:a7:e2:ea:
                    77:d4:b6:4c:bc:5b:3c:13:b4:3c:6b:2f:a2:6a:44:
                    f2:08:e5:ff:17:89:b5:d7:51:6f:b6:40:5a:4a:8e:
                    b1:e2:62:41:eb:c1:6a:56:c4:ee:a4:36:87:e4:cb:
                    d0:ae:bf:1d:89:35:66:e7:e4:0c:f6:b2:26:fa:d4:
                    bf:ef:d5:9f:a5:f7:13:82:0e:aa:29:6f:9b:d0:fc:
                    09:db:bc:5e:9b:20:ca:0a:1c:82:0e:d1:f7:e7:9d:
                    78:e6:11:a3:1a:36:e4:e3:14:0a:cb:0c:e5:98:da:
                    9b:ad:a5:89:93:69:04:b4:1d:32:3c:bf:92:e7:f9:
                    31:c4:db:af:19:ef:ed:6b:e3:9e:87:aa:09:75:fc:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:72:64:58:60:63:9C:1C:07:F4:63:FF:0A:E8:93:92:BD:68:57:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/c683c6fe-8f20-30a3-9dfe-741f74e0ac01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa70::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:70:7a:b9:9f:21:db:8e:fa:21:90:d3:26:9a:63:f3:c6:aa:
         6f:ca:7d:00:5d:7f:f2:ef:b2:b8:97:7e:77:0e:2f:6a:20:a0:
         5c:d5:24:91:e2:f8:56:03:6a:98:4d:25:73:1f:ae:62:dc:5e:
         3c:6e:df:a6:e8:77:ff:a9:5c:46:ee:b8:30:aa:d4:aa:60:6b:
         8a:c8:2c:40:35:c9:94:ff:05:90:bc:7d:c1:30:e4:ce:dd:ab:
         85:7e:ba:dd:ba:99:3b:c9:5a:b4:91:9f:b6:06:76:65:04:b1:
         df:4e:50:49:6b:67:a4:ee:c0:2f:ec:86:e3:eb:7e:a9:63:ed:
         f2:67:e0:4f:e6:07:61:d0:52:bc:20:92:35:98:9d:47:b9:26:
         36:90:40:40:ad:cc:e1:dc:92:57:c8:c7:cd:b7:28:56:95:20:
         b8:82:a0:5f:90:61:7c:79:65:5a:3c:e2:6a:ab:b7:27:4a:1d:
         3d:a8:b8:a7:98:5f:7f:b0:ab:22:c4:55:ad:20:76:cd:b7:6e:
         6a:ed:5b:79:83:f0:2a:63:68:7d:d3:69:25:57:42:77:2f:ab:
         8d:85:46:c4:c1:f5:ec:c7:2a:2e:a3:ab:96:1b:79:86:6a:1a:
         4e:24:ec:b6:a1:0f:33:d8:70:ab:f6:f5:9d:8c:d8:8e:48:c0:
         bd:88:d1:97
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0/ZPG/sC8x901DQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU3YjliMjgtNzkzNC00NTRhLThiMmYtMjQ2ZDg4ODlm
ZGJkMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
YWUyY2ExYzYtNWY0NC00MTMyLTljOTUtZmMxMTAwNmIyNjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApadqLA7cRQw16GpM2iowKj3JJiH0FWQ3cOkq
pzsR2ZHI37WR7wSme7xPzcokM9Akv/TCGwWzqym/zKESicUwkWVFIjT5j1ESJyRY
78A/2g65OV1N9ARfRGJsIfdUNV8Uwd2zCtJHYsLy35TeJwq4pJjDcqCn4up31LZM
vFs8E7Q8ay+iakTyCOX/F4m111FvtkBaSo6x4mJB68FqVsTupDaH5MvQrr8diTVm
5+QM9rIm+tS/79WfpfcTgg6qKW+b0PwJ27xemyDKChyCDtH355145hGjGjbk4xQK
ywzlmNqbraWJk2kEtB0yPL+S5/kxxNuvGe/ta+Oeh6oJdfzPxQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFlyZFhgY5wcB/Rj/wrok5K9aFfzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdi
OWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZkODg4OWZkYmQvYzY4M2M2ZmUtOGYyMC0z
MGEzLTlkZmUtNzQxZjc0ZTBhYzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWU3YjliMjgtNzkzNC00NTRhLThi
MmYtMjQ2ZDg4ODlmZGJkLzFlN2I5YjI4LTc5MzQtNDU0YS04YjJmLTI0NmQ4ODg5
ZmRiZC5jcmwwHwYDVR0jBBgwFoAU7CTbIeW+m2u6JkrzwmZOds7dmxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdiOWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZk
ODg4OWZkYmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6cAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAS3B6uZ8h2476IZDTJppj88aqb8p9AF1/8u+yuJd+dw4vaiCgXNUk
keL4VgNqmE0lcx+uYtxePG7fpuh3/6lcRu64MKrUqmBrisgsQDXJlP8FkLx9wTDk
zt2rhX663bqZO8latJGftgZ2ZQSx305QSWtnpO7AL+yG4+t+qWPt8mfgT+YHYdBS
vCCSNZidR7kmNpBAQK3M4dySV8jHzbcoVpUguIKgX5BhfHllWjziaqu3J0odPai4
p5hff7CrIsRVrSB2zbduau1beYPwKmNofdNpJVdCdy+rjYVGxMH17McqLqOrlht5
hmoaTiTstqEPM9hwq/b1nYzYjkjAvYjRlw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:33 2026 by rpki-client