Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4c8005e2-f49c-3d83-9306-d742a799a28f.roa
File:                     4c8005e2-f49c-3d83-9306-d742a799a28f.roa (raw, json)
Hash identifier:          nJvm58Br3yiBLZ01rULjyasF/R3uJms8tvdb3BOipeM=
Subject key identifier:   8E:1B:27:7B:13:79:F7:7D:76:56:73:4E:79:6C:1A:11:07:3F:ED:FE
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F4328584DA815821EBBDAE9BBBD3048C0
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4c8005e2-f49c-3d83-9306-d742a799a28f.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     23470
IP address blocks:        2602:2d4:e02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:82:1e:bb:da:e9:bb:bd:30:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=3526f077-eda8-47aa-b82e-e0c9bf34fa3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:f4:21:21:02:15:83:8c:73:17:7c:61:65:
                    d7:3c:b3:b1:42:46:71:df:fd:f9:aa:10:a9:05:b2:
                    a6:0e:f0:00:17:d8:a7:2b:e1:31:a3:7f:a6:2a:58:
                    fc:3c:35:16:1c:64:77:6d:1d:23:96:6c:ba:f7:2f:
                    73:b2:7d:79:00:5b:be:e5:06:60:c3:57:d8:7d:5f:
                    1e:09:f5:f6:45:f8:7d:88:4c:89:e9:09:d4:91:3f:
                    79:27:78:29:a9:b6:dd:be:86:77:65:39:ab:37:c2:
                    04:99:78:a4:cc:81:2c:fc:76:dc:2c:3f:93:a5:0e:
                    c1:0c:31:cc:bd:22:9b:12:0a:ce:b9:a2:da:78:3a:
                    45:ba:ef:95:c8:37:84:07:5b:18:8a:d2:3d:dd:7c:
                    54:e2:4c:bc:e5:78:f3:0c:95:f7:81:94:ce:a3:91:
                    18:29:a3:7d:5c:b8:69:ce:e2:53:a6:a1:3f:db:2f:
                    51:dd:20:d2:36:01:91:e1:36:4a:f8:ec:6e:f1:2d:
                    c4:4d:f7:19:e1:f7:14:9a:02:fa:90:73:c6:fb:ff:
                    8a:59:a2:7d:27:cf:0a:99:9a:a3:47:4d:3a:07:36:
                    fb:f1:70:19:7d:95:ca:b5:3e:3e:da:02:c8:9d:9c:
                    e5:d4:c4:be:4b:b7:a7:bb:1c:0c:1e:b3:ca:38:55:
                    2a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1B:27:7B:13:79:F7:7D:76:56:73:4E:79:6C:1A:11:07:3F:ED:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4c8005e2-f49c-3d83-9306-d742a799a28f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4:e02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:48:bb:49:c6:79:f1:27:25:23:43:ab:a9:37:7e:c9:bb:6a:
         4c:49:a1:3e:3b:6f:4a:3e:b3:a2:f6:0d:72:0a:77:aa:b2:79:
         15:91:81:dc:d3:79:2d:95:fc:16:d6:b5:fa:cd:51:bd:7c:5a:
         7c:36:9d:34:41:7b:05:fb:6b:f8:07:66:29:13:d0:a8:d7:f7:
         2f:18:28:e2:66:f8:c3:46:24:c8:4b:b2:88:89:3f:d4:73:65:
         fd:49:9c:44:25:71:d3:ec:84:7a:7d:1e:d1:d5:82:57:63:a1:
         91:9a:7e:a5:89:c6:11:1b:45:86:23:35:ac:9e:4d:10:b9:cd:
         68:16:4d:c0:60:27:05:af:2d:68:ae:02:bc:82:c4:af:6e:d4:
         5f:a0:2e:29:79:b1:fa:1f:85:58:e5:8b:86:39:10:2d:49:ad:
         3b:af:01:ae:e0:66:a8:e5:e8:08:70:0b:3b:85:05:43:2b:45:
         ba:3e:90:91:47:a6:57:5d:e0:11:16:65:03:c3:74:a4:7e:c2:
         bc:42:0d:01:77:8f:16:ec:55:43:1a:ba:d8:2f:ec:b6:b8:8c:
         fe:11:ca:4f:6d:68:ea:68:c2:aa:13:41:1f:b1:96:a1:5b:a7:
         21:b8:4b:a8:f9:a2:79:27:80:55:fd:f0:a7:b8:49:aa:1c:ee:
         ff:a9:6e:28
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2oFYIeu9rpu70wSMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5
NzA3MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk
MzUyNmYwNzctZWRhOC00N2FhLWI4MmUtZTBjOWJmMzRmYTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn830ISECFYOMcxd8YWXXPLOxQkZx3/35qhCp
BbKmDvAAF9inK+Exo3+mKlj8PDUWHGR3bR0jlmy69y9zsn15AFu+5QZgw1fYfV8e
CfX2Rfh9iEyJ6QnUkT95J3gpqbbdvoZ3ZTmrN8IEmXikzIEs/HbcLD+TpQ7BDDHM
vSKbEgrOuaLaeDpFuu+VyDeEB1sYitI93XxU4ky85XjzDJX3gZTOo5EYKaN9XLhp
zuJTpqE/2y9R3SDSNgGR4TZK+Oxu8S3ETfcZ4fcUmgL6kHPG+/+KWaJ9J88KmZqj
R006Bzb78XAZfZXKtT4+2gLInZzl1MS+S7enuxwMHrPKOFUq8QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI4bJ3sTefd9dlZzTnlsGhEHP+3+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm
Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvNGM4MDA1ZTItZjQ5Yy0z
ZDgzLTkzMDYtZDc0MmE3OTlhMjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz
OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi
OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji
ZWFjYjk3MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIC1A4C
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB9Iu0nGefEnJSNDq6k3fsm7akxJoT47b0o+s6L2DXIKd6qyeRWR
gdzTeS2V/BbWtfrNUb18Wnw2nTRBewX7a/gHZikT0KjX9y8YKOJm+MNGJMhLsoiJ
P9RzZf1JnEQlcdPshHp9HtHVgldjoZGafqWJxhEbRYYjNayeTRC5zWgWTcBgJwWv
LWiuAryCxK9u1F+gLil5sfofhVjli4Y5EC1JrTuvAa7gZqjl6AhwCzuFBUMrRbo+
kJFHpldd4BEWZQPDdKR+wrxCDQF3jxbsVUMautgv7La4jP4Ryk9taOpowqoTQR+x
lqFbpyG4S6j5onkngFX98Ke4Saoc7v+pbig=
-----END CERTIFICATE-----
Generated at Wed May 13 09:27:58 2026 by rpki-client