Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa
File:                     8c677012-77d5-3579-a76a-b2ec649d5fec.roa (raw, json)
Hash identifier:          PS7aZ46lBegx7U1HLxANuAnBTrxg7sq4TV4AgO/U/6o=
Subject key identifier:   FD:D2:72:93:3A:7D:34:AC:81:3C:A2:AD:0C:A9:69:AD:7A:91:20:56
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F4328584DB4A584A1E8960C77E4C22C00
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        2602:fa28:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:84:a1:e8:96:0c:77:e4:c2:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=0502a1fe-f85b-4784-952f-abb551200ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:93:28:43:91:98:6c:a7:e6:f3:18:49:0a:
                    7b:a5:ef:ce:ba:ee:51:c2:a5:0c:b7:4d:9f:ef:ad:
                    f3:87:42:fe:ae:35:00:b9:a1:40:c3:13:3c:10:e9:
                    b0:94:8b:96:81:f2:f4:c5:31:2f:90:13:a9:94:04:
                    c3:1f:cc:e2:49:c1:ff:e7:11:33:be:f7:c7:37:2c:
                    2d:a5:4e:d5:44:62:04:a3:5d:0f:24:4c:d9:af:1e:
                    6b:ef:a3:fa:2b:bf:d1:1c:c5:d1:af:ea:6a:32:20:
                    d3:4d:6a:92:e8:b8:2d:52:e6:73:6f:4e:dd:43:13:
                    89:c1:03:8c:09:dc:80:b3:ef:fa:51:81:0c:d7:6d:
                    5d:72:e9:b9:d6:14:8e:4d:9c:a0:ee:a6:52:29:b1:
                    04:aa:f3:69:92:55:3c:30:f4:cf:a3:f2:37:12:17:
                    90:7f:04:7b:17:99:ee:54:c8:86:04:db:59:bf:fa:
                    af:31:f9:a7:f3:fc:0b:cb:d4:57:84:d6:af:ca:7c:
                    a4:1f:c8:a0:ea:c5:ab:b7:a2:71:e4:d1:b2:9f:5d:
                    7e:0d:9e:2f:6b:43:3d:ff:85:8d:28:d9:b8:f7:f5:
                    d2:5c:1e:11:87:d8:00:3b:41:73:08:71:b2:75:9a:
                    b9:a2:01:71:c1:ee:62:77:05:44:2d:da:5b:e1:af:
                    b7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D2:72:93:3A:7D:34:AC:81:3C:A2:AD:0C:A9:69:AD:7A:91:20:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa28:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:cc:ea:34:a8:3f:d0:df:2c:c7:69:4f:9f:46:8b:6a:a8:65:
         77:d4:db:ee:b2:0c:98:a0:d8:7f:4c:d3:cb:74:f4:90:fa:e5:
         53:d1:e1:e6:96:91:71:cf:61:2a:0b:59:24:3a:c4:fd:72:c6:
         6d:a6:f8:2d:68:15:b2:a2:6f:15:eb:b7:3e:d6:52:26:a6:64:
         e0:a6:b7:e1:5a:f5:38:25:27:fd:50:cb:c6:c2:4b:6c:da:69:
         2a:22:4d:e4:49:84:59:16:f4:39:06:86:bd:62:35:0c:d6:7a:
         43:b2:d7:d3:b3:a6:45:43:49:58:1d:f3:d1:e0:65:70:b6:38:
         bb:fe:73:30:a3:83:f5:23:b1:11:48:39:1f:7f:32:8b:47:fa:
         6e:64:b6:9c:e6:4d:58:14:4e:48:cf:fc:42:05:d6:5b:b3:80:
         ec:96:60:21:6f:23:75:05:8d:d7:a0:f5:01:99:d2:23:fe:0f:
         a9:34:ec:30:3c:81:e4:5f:a5:f4:1e:84:72:a7:98:91:01:2d:
         18:67:bd:27:f1:22:02:4b:90:52:ed:53:d8:be:34:0e:c4:f5:
         96:b3:1e:ea:d9:f3:8d:df:c3:52:64:e3:08:53:00:db:33:3b:
         7a:b0:2f:ba:ae:a3:d5:9f:dd:9e:3b:9e:91:9d:1e:3d:8b:c3:
         8b:d0:8d:ce
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE20pYSh6JYMd+TCLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM2MzBmODItMTY5Yy00YjAzLWFkNDItYWE2ZjViNzFk
OTFkMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
MDUwMmExZmUtZjg1Yi00Nzg0LTk1MmYtYWJiNTUxMjAwYWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7GTKEORmGyn5vMYSQp7pe/Ouu5RwqUMt02f
763zh0L+rjUAuaFAwxM8EOmwlIuWgfL0xTEvkBOplATDH8ziScH/5xEzvvfHNywt
pU7VRGIEo10PJEzZrx5r76P6K7/RHMXRr+pqMiDTTWqS6LgtUuZzb07dQxOJwQOM
CdyAs+/6UYEM121dcum51hSOTZyg7qZSKbEEqvNpklU8MPTPo/I3EheQfwR7F5nu
VMiGBNtZv/qvMfmn8/wLy9RXhNavynykH8ig6sWrt6Jx5NGyn11+DZ4va0M9/4WN
KNm49/XSXB4Rh9gAO0FzCHGydZq5ogFxwe5idwVELdpb4a+30wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP3ScpM6fTSsgTyirQypaa16kSBWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYz
MGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZmNWI3MWQ5MWQvOGM2NzcwMTItNzdkNS0z
NTc5LWE3NmEtYjJlYzY0OWQ1ZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTM2MzBmODItMTY5Yy00YjAzLWFk
NDItYWE2ZjViNzFkOTFkL2EzNjMwZjgyLTE2OWMtNGIwMy1hZDQyLWFhNmY1Yjcx
ZDkxZC5jcmwwHwYDVR0jBBgwFoAUjLsSDojg5BDceZoRzF7g6sFADkYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYzMGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZm
NWI3MWQ5MWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6KAAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGPM6jSoP9DfLMdpT59Gi2qoZXfU2+6yDJig2H9M08t09JD65VPR
4eaWkXHPYSoLWSQ6xP1yxm2m+C1oFbKibxXrtz7WUiamZOCmt+Fa9TglJ/1Qy8bC
S2zaaSoiTeRJhFkW9DkGhr1iNQzWekOy19OzpkVDSVgd89HgZXC2OLv+czCjg/Uj
sRFIOR9/MotH+m5ktpzmTVgUTkjP/EIF1luzgOyWYCFvI3UFjdeg9QGZ0iP+D6k0
7DA8geRfpfQehHKnmJEBLRhnvSfxIgJLkFLtU9i+NA7E9ZazHurZ843fw1Jk4whT
ANszO3qwL7quo9Wf3Z47npGdHj2Lw4vQjc4=
-----END CERTIFICATE-----
Generated at Wed May 13 04:13:57 2026 by rpki-client