Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/2f3e429c-ddbb-33f9-9261-a211fa58d9b3.roa
File:                     2f3e429c-ddbb-33f9-9261-a211fa58d9b3.roa (raw, json)
Hash identifier:          gJCjdmrQh5iYM2cnHbbJl5n5Lwlrs56nocMNOMKynnA=
Subject key identifier:   A8:97:9A:94:2D:F3:AA:25:AE:C6:32:BF:56:7D:62:57:D5:BD:C8:67
Certificate issuer:       /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial:       010D0C9F4328584D19F93EC25C1A9610B7876C00
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/2f3e429c-ddbb-33f9-9261-a211fa58d9b3.roa
Signing time:             Sun 08 Mar 2026 15:18:59 +0000
ROA not before:           Sun 08 Mar 2026 15:18:59 +0000
ROA not after:            Sat 06 Jun 2026 15:18:59 +0000
asID:                     152878
IP address blocks:        2602:f7a8::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:f9:3e:c2:5c:1a:96:10:b7:87:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
        Validity
            Not Before: Mar  8 15:18:59 2026 GMT
            Not After : Jun  6 15:18:59 2026 GMT
        Subject: CN=277d0a68-b8fd-4b23-8d36-e31135debe0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:91:f7:4a:ad:2c:65:ba:95:d9:fe:91:55:36:
                    98:8e:8a:4d:ad:2f:8c:d6:d9:44:d2:4f:b0:5a:df:
                    c4:b9:57:9a:cd:74:3d:4d:d2:f8:8c:01:90:45:c6:
                    3d:fc:ff:49:cf:de:28:bc:0c:a6:bd:87:28:12:38:
                    65:f3:3a:58:5d:3b:bd:8c:93:c2:1b:0d:cc:ac:87:
                    36:bf:36:c4:d2:9a:b9:24:ee:0c:3e:45:d5:90:e0:
                    f3:4f:08:f3:7f:e6:ce:9b:f6:8e:af:ea:ae:01:ea:
                    25:c6:d8:45:16:67:0f:44:93:5b:ac:01:1c:9a:ff:
                    08:7e:8b:17:bc:e1:68:9b:39:ec:73:27:b2:7a:c0:
                    13:25:9f:ce:fd:a0:95:2e:c7:cf:4c:e0:27:5a:b0:
                    2f:72:19:a4:dd:98:27:e5:f8:50:3e:51:91:5e:bb:
                    22:21:25:ac:ad:d5:6d:39:09:21:bc:51:ec:94:e9:
                    c6:91:f2:dd:e5:cf:3b:6e:e0:c3:94:2d:43:b9:a8:
                    99:00:5b:9f:c2:68:cf:89:35:76:e1:59:8c:ca:7e:
                    3c:c3:c6:11:6b:48:4b:29:b3:ec:e2:ce:25:33:d5:
                    5c:59:9f:3b:04:5a:d4:68:bb:10:88:28:15:6e:70:
                    e4:3f:ad:6d:80:d8:54:4d:6c:7c:71:57:15:1e:7a:
                    c5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:97:9A:94:2D:F3:AA:25:AE:C6:32:BF:56:7D:62:57:D5:BD:C8:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/2f3e429c-ddbb-33f9-9261-a211fa58d9b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl

            X509v3 Authority Key Identifier:
                keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:07:dc:24:b4:f7:c3:5a:99:35:b6:43:30:b7:5f:06:41:e8:
         df:dc:bb:8c:3b:76:f1:5a:a8:3c:79:59:3e:d3:8b:5e:f5:6b:
         61:1a:bb:d6:8d:0c:7a:75:a9:5e:90:2a:e2:8d:96:ba:59:32:
         07:aa:e9:c9:dc:81:08:bc:1f:8e:20:a2:70:1f:82:b2:11:e0:
         77:ba:a3:6e:15:86:68:dc:30:28:58:bc:a4:22:49:2b:18:08:
         a7:1a:26:8c:ea:23:c2:c8:60:01:d9:5b:40:9b:cd:3b:3e:96:
         29:96:e3:72:77:ee:5e:b8:5b:83:2b:a3:33:db:21:73:ab:b0:
         fb:cb:48:2e:1e:77:87:f2:d5:b1:74:5a:23:d2:5f:d5:8c:31:
         d6:d9:b0:02:c9:21:e5:7e:27:cd:73:0c:84:3b:5c:f3:09:86:
         09:04:89:33:57:f4:e0:85:68:36:ba:94:f6:40:1f:35:f4:e1:
         a3:c1:8c:ad:a0:5c:49:dd:b1:dc:ff:53:04:39:c6:4f:03:e4:
         7d:40:d1:e6:36:a2:08:0f:b1:85:12:e8:15:18:11:fe:c7:90:
         e7:5b:1f:e0:8e:fc:3c:1d:10:50:e7:97:aa:5f:5d:43:33:24:
         d1:06:b8:67:71:0e:64:33:fe:7c:46:0c:5b:55:b0:36:6f:7f:
         09:aa:76:f3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0Z+T7CXBqWELeHbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk
NDEwMB4XDTI2MDMwODE1MTg1OVoXDTI2MDYwNjE1MTg1OVowLzEtMCsGA1UEAxMk
Mjc3ZDBhNjgtYjhmZC00YjIzLThkMzYtZTMxMTM1ZGViZTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpH3Sq0sZbqV2f6RVTaYjopNrS+M1tlE0k+w
Wt/EuVeazXQ9TdL4jAGQRcY9/P9Jz94ovAymvYcoEjhl8zpYXTu9jJPCGw3MrIc2
vzbE0pq5JO4MPkXVkODzTwjzf+bOm/aOr+quAeolxthFFmcPRJNbrAEcmv8IfosX
vOFomznscyeyesATJZ/O/aCVLsfPTOAnWrAvchmk3Zgn5fhQPlGRXrsiISWsrdVt
OQkhvFHslOnGkfLd5c87buDDlC1DuaiZAFufwmjPiTV24VmMyn48w8YRa0hLKbPs
4s4lM9VcWZ87BFrUaLsQiCgVbnDkP61tgNhUTWx8cVcVHnrFAwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKiXmpQt86olrsYyv1Z9YlfVvchnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi
NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvMmYzZTQyOWMtZGRiYi0z
M2Y5LTkyNjEtYTIxMWZhNThkOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3
OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4
ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj
NTZiOGQ0MTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3qAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfgfcJLT3w1qZNbZDMLdfBkHo39y7jDt28VqoPHlZPtOLXvVrYRq7
1o0MenWpXpAq4o2WulkyB6rpydyBCLwfjiCicB+CshHgd7qjbhWGaNwwKFi8pCJJ
KxgIpxomjOojwshgAdlbQJvNOz6WKZbjcnfuXrhbgyujM9shc6uw+8tILh53h/LV
sXRaI9Jf1Ywx1tmwAskh5X4nzXMMhDtc8wmGCQSJM1f04IVoNrqU9kAfNfTho8GM
raBcSd2x3P9TBDnGTwPkfUDR5jaiCA+xhRLoFRgR/seQ51sf4I78PB0QUOeXql9d
QzMk0Qa4Z3EOZDP+fEYMW1WwNm9/Cap28w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:08 2026 by rpki-client