Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/55d8d5b8-eb43-326e-8ae0-792809a43aa9.roa
File:                     55d8d5b8-eb43-326e-8ae0-792809a43aa9.roa (raw, json)
Hash identifier:          7nYAYv8YmjexVEnh4uyNbIPL4ZDUOhkIZxXgUSaC1lo=
Subject key identifier:   25:53:BF:E1:B9:0C:FD:86:CD:F5:EA:EA:82:BD:41:A7:57:DB:A0:10
Certificate issuer:       /CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
Certificate serial:       010D0C9F4328584D2BDA1442070AE5D563574C48
Authority key identifier: FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/55d8d5b8-eb43-326e-8ae0-792809a43aa9.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     63101
IP address blocks:        2602:f824:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:14:42:07:0a:e5:d5:63:57:4c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=a458e8cf-4521-4d97-8972-b7a33a803b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cb:24:2f:cc:02:4c:4b:a4:3a:de:5c:2f:f6:
                    18:ba:98:59:c9:db:c9:7a:33:44:72:ce:f3:d0:2c:
                    51:7f:47:df:76:58:cf:fa:f3:f7:95:91:8c:0c:c9:
                    96:f1:d4:28:81:6c:66:1b:65:a0:ba:96:a7:32:e3:
                    c6:57:e4:b5:13:b9:39:87:f5:86:b8:76:5a:a5:93:
                    6b:dd:78:4a:c3:78:4e:40:4d:e4:74:6f:f0:3a:7b:
                    bd:8e:2c:8d:82:a1:f6:32:ae:19:95:9f:84:5c:a9:
                    fd:07:e5:e5:8a:86:e4:31:c8:4e:19:f0:70:66:88:
                    d6:1b:1b:63:5a:4b:74:9d:e4:07:6f:37:89:3c:a2:
                    59:40:32:16:77:bd:c3:7d:57:3b:13:31:57:4a:42:
                    71:0d:fe:a8:bb:d5:eb:68:d1:43:fd:85:f3:45:c2:
                    19:f9:86:3f:9f:41:a2:a7:13:85:bf:ff:31:4d:de:
                    e7:ab:0c:78:9c:d2:25:cd:07:7d:d2:c7:ab:f6:42:
                    b1:5e:97:cd:30:e9:a7:48:cd:eb:8f:9b:7a:56:cd:
                    c0:6f:0c:b6:58:12:ba:55:71:19:fe:0c:e2:b7:ed:
                    70:a7:da:72:91:30:59:96:ef:b6:c4:b1:ce:71:42:
                    91:9a:5d:61:78:8f:57:8f:2f:47:f3:db:80:20:6c:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:53:BF:E1:B9:0C:FD:86:CD:F5:EA:EA:82:BD:41:A7:57:DB:A0:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/55d8d5b8-eb43-326e-8ae0-792809a43aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl

            X509v3 Authority Key Identifier:
                keyid:FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f824:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:cc:6a:2c:9b:5d:e9:ab:07:26:fc:01:4b:d1:19:2f:71:fe:
         0c:cd:91:fa:7d:8e:42:e7:41:66:7a:45:0c:c3:56:29:57:c1:
         9a:ac:2d:cc:23:f2:f5:31:e5:f4:f6:92:54:2c:c7:e6:c0:3e:
         73:66:d7:bf:f2:e7:3f:a6:0f:37:64:51:5d:00:fd:77:32:70:
         aa:7d:5f:5d:0b:a8:e4:ec:f4:dc:14:67:15:f9:8a:91:df:03:
         77:0a:61:07:45:6b:2a:fe:7d:33:97:f6:20:10:52:4c:70:f8:
         e7:93:74:fa:b7:03:0a:d4:34:64:30:4c:a9:dc:11:a9:f0:e3:
         e6:6a:05:e3:d8:61:1b:4c:c3:07:6a:ca:ac:98:16:79:51:91:
         f8:37:2d:85:f5:5e:84:c0:6e:5b:38:92:9b:b5:55:73:51:5b:
         c1:ce:d3:7d:4c:e9:4c:c9:ad:1a:a5:96:0b:43:29:00:68:ec:
         ca:99:d1:8e:ff:bf:d3:52:1c:51:6d:a3:a5:df:99:f5:1b:b1:
         f1:ec:2b:f8:67:88:25:db:a6:d1:f4:12:79:0d:dd:dc:25:0a:
         37:ed:2b:34:83:f6:90:d1:6c:93:17:11:4c:7d:8a:23:81:e2:
         cd:3e:09:36:9f:e7:a5:a6:1a:05:66:46:e5:8b:5f:8e:30:68:
         5c:8f:ff:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0r2hRCBwrl1WNXTEgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDIzZGNlY2EtYTViNS00ZjlhLTg1MDktNDlhYzAxZjQx
YzY2MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk
YTQ1OGU4Y2YtNDUyMS00ZDk3LTg5NzItYjdhMzNhODAzYjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcskL8wCTEukOt5cL/YYuphZydvJejNEcs7z
0CxRf0ffdljP+vP3lZGMDMmW8dQogWxmG2WgupanMuPGV+S1E7k5h/WGuHZapZNr
3XhKw3hOQE3kdG/wOnu9jiyNgqH2Mq4ZlZ+EXKn9B+XliobkMchOGfBwZojWGxtj
Wkt0neQHbzeJPKJZQDIWd73DfVc7EzFXSkJxDf6ou9XraNFD/YXzRcIZ+YY/n0Gi
pxOFv/8xTd7nqwx4nNIlzQd90ser9kKxXpfNMOmnSM3rj5t6Vs3Abwy2WBK6VXEZ
/gzit+1wp9pykTBZlu+2xLHOcUKRml1heI9Xjy9H89uAIGw7IwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCVTv+G5DP2GzfXq6oK9QadX26AQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MjNk
Y2VjYS1hNWI1LTRmOWEtODUwOS00OWFjMDFmNDFjNjYvNTVkOGQ1YjgtZWI0My0z
MjZlLThhZTAtNzkyODA5YTQzYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDIzZGNlY2EtYTViNS00ZjlhLTg1
MDktNDlhYzAxZjQxYzY2LzQyM2RjZWNhLWE1YjUtNGY5YS04NTA5LTQ5YWMwMWY0
MWM2Ni5jcmwwHwYDVR0jBBgwFoAU/3Vd00ovBtKid/BxEOGI+/7B1+kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MjNkY2VjYS1hNWI1LTRmOWEtODUwOS00OWFj
MDFmNDFjNjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4JAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIjMaiybXemrByb8AUvRGS9x/gzNkfp9jkLnQWZ6RQzDVilXwZqs
Lcwj8vUx5fT2klQsx+bAPnNm17/y5z+mDzdkUV0A/XcycKp9X10LqOTs9NwUZxX5
ipHfA3cKYQdFayr+fTOX9iAQUkxw+OeTdPq3AwrUNGQwTKncEanw4+ZqBePYYRtM
wwdqyqyYFnlRkfg3LYX1XoTAbls4kpu1VXNRW8HO031M6UzJrRqllgtDKQBo7MqZ
0Y7/v9NSHFFto6XfmfUbsfHsK/hniCXbptH0EnkN3dwlCjftKzSD9pDRbJMXEUx9
iiOB4s0+CTaf56WmGgVmRuWLX44waFyP/5M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:21 2026 by rpki-client