Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/6ab277e0-3406-3960-8da2-8751ad317fd4.roa
File:                     6ab277e0-3406-3960-8da2-8751ad317fd4.roa (raw, json)
Hash identifier:          4KYIHsw9d6Testsj4yeuBf0MmcdCXgUVhfgiQ5Ts5ks=
Subject key identifier:   81:AC:9F:09:83:17:65:B8:DD:F4:8E:49:3C:F0:86:32:22:64:9F:4D
Certificate issuer:       /CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d
Certificate serial:       010D0C9F4328584D3B34E7536503FC099FC61E80
Authority key identifier: 80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/6ab277e0-3406-3960-8da2-8751ad317fd4.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     401339
IP address blocks:        2602:f836::/40 maxlen: 124
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:e7:53:65:03:fc:09:9f:c6:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=dc2f8f35-2521-498a-a976-652f01c7ed11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:13:dd:34:19:f0:ac:35:50:b2:3a:30:bf:
                    fe:78:b7:d1:8e:a1:0e:50:ff:cd:fe:c3:37:33:51:
                    67:a5:65:25:1b:e3:93:fa:c9:93:a9:f1:b3:97:6b:
                    f2:21:88:41:4b:cb:10:8f:04:4a:84:8c:c4:da:c3:
                    ca:bd:de:54:ef:8e:2b:5b:58:13:c0:8e:b3:68:3f:
                    70:ae:6c:10:be:6e:34:c5:8d:a9:0e:83:dd:bb:3a:
                    c2:8d:0b:6f:6d:f6:f3:f6:4c:1e:2d:e4:a8:7f:92:
                    3a:80:57:33:df:cf:43:fb:ed:dc:4b:66:5a:f5:71:
                    30:72:5c:1e:cf:19:ae:76:b4:b9:55:9d:70:b6:62:
                    96:b4:b2:d6:af:2f:ad:a9:d3:cb:d9:5d:d2:32:d4:
                    00:63:b6:f6:1e:f0:72:c0:b3:b6:4d:c8:8e:25:38:
                    51:40:f3:23:25:c9:64:97:a8:63:c9:f2:92:78:8f:
                    fd:0d:a6:e8:73:1e:f6:54:36:eb:df:3e:24:79:14:
                    34:ce:42:92:19:cf:06:08:67:01:f2:d4:4d:fe:f6:
                    24:bd:cd:18:8a:82:3f:5a:3b:7d:53:e3:51:d9:40:
                    9c:0b:92:be:dd:7a:d2:f3:1c:8a:0e:58:11:44:a1:
                    fc:09:63:b4:74:bc:2b:89:ad:d7:7c:52:96:eb:e9:
                    d9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AC:9F:09:83:17:65:B8:DD:F4:8E:49:3C:F0:86:32:22:64:9F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/6ab277e0-3406-3960-8da2-8751ad317fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl

            X509v3 Authority Key Identifier:
                keyid:80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f836::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6a:19:f1:54:b8:23:bc:5d:4d:a5:ce:a9:6b:75:13:ff:0c:
         9d:b5:f3:a7:e6:0e:8d:e5:85:7f:37:bd:0d:b8:79:76:bb:f3:
         bd:15:e2:cb:fb:91:e2:2a:8e:d3:81:44:f9:1e:f2:69:32:4e:
         07:cf:7f:59:32:7c:60:d0:f2:77:a0:c3:23:e5:9f:1d:75:28:
         08:ee:ca:d3:c2:c3:c6:79:ae:1f:c6:24:9b:cf:e2:8a:0f:49:
         51:fe:ea:92:12:06:65:5d:94:fe:a0:4e:bd:99:ed:f1:e2:4e:
         6e:30:42:ff:8a:fd:42:76:7d:10:e5:0b:dc:ef:73:18:22:f7:
         7a:52:6d:0c:60:1c:bd:3e:81:9a:c8:b5:52:ce:d5:b1:a6:49:
         45:46:59:a8:de:9f:4b:19:fa:72:9a:97:8f:7a:8a:c4:70:cf:
         b4:c1:9e:c3:2f:9b:5e:06:e3:ac:de:a6:2b:47:2f:88:66:5e:
         e2:a5:83:e1:0e:56:89:0f:d0:55:23:ae:e6:e1:e1:4d:45:52:
         97:77:21:4c:47:81:d7:08:1f:ba:98:c3:78:4e:da:b6:0a:12:
         4b:c2:46:4b:71:d2:33:1c:09:d6:09:d4:6f:66:d4:87:75:d6:
         d5:d6:a1:f7:ca:e7:48:9a:0b:ed:c7:d1:08:c2:4d:8f:6f:a6:
         35:22:c3:4e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE07NOdTZQP8CZ/GHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk0ZmNjYTgtZmNkNy00MzVlLWE0ZDEtYmQ5MjFkOTdj
NTFkMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk
ZGMyZjhmMzUtMjUyMS00OThhLWE5NzYtNjUyZjAxYzdlZDExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvIT3TQZ8Kw1ULI6ML/+eLfRjqEOUP/N/sM3
M1FnpWUlG+OT+smTqfGzl2vyIYhBS8sQjwRKhIzE2sPKvd5U744rW1gTwI6zaD9w
rmwQvm40xY2pDoPduzrCjQtvbfbz9kweLeSof5I6gFcz389D++3cS2Za9XEwclwe
zxmudrS5VZ1wtmKWtLLWry+tqdPL2V3SMtQAY7b2HvBywLO2TciOJThRQPMjJclk
l6hjyfKSeI/9Dabocx72VDbr3z4keRQ0zkKSGc8GCGcB8tRN/vYkvc0YioI/Wjt9
U+NR2UCcC5K+3XrS8xyKDlgRRKH8CWO0dLwria3XfFKW6+nZqwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIGsnwmDF2W43fSOSTzwhjIiZJ9NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OTRm
Y2NhOC1mY2Q3LTQzNWUtYTRkMS1iZDkyMWQ5N2M1MWQvNmFiMjc3ZTAtMzQwNi0z
OTYwLThkYTItODc1MWFkMzE3ZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjk0ZmNjYTgtZmNkNy00MzVlLWE0
ZDEtYmQ5MjFkOTdjNTFkLzY5NGZjY2E4LWZjZDctNDM1ZS1hNGQxLWJkOTIxZDk3
YzUxZC5jcmwwHwYDVR0jBBgwFoAUgBVYnoVuXIAP+jk8xrIGqdJM65owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82OTRmY2NhOC1mY2Q3LTQzNWUtYTRkMS1iZDky
MWQ5N2M1MWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4NgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAa2oZ8VS4I7xdTaXOqWt1E/8MnbXzp+YOjeWFfze9Dbh5drvzvRXi
y/uR4iqO04FE+R7yaTJOB89/WTJ8YNDyd6DDI+WfHXUoCO7K08LDxnmuH8Ykm8/i
ig9JUf7qkhIGZV2U/qBOvZnt8eJObjBC/4r9QnZ9EOUL3O9zGCL3elJtDGAcvT6B
msi1Us7VsaZJRUZZqN6fSxn6cpqXj3qKxHDPtMGewy+bXgbjrN6mK0cviGZe4qWD
4Q5WiQ/QVSOu5uHhTUVSl3chTEeB1wgfupjDeE7atgoSS8JGS3HSMxwJ1gnUb2bU
h3XW1dah98rnSJoL7cfRCMJNj2+mNSLDTg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:13:23 2026 by rpki-client