Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/9eb16cb2-fd78-30d6-b86c-6702c0fe4196.roa
File:                     9eb16cb2-fd78-30d6-b86c-6702c0fe4196.roa (raw, json)
Hash identifier:          a+DPSv0V6L12Atz7ZP6PPVcWC5MXzAbMredqAQLbiFE=
Subject key identifier:   82:8B:4E:0B:64:A0:0E:1D:15:C4:95:AA:AE:E1:B5:BE:DF:8A:85:FC
Certificate issuer:       /CN=713e9415-01be-4e53-a6d3-2fe0b3bd335d
Certificate serial:       010D0C9F4328584D980D83F9CBF59A197E3DB940
Authority key identifier: 48:22:83:97:A4:52:28:6C:A5:C8:CF:42:5F:BE:2A:9D:21:7E:B9:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/9eb16cb2-fd78-30d6-b86c-6702c0fe4196.roa
Signing time:             Wed 22 Apr 2026 19:11:41 +0000
ROA not before:           Wed 22 Apr 2026 19:11:41 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     401227
IP address blocks:        2602:f77e:1::/48 maxlen: 48
                          2602:f77e:2::/48 maxlen: 48
                          2602:f77e:3::/48 maxlen: 48
                          2602:f77e:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/713e9415-01be-4e53-a6d3-2fe0b3bd335d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/713e9415-01be-4e53-a6d3-2fe0b3bd335d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:0d:83:f9:cb:f5:9a:19:7e:3d:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713e9415-01be-4e53-a6d3-2fe0b3bd335d
        Validity
            Not Before: Apr 22 19:11:41 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=b4350f48-4ec7-47d7-95d2-b10f3beecd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9a:21:90:9d:f0:69:26:12:d6:91:5f:53:d4:
                    8e:7b:76:30:fd:58:a4:cf:72:0a:07:cd:12:ec:5b:
                    3b:ff:8a:b4:7f:8f:68:62:f2:02:22:49:9a:3b:63:
                    52:86:ee:44:ca:1c:66:6a:77:55:91:98:15:76:b5:
                    2a:d6:e1:65:97:8a:dd:7c:0e:a5:30:61:13:e5:81:
                    b5:94:c6:0c:59:01:1d:49:2e:48:45:61:35:8a:af:
                    b1:8b:77:2c:d7:7f:dc:47:cc:f9:68:36:42:de:97:
                    78:04:2a:19:b7:e4:4e:2c:24:6f:90:92:c7:67:2c:
                    cb:ee:92:12:30:c0:97:b3:05:95:37:c8:21:74:6b:
                    b1:61:a2:cf:0f:8b:2f:51:bd:ab:4c:16:aa:37:f1:
                    99:ef:74:56:02:19:83:32:92:87:13:0c:c7:b0:ce:
                    bd:32:c4:29:53:1c:e4:3b:98:7c:9e:c2:40:52:e9:
                    57:f1:30:30:a9:d9:b0:93:78:13:21:41:7d:1d:ae:
                    22:c2:5b:28:9f:84:76:35:72:97:c4:b5:d7:a2:29:
                    ac:6a:eb:c6:79:2a:6f:d6:e7:ab:68:ca:90:6e:42:
                    da:cf:0b:78:8a:f5:62:18:b1:34:a3:2f:b4:14:15:
                    41:98:7f:29:aa:11:08:ea:4e:65:fb:db:05:51:02:
                    9c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8B:4E:0B:64:A0:0E:1D:15:C4:95:AA:AE:E1:B5:BE:DF:8A:85:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/9eb16cb2-fd78-30d6-b86c-6702c0fe4196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/713e9415-01be-4e53-a6d3-2fe0b3bd335d.crl

            X509v3 Authority Key Identifier:
                keyid:48:22:83:97:A4:52:28:6C:A5:C8:CF:42:5F:BE:2A:9D:21:7E:B9:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f77e:1::-2602:f77e:3:ffff:ffff:ffff:ffff:ffff
                  2602:f77e:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:42:53:14:d5:08:ab:35:fc:14:8e:e8:a8:86:c3:5a:2f:75:
         d5:64:4b:e2:38:68:22:9e:61:46:78:a5:83:67:ad:40:1f:c3:
         b6:c9:7a:77:35:95:34:68:76:6a:19:d7:d7:af:ce:8e:77:4e:
         2b:0c:8b:a4:95:99:c5:11:6f:2e:7c:5d:c6:eb:ad:5f:68:bd:
         57:1f:be:cc:e9:b9:53:8c:30:fe:83:22:bd:2e:8c:8b:11:cb:
         42:a4:db:50:df:64:1e:79:e7:cf:eb:ae:34:07:cc:26:d0:04:
         9c:27:16:21:bd:e7:04:1f:e5:9f:70:13:17:9e:e3:cf:0d:79:
         81:0a:41:32:55:7b:c6:e4:6c:55:81:08:a1:e9:1d:be:e2:5f:
         e9:54:57:70:e2:cb:8e:3f:55:ea:10:a8:78:11:b5:c7:ba:e8:
         3d:4b:e3:de:f5:48:b6:ac:73:3d:e8:1a:a2:2a:83:53:07:5c:
         e3:e4:16:5f:4f:bf:20:66:f5:23:2c:87:d9:c5:e7:ca:61:98:
         6f:0b:da:9e:58:b8:ae:c0:6b:c2:c2:8b:33:ee:1a:25:b8:91:
         dd:7d:42:87:3b:7d:14:63:5a:32:d5:1a:10:2b:cb:ff:99:47:
         77:b1:48:89:80:80:0f:bd:86:a1:e0:80:84:a6:68:1a:c8:89:
         d3:5b:65:52
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE2YDYP5y/WaGX49uUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzEzZTk0MTUtMDFiZS00ZTUzLWE2ZDMtMmZlMGIzYmQz
MzVkMB4XDTI2MDQyMjE5MTE0MVoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
YjQzNTBmNDgtNGVjNy00N2Q3LTk1ZDItYjEwZjNiZWVjZDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJohkJ3waSYS1pFfU9SOe3Yw/Vikz3IKB80S
7Fs7/4q0f49oYvICIkmaO2NShu5EyhxmandVkZgVdrUq1uFll4rdfA6lMGET5YG1
lMYMWQEdSS5IRWE1iq+xi3cs13/cR8z5aDZC3pd4BCoZt+ROLCRvkJLHZyzL7pIS
MMCXswWVN8ghdGuxYaLPD4svUb2rTBaqN/GZ73RWAhmDMpKHEwzHsM69MsQpUxzk
O5h8nsJAUulX8TAwqdmwk3gTIUF9Ha4iwlson4R2NXKXxLXXoimsauvGeSpv1uer
aMqQbkLazwt4ivViGLE0oy+0FBVBmH8pqhEI6k5l+9sFUQKc8wIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFIKLTgtkoA4dFcSVqq7htb7fioX8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83MTNl
OTQxNS0wMWJlLTRlNTMtYTZkMy0yZmUwYjNiZDMzNWQvOWViMTZjYjItZmQ3OC0z
MGQ2LWI4NmMtNjcwMmMwZmU0MTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzEzZTk0MTUtMDFiZS00ZTUzLWE2
ZDMtMmZlMGIzYmQzMzVkLzcxM2U5NDE1LTAxYmUtNGU1My1hNmQzLTJmZTBiM2Jk
MzM1ZC5jcmwwHwYDVR0jBBgwFoAUSCKDl6RSKGylyM9CX74qnSF+uXYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83MTNlOTQxNS0wMWJlLTRlNTMtYTZkMy0yZmUw
YjNiZDMzNWQuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwAmAvd+
AAEDBwImAvd+AAADBwAmAvd+AAcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhUJTFNUIqzX8FI7oqIbDWi91
1WRL4jhoIp5hRnilg2etQB/Dtsl6dzWVNGh2ahnX16/OjndOKwyLpJWZxRFvLnxd
xuutX2i9Vx++zOm5U4ww/oMivS6MixHLQqTbUN9kHnnnz+uuNAfMJtAEnCcWIb3n
BB/ln3ATF57jzw15gQpBMlV7xuRsVYEIoekdvuJf6VRXcOLLjj9V6hCoeBG1x7ro
PUvj3vVItqxzPegaoiqDUwdc4+QWX0+/IGb1IyyH2cXnymGYbwvanli4rsBrwsKL
M+4aJbiR3X1Chzt9FGNaMtUaECvL/5lHd7FIiYCAD72GoeCAhKZoGsiJ01tlUg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:33:07 2026 by rpki-client