Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c0a77540-7ff3-310f-9b1d-d96f133668b1.roa
File:                     c0a77540-7ff3-310f-9b1d-d96f133668b1.roa (raw, json)
Hash identifier:          P1zMou5vRGme8P+WZaDUFY5K7O3X8k3wJnWOWlmGmQY=
Subject key identifier:   1E:3C:02:03:8D:B9:53:C6:C7:F3:8C:D2:8D:93:D2:16:88:37:B7:91
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584D8AC546773DEB73CFAD029700
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c0a77540-7ff3-310f-9b1d-d96f133668b1.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     38047
IP address blocks:        2602:f83b:3301::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:46:77:3d:eb:73:cf:ad:02:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=298d6ceb-a11b-40b0-bb5f-386b73c665f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:dc:61:07:81:c3:f1:17:34:10:1c:d4:e7:
                    f8:4c:ef:d9:dc:1b:55:40:c2:35:72:71:73:eb:4c:
                    4b:e5:00:c0:2d:57:c6:5b:54:7f:68:7f:b2:69:d3:
                    b3:a1:3a:cb:35:70:80:21:d8:a4:d9:61:f7:02:91:
                    1f:5e:5e:74:d8:d7:87:3f:36:bc:f3:b2:57:06:1b:
                    f0:b6:4e:69:43:af:43:55:46:0d:b4:a6:e4:91:9d:
                    83:d1:b2:72:22:d9:ea:c6:fd:30:8b:31:57:03:6a:
                    d2:87:d6:ef:5f:9a:cc:10:ed:f9:6d:62:04:04:1b:
                    65:00:87:b7:2d:71:d7:62:ca:3d:8e:38:74:66:b6:
                    62:69:b0:9c:f4:92:41:89:b6:c0:db:cd:1c:f7:55:
                    1e:70:27:8a:30:17:a5:ab:a9:2a:53:6d:2a:3b:6d:
                    2f:b8:b3:3d:b6:77:ff:f5:9b:cf:ea:c5:ce:d4:d6:
                    c8:07:8d:95:95:ac:b2:49:a6:28:4f:1f:da:a2:45:
                    cb:bf:04:d4:a2:d0:a6:22:b0:7e:14:b4:e9:78:73:
                    0a:9f:6f:9f:75:06:8a:74:55:7b:64:88:0f:af:54:
                    92:d3:af:d0:8e:77:6e:1f:0b:47:46:fc:2a:40:57:
                    e1:89:98:14:24:f7:21:94:0d:1d:b0:44:44:76:fd:
                    56:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3C:02:03:8D:B9:53:C6:C7:F3:8C:D2:8D:93:D2:16:88:37:B7:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c0a77540-7ff3-310f-9b1d-d96f133668b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:3301::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a5:e8:7b:8b:a0:e9:e2:c8:1a:6c:ff:bb:a4:3d:7f:d9:0c:
         6e:59:c5:ba:c7:f2:b4:ee:e4:6f:0d:0b:7e:74:56:ce:e9:db:
         cf:53:3a:04:5f:86:cd:83:46:a5:a2:c0:17:be:d7:93:e4:64:
         d7:8b:c2:c4:5b:89:32:91:70:58:e8:e1:37:31:01:3a:35:7b:
         4a:3d:f7:3f:4d:f2:77:02:5c:30:49:b1:9f:39:4b:62:db:42:
         2c:94:a6:af:bc:f0:c0:d4:58:69:bd:85:a3:ad:1e:5d:6c:5a:
         00:12:2a:0c:26:56:5f:e2:3e:25:e8:7d:ee:08:85:0a:0c:69:
         1f:d1:df:23:44:4b:aa:4a:09:45:0a:7d:e1:61:22:af:91:f4:
         e4:6d:21:f7:d0:17:5e:9b:7f:b7:13:8e:cc:28:0c:ba:46:fe:
         ce:85:3c:92:7b:28:ab:ae:a0:ef:16:43:6b:a5:62:a6:80:05:
         46:4b:89:b2:32:6f:fc:22:9c:6f:f4:61:ab:e1:46:30:8c:d0:
         a3:73:b2:fc:0e:23:35:0d:d8:e9:8a:51:d1:c4:de:c3:7c:e7:
         98:c8:4b:bb:1b:67:02:96:bc:78:70:e2:95:1b:42:d2:18:c2:
         11:60:a4:d4:16:4b:b9:d4:93:65:57:33:20:13:90:57:39:92:
         53:3c:93:5e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2KxUZ3Petzz60ClwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk
MjYxMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk
Mjk4ZDZjZWItYTExYi00MGIwLWJiNWYtMzg2YjczYzY2NWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6zcYQeBw/EXNBAc1Of4TO/Z3BtVQMI1cnFz
60xL5QDALVfGW1R/aH+yadOzoTrLNXCAIdik2WH3ApEfXl502NeHPza887JXBhvw
tk5pQ69DVUYNtKbkkZ2D0bJyItnqxv0wizFXA2rSh9bvX5rMEO35bWIEBBtlAIe3
LXHXYso9jjh0ZrZiabCc9JJBibbA280c91UecCeKMBelq6kqU20qO20vuLM9tnf/
9ZvP6sXO1NbIB42VlayySaYoTx/aokXLvwTUotCmIrB+FLTpeHMKn2+fdQaKdFV7
ZIgPr1SS06/QjnduHwtHRvwqQFfhiZgUJPchlA0dsEREdv1WQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB48AgONuVPGx/OM0o2T0haIN7eRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4
YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvYzBhNzc1NDAtN2ZmMy0z
MTBmLTliMWQtZDk2ZjEzMzY2OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1
YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk
ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm
MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4OzMB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFal6HuLoOniyBps/7ukPX/ZDG5ZxbrH8rTu5G8NC350Vs7p289T
OgRfhs2DRqWiwBe+15PkZNeLwsRbiTKRcFjo4TcxATo1e0o99z9N8ncCXDBJsZ85
S2LbQiyUpq+88MDUWGm9haOtHl1sWgASKgwmVl/iPiXofe4IhQoMaR/R3yNES6pK
CUUKfeFhIq+R9ORtIffQF16bf7cTjswoDLpG/s6FPJJ7KKuuoO8WQ2ulYqaABUZL
ibIyb/winG/0YavhRjCM0KNzsvwOIzUN2OmKUdHE3sN855jIS7sbZwKWvHhw4pUb
QtIYwhFgpNQWS7nUk2VXMyATkFc5klM8k14=
-----END CERTIFICATE-----
Generated at Wed May 13 10:30:51 2026 by rpki-client