Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa
File:                     deb4a797-c84c-366e-afb9-971de9e46797.roa (raw, json)
Hash identifier:          5FDHqjV2qVBVzyMngVM4lW1rkx0ja3CGXd+5g2vUNSw=
Subject key identifier:   FE:BF:A4:F8:2D:54:5B:75:5E:97:34:82:A8:D6:82:7E:1D:40:98:72
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584D3DFFAC7EAC018E9E6EBB2080
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     38047
IP address blocks:        2602:f83b:2::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ac:7e:ac:01:8e:9e:6e:bb:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=27b434e9-e871-4c97-b6a9-82d91ae92b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:6f:3d:69:64:a0:3a:2b:f4:01:66:c9:8b:
                    d4:f0:f5:d5:e8:98:b8:b2:0b:ea:87:8d:6c:4b:90:
                    81:8f:31:d6:da:9f:71:c5:a4:0d:20:52:cf:70:a9:
                    2b:02:e7:01:e9:4d:cf:e7:dd:be:f6:e1:cc:4e:a4:
                    6b:f2:18:05:45:01:26:9f:fe:b5:25:bf:4d:ef:ba:
                    52:38:55:32:c0:4b:17:47:2e:fd:a9:ef:0b:6f:13:
                    32:39:b1:4b:41:83:2b:25:5c:91:63:a3:24:1f:a7:
                    3a:20:77:17:11:08:0e:f6:3b:7e:93:40:ee:8d:70:
                    dc:67:a5:5e:ab:6b:a3:57:94:08:28:d7:37:7a:d5:
                    b4:0d:92:c1:50:05:98:59:bf:fe:b7:fe:f6:65:3e:
                    f3:c3:6d:df:fe:f5:68:5f:82:49:43:19:58:a9:be:
                    20:a4:e3:a1:80:a1:00:85:74:4b:cd:20:b8:a4:1a:
                    90:84:eb:ed:73:3b:84:ed:15:24:ca:3e:5e:48:e3:
                    ec:48:75:e0:74:b5:59:b9:da:83:d0:b9:11:64:f2:
                    1c:01:cb:40:bd:51:ca:76:fe:47:07:9a:16:b2:84:
                    93:3a:78:31:47:3c:66:6e:c8:31:37:35:0b:3c:6d:
                    75:06:45:1f:94:d7:4f:eb:13:51:1f:30:cc:f1:8f:
                    a4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BF:A4:F8:2D:54:5B:75:5E:97:34:82:A8:D6:82:7E:1D:40:98:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/deb4a797-c84c-366e-afb9-971de9e46797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2a:27:7f:e6:98:83:e2:9c:be:16:ba:6c:a6:a9:09:37:ff:
         b3:8b:23:d8:43:15:12:08:d4:47:ab:42:a2:58:5c:b5:73:c9:
         82:a3:fc:98:a0:ea:02:2f:47:d4:c8:0b:53:eb:45:ad:80:58:
         f2:90:eb:f2:30:13:e6:81:ff:a6:7d:fc:1f:7f:09:52:62:81:
         fd:39:2c:68:72:6a:dc:48:9a:fc:62:fb:46:9c:2d:26:34:32:
         d4:47:1f:a4:12:ca:a9:be:02:8f:b5:32:3c:11:d0:e5:90:ba:
         81:36:6d:52:a3:0e:4e:f2:89:85:01:bb:e2:d5:19:d4:1e:6f:
         80:d9:66:8e:25:b8:ca:7c:a9:c0:2f:97:51:5a:27:6f:77:95:
         c4:91:c9:f6:a1:3d:9a:ee:a6:5a:f5:f7:af:64:ff:bb:9a:e1:
         a4:83:8a:bc:ba:ed:bc:b2:4b:03:ca:be:e0:80:2a:6a:1e:d8:
         5d:83:d5:05:4f:cc:7f:5d:28:84:c9:eb:fa:d4:bb:f4:97:82:
         89:c8:5c:ff:d6:32:3a:93:89:59:38:6b:68:0c:9e:b7:98:e7:
         30:04:a6:03:d3:8b:f3:58:4d:12:22:55:eb:a2:56:81:96:69:
         ab:82:b9:e6:0e:55:5a:55:de:b3:2b:0f:6b:00:2c:da:82:21:
         07:71:b3:b4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09/6x+rAGOnm67IIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk
MjYxMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
MjdiNDM0ZTktZTg3MS00Yzk3LWI2YTktODJkOTFhZTkyYjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0BvPWlkoDor9AFmyYvU8PXV6Ji4sgvqh41s
S5CBjzHW2p9xxaQNIFLPcKkrAucB6U3P592+9uHMTqRr8hgFRQEmn/61Jb9N77pS
OFUywEsXRy79qe8LbxMyObFLQYMrJVyRY6MkH6c6IHcXEQgO9jt+k0DujXDcZ6Ve
q2ujV5QIKNc3etW0DZLBUAWYWb/+t/72ZT7zw23f/vVoX4JJQxlYqb4gpOOhgKEA
hXRLzSC4pBqQhOvtczuE7RUkyj5eSOPsSHXgdLVZudqD0LkRZPIcActAvVHKdv5H
B5oWsoSTOngxRzxmbsgxNzULPG11BkUflNdP6xNRHzDM8Y+klQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP6/pPgtVFt1Xpc0gqjWgn4dQJhyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4
YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvZGViNGE3OTctYzg0Yy0z
NjZlLWFmYjktOTcxZGU5ZTQ2Nzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1
YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk
ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm
MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4OwAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB4qJ3/mmIPinL4WumymqQk3/7OLI9hDFRII1EerQqJYXLVzyYKj
/Jig6gIvR9TIC1PrRa2AWPKQ6/IwE+aB/6Z9/B9/CVJigf05LGhyatxImvxi+0ac
LSY0MtRHH6QSyqm+Ao+1MjwR0OWQuoE2bVKjDk7yiYUBu+LVGdQeb4DZZo4luMp8
qcAvl1FaJ293lcSRyfahPZruplr1969k/7ua4aSDiry67byySwPKvuCAKmoe2F2D
1QVPzH9dKITJ6/rUu/SXgonIXP/WMjqTiVk4a2gMnreY5zAEpgPTi/NYTRIiVeui
VoGWaauCueYOVVpV3rMrD2sALNqCIQdxs7Q=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:21 2026 by rpki-client