Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/2c890ff1-8a72-39ae-b927-8291b89d942f.roa
File:                     2c890ff1-8a72-39ae-b927-8291b89d942f.roa (raw, json)
Hash identifier:          U0rrn2Z4ZmnbrNxQh9iaKd1RYfD5Jg+EkMAinvPufE0=
Subject key identifier:   41:17:1F:80:F9:60:A0:67:30:8F:DF:10:CA:09:36:D3:C8:F0:1B:05
Certificate issuer:       /CN=755eca47-6eba-4778-8dff-927bd8a57a91
Certificate serial:       010D0C9F4328584D343A129088D309EDFBE22780
Authority key identifier: 69:BC:6C:6F:04:F5:B8:77:E4:3E:99:31:33:B3:7B:C5:A6:CB:ED:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/2c890ff1-8a72-39ae-b927-8291b89d942f.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     25644
IP address blocks:        2602:f85d:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/755eca47-6eba-4778-8dff-927bd8a57a91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/755eca47-6eba-4778-8dff-927bd8a57a91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:12:90:88:d3:09:ed:fb:e2:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755eca47-6eba-4778-8dff-927bd8a57a91
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=6ee9fefd-7cd4-4062-a344-7cbbbd372d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:6a:c9:80:0d:0f:e9:5f:e9:a1:36:69:9c:
                    66:d1:bd:4e:20:2c:a4:c8:a2:4f:0d:4e:a4:42:0f:
                    7d:9c:33:60:85:c8:0a:84:7b:02:ff:eb:43:c0:b1:
                    46:20:e8:46:50:98:79:33:d2:10:0f:29:4b:dc:ac:
                    5a:d7:36:1c:70:05:aa:a8:e7:f7:31:ef:3d:e5:f4:
                    56:27:ed:6c:c7:23:12:5b:56:0e:d6:fd:5f:8c:a7:
                    f0:be:d1:cd:51:0f:12:8c:01:e4:c6:dd:01:ec:1e:
                    c4:9b:be:8d:e1:a8:2e:38:13:56:7e:93:4f:5b:89:
                    38:74:a8:35:54:5d:1d:c3:b3:15:04:e0:51:ed:7a:
                    55:f5:59:0e:ea:e4:1f:8d:ad:c1:70:b5:57:41:d2:
                    40:42:32:cd:1f:64:99:3e:eb:d8:85:ae:6a:f8:98:
                    6d:8e:70:c3:21:69:fc:5a:51:fd:06:bf:e8:df:0e:
                    29:98:0d:30:84:5d:84:6c:85:ff:64:7c:46:9f:ab:
                    67:ef:2d:25:80:f8:9d:f6:99:08:d4:71:4f:7f:73:
                    a9:66:94:af:04:47:48:3d:1b:97:69:b3:a6:79:d3:
                    71:94:c6:2c:9a:d3:62:d7:ee:2e:17:3f:bf:31:11:
                    68:c5:03:8d:b1:c7:d5:9f:b5:99:18:f2:9f:14:6e:
                    5c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:17:1F:80:F9:60:A0:67:30:8F:DF:10:CA:09:36:D3:C8:F0:1B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/2c890ff1-8a72-39ae-b927-8291b89d942f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/755eca47-6eba-4778-8dff-927bd8a57a91.crl

            X509v3 Authority Key Identifier:
                keyid:69:BC:6C:6F:04:F5:B8:77:E4:3E:99:31:33:B3:7B:C5:A6:CB:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f85d:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:60:7e:47:44:79:be:a9:e7:27:2c:6d:e0:79:f0:1e:9a:25:
         84:5d:7b:06:e6:3d:10:68:5a:17:f5:de:03:de:9c:d6:26:61:
         d7:34:53:69:92:c4:3f:67:ba:23:7a:86:de:a7:6e:f5:b8:70:
         d9:bd:db:9b:3b:cc:0e:2b:fa:d4:2a:86:a0:bf:fb:b5:26:60:
         3f:25:f2:59:b9:ce:fa:c9:22:33:94:97:9c:01:3d:b7:07:32:
         9e:13:08:b2:87:bd:06:c8:0f:e9:13:3e:2c:d1:f9:e3:25:e5:
         d7:bf:34:98:f0:b3:82:dd:68:d9:c4:47:c3:e7:06:ee:58:66:
         53:de:80:98:06:49:c8:64:ad:04:2f:84:7f:83:9c:05:3f:db:
         bf:85:20:18:01:ee:90:8f:ae:8e:70:92:ec:8f:0b:55:12:74:
         70:c2:59:5b:46:78:a7:5a:42:80:7a:d9:ee:65:da:5b:34:fe:
         fe:d7:41:a6:ae:66:1d:e9:d2:e8:48:2d:63:4c:26:83:5e:13:
         ec:b3:8f:8a:af:96:44:03:56:83:67:83:f1:d9:a0:c3:61:0a:
         1d:b9:db:5e:37:3e:68:f8:c7:72:62:03:38:35:93:03:80:de:
         64:66:f7:a6:98:53:37:78:d9:04:e7:da:9c:0c:a2:28:dc:a9:
         81:c4:58:6f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE00OhKQiNMJ7fviJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzU1ZWNhNDctNmViYS00Nzc4LThkZmYtOTI3YmQ4YTU3
YTkxMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk
NmVlOWZlZmQtN2NkNC00MDYyLWEzNDQtN2NiYmJkMzcyZDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHFqyYAND+lf6aE2aZxm0b1OICykyKJPDU6k
Qg99nDNghcgKhHsC/+tDwLFGIOhGUJh5M9IQDylL3Kxa1zYccAWqqOf3Me895fRW
J+1sxyMSW1YO1v1fjKfwvtHNUQ8SjAHkxt0B7B7Em76N4aguOBNWfpNPW4k4dKg1
VF0dw7MVBOBR7XpV9VkO6uQfja3BcLVXQdJAQjLNH2SZPuvYha5q+JhtjnDDIWn8
WlH9Br/o3w4pmA0whF2EbIX/ZHxGn6tn7y0lgPid9pkI1HFPf3OpZpSvBEdIPRuX
abOmedNxlMYsmtNi1+4uFz+/MRFoxQONscfVn7WZGPKfFG5cBQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEEXH4D5YKBnMI/fEMoJNtPI8BsFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83NTVl
Y2E0Ny02ZWJhLTQ3NzgtOGRmZi05MjdiZDhhNTdhOTEvMmM4OTBmZjEtOGE3Mi0z
OWFlLWI5MjctODI5MWI4OWQ5NDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzU1ZWNhNDctNmViYS00Nzc4LThk
ZmYtOTI3YmQ4YTU3YTkxLzc1NWVjYTQ3LTZlYmEtNDc3OC04ZGZmLTkyN2JkOGE1
N2E5MS5jcmwwHwYDVR0jBBgwFoAUabxsbwT1uHfkPpkxM7N7xabL7TYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83NTVlY2E0Ny02ZWJhLTQ3NzgtOGRmZi05Mjdi
ZDhhNTdhOTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4XQQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAamB+R0R5vqnnJyxt4HnwHpolhF17BuY9EGhaF/XeA96c1iZh1zRT
aZLEP2e6I3qG3qdu9bhw2b3bmzvMDiv61CqGoL/7tSZgPyXyWbnO+skiM5SXnAE9
twcynhMIsoe9BsgP6RM+LNH54yXl1780mPCzgt1o2cRHw+cG7lhmU96AmAZJyGSt
BC+Ef4OcBT/bv4UgGAHukI+ujnCS7I8LVRJ0cMJZW0Z4p1pCgHrZ7mXaWzT+/tdB
pq5mHenS6EgtY0wmg14T7LOPiq+WRANWg2eD8dmgw2EKHbnbXjc+aPjHcmIDODWT
A4DeZGb3pphTN3jZBOfanAyiKNypgcRYbw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:54 2026 by rpki-client