Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/f74a9f89-9c89-3ae4-8406-a461573d59fa.roa
File:                     f74a9f89-9c89-3ae4-8406-a461573d59fa.roa (raw, json)
Hash identifier:          6Iny1T0Vk+P3P4gWQRBC43QFxgflvVHc6OiYxiP0IXM=
Subject key identifier:   49:06:E9:71:CE:E2:69:BF:85:39:09:81:A8:C9:52:A4:C9:D2:B1:6A
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F4328584D1B1A0B72A1BC2D7C5A9D9C00
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/f74a9f89-9c89-3ae4-8406-a461573d59fa.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     398292
IP address blocks:        2602:fd23:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:0b:72:a1:bc:2d:7c:5a:9d:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=0b7803cd-fc3c-4490-8b1a-3603343fc8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:b9:70:fd:3b:5d:cb:df:5f:fb:8e:0b:08:
                    34:6b:71:62:24:f6:45:43:43:0f:1e:51:cf:bf:b7:
                    84:e0:4f:95:18:3c:97:f7:21:80:87:1f:8f:17:f7:
                    96:4d:08:1d:93:fc:16:55:0c:41:92:9f:f9:2e:47:
                    b4:fd:b1:92:13:69:7f:22:af:b4:95:66:83:6a:4c:
                    b2:82:51:d1:f3:b3:08:98:8f:93:9e:39:fa:e5:97:
                    d5:00:36:b9:31:85:4d:b0:27:2b:89:43:b8:78:87:
                    67:b6:4c:1f:d2:32:e6:e5:1a:dc:46:9b:51:30:d7:
                    16:cf:4b:21:9d:0f:1a:f1:cd:42:3c:bb:b8:8f:18:
                    33:6a:75:d9:e5:7e:eb:3d:24:00:46:ac:87:d9:e0:
                    88:ba:38:55:8f:cb:91:f8:62:bf:32:28:54:7c:84:
                    9c:13:28:07:eb:f1:c9:9a:76:a0:12:d9:68:f7:77:
                    e0:01:c1:73:63:78:4b:5e:88:51:33:35:61:88:10:
                    4c:63:0f:f9:59:0f:68:03:86:5a:5d:00:6a:33:fd:
                    c1:70:a3:f7:a0:27:ca:8d:fd:34:f2:53:05:6b:d1:
                    bd:3e:4a:e4:1a:f3:87:12:3e:4a:21:ad:10:1a:02:
                    57:e8:b2:f8:75:40:f1:46:ca:39:af:c3:6d:eb:67:
                    93:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:06:E9:71:CE:E2:69:BF:85:39:09:81:A8:C9:52:A4:C9:D2:B1:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/f74a9f89-9c89-3ae4-8406-a461573d59fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd23:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:d8:a1:3f:66:dd:96:e6:b8:86:2b:59:6e:2f:54:ce:83:89:
         96:fb:8c:dc:e8:f6:f9:43:ad:0a:78:2b:4e:92:ec:cb:67:25:
         5e:b3:8c:26:a7:2a:e0:d7:da:34:d0:0c:61:e0:06:9a:a2:6d:
         b0:4a:e7:66:da:ee:33:02:1b:08:c4:ce:eb:ef:65:b1:93:be:
         a2:d2:a0:29:ac:b6:d6:32:73:e4:29:1c:5c:2a:63:2e:99:4d:
         ac:6d:08:19:76:60:40:23:ae:df:72:03:ba:76:98:a9:f7:60:
         ce:ec:d3:c2:50:5c:25:8c:30:e9:0e:7d:a2:cf:f8:3b:43:3d:
         ba:c8:5b:ed:b8:74:f9:79:e0:06:2e:33:53:22:ee:04:90:91:
         1b:8f:75:49:d7:b2:c4:ef:fc:a1:48:29:2e:20:a3:bb:93:7a:
         d3:cc:50:57:0f:9d:94:a4:17:ee:ff:92:e2:1a:34:b5:d2:19:
         b4:5b:2d:e5:e4:28:6a:ae:0f:27:0e:49:69:4f:d9:84:70:6a:
         ce:19:97:f3:ff:d1:a0:dd:1a:94:cf:93:08:0c:e2:98:da:f4:
         40:0a:fd:ba:de:04:a3:9e:ac:b2:27:6d:0d:2e:c0:f9:a3:2e:
         75:78:1d:b9:ba:ca:e8:ee:33:16:83:66:93:61:9b:8a:51:0f:
         50:d7:c6:7c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0bGgtyobwtfFqdnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzU1NGEyODAtMjJhMS00NzdjLTk3YmYtZjIzYTdmMzNh
MGMwMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
MGI3ODAzY2QtZmMzYy00NDkwLThiMWEtMzYwMzM0M2ZjOGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8G5cP07XcvfX/uOCwg0a3FiJPZFQ0MPHlHP
v7eE4E+VGDyX9yGAhx+PF/eWTQgdk/wWVQxBkp/5Lke0/bGSE2l/Iq+0lWaDakyy
glHR87MImI+Tnjn65ZfVADa5MYVNsCcriUO4eIdntkwf0jLm5RrcRptRMNcWz0sh
nQ8a8c1CPLu4jxgzanXZ5X7rPSQARqyH2eCIujhVj8uR+GK/MihUfIScEygH6/HJ
mnagEtlo93fgAcFzY3hLXohRMzVhiBBMYw/5WQ9oA4ZaXQBqM/3BcKP3oCfKjf00
8lMFa9G9PkrkGvOHEj5KIa0QGgJX6LL4dUDxRso5r8Nt62eTSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEkG6XHO4mm/hTkJgajJUqTJ0rFqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jNTU0
YTI4MC0yMmExLTQ3N2MtOTdiZi1mMjNhN2YzM2EwYzAvZjc0YTlmODktOWM4OS0z
YWU0LTg0MDYtYTQ2MTU3M2Q1OWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzU1NGEyODAtMjJhMS00NzdjLTk3
YmYtZjIzYTdmMzNhMGMwL2M1NTRhMjgwLTIyYTEtNDc3Yy05N2JmLWYyM2E3ZjMz
YTBjMC5jcmwwHwYDVR0jBBgwFoAUvA5Qxgka7vPVyheHhrapUB3cWcEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jNTU0YTI4MC0yMmExLTQ3N2MtOTdiZi1mMjNh
N2YzM2EwYzAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9IwAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMXYoT9m3ZbmuIYrWW4vVM6DiZb7jNzo9vlDrQp4K06S7MtnJV6z
jCanKuDX2jTQDGHgBpqibbBK52ba7jMCGwjEzuvvZbGTvqLSoCmsttYyc+QpHFwq
Yy6ZTaxtCBl2YEAjrt9yA7p2mKn3YM7s08JQXCWMMOkOfaLP+DtDPbrIW+24dPl5
4AYuM1Mi7gSQkRuPdUnXssTv/KFIKS4go7uTetPMUFcPnZSkF+7/kuIaNLXSGbRb
LeXkKGquDycOSWlP2YRwas4Zl/P/0aDdGpTPkwgM4pja9EAK/breBKOerLInbQ0u
wPmjLnV4Hbm6yujuMxaDZpNhm4pRD1DXxnw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:59:25 2026 by rpki-client