Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/264313b2-85e6-32cc-9de7-cf3f1934b413.roa
File:                     264313b2-85e6-32cc-9de7-cf3f1934b413.roa (raw, json)
Hash identifier:          VQAlrtP7MWSnFi2AMGXeBxblfA3x2Rk1YLYDjnZrO0g=
Subject key identifier:   8D:39:73:00:69:6B:06:38:F4:D7:A3:F1:63:58:AF:14:99:3A:CC:49
Certificate issuer:       /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
Certificate serial:       010D0C9F4328584D9CEAB3D01F891C0F025F7E40
Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/264313b2-85e6-32cc-9de7-cf3f1934b413.roa
Signing time:             Fri 24 Apr 2026 13:00:31 +0000
ROA not before:           Fri 24 Apr 2026 13:00:31 +0000
ROA not after:            Thu 23 Jul 2026 13:00:31 +0000
asID:                     63221
IP address blocks:        2602:f4c6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9c:ea:b3:d0:1f:89:1c:0f:02:5f:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
        Validity
            Not Before: Apr 24 13:00:31 2026 GMT
            Not After : Jul 23 13:00:31 2026 GMT
        Subject: CN=9cd8a46d-eaa5-4d69-9fb0-a6b0507e8328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:df:2a:f9:ba:53:9c:c0:a4:cf:fa:ca:a8:
                    56:c4:9e:cf:8b:db:b7:fd:7b:90:61:ce:2e:7b:72:
                    46:02:b6:14:65:69:40:6b:76:84:1f:aa:f3:d2:9a:
                    fd:fa:98:1b:35:57:89:22:3d:01:e7:d2:06:f6:26:
                    09:51:43:2d:60:df:ab:5c:c7:28:df:ae:a4:4e:ac:
                    e2:b3:9f:8c:2b:04:da:d2:62:3b:b1:94:3d:11:30:
                    5b:dc:02:05:49:f5:4f:b2:33:84:f8:f8:47:f6:d5:
                    bc:a2:37:ea:fc:71:48:09:cf:11:fa:9b:3f:e3:3f:
                    14:29:70:24:32:bd:55:eb:b6:b0:f9:06:8d:e1:42:
                    d4:10:80:11:07:d7:52:77:df:dd:41:26:9e:9b:74:
                    cc:ce:ca:f7:b0:e7:1d:0d:c6:5c:6d:dd:9e:6c:1a:
                    97:be:15:73:a1:c3:d2:e2:cb:cc:ea:cf:a3:e7:88:
                    da:ff:ec:1a:83:28:7f:01:77:c8:b5:58:0a:06:25:
                    15:b6:d4:f6:a6:0b:60:9c:44:ea:87:a0:26:65:60:
                    5e:66:ee:26:97:d3:4b:50:d1:25:63:e2:d8:4a:31:
                    be:d9:7b:b9:b1:37:13:15:a3:a9:ec:f8:d6:48:eb:
                    3d:63:76:a9:a7:52:3f:9d:24:d8:7e:b1:bd:41:6e:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:39:73:00:69:6B:06:38:F4:D7:A3:F1:63:58:AF:14:99:3A:CC:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/264313b2-85e6-32cc-9de7-cf3f1934b413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl

            X509v3 Authority Key Identifier:
                keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4c6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:28:35:7d:2f:b1:3d:81:1f:fa:87:6e:50:1d:4c:a8:ae:af:
         56:c7:ad:14:f9:16:70:85:f4:04:27:d9:28:3a:e2:03:d2:19:
         75:65:d2:ba:b0:e1:1e:e3:09:a4:00:20:6d:53:af:5e:90:24:
         43:e0:e7:c2:2c:6f:4b:93:54:8c:d8:78:1b:f4:41:f0:84:08:
         73:ba:f8:6a:45:23:58:35:2b:ee:ff:3b:e3:fd:d7:5e:e4:11:
         05:1d:a2:7b:8f:3d:0d:ba:b7:74:d5:3c:ee:f3:bc:71:6c:a4:
         96:1c:d5:0e:02:34:ce:0c:0a:c2:03:24:57:18:ed:bc:b7:fc:
         08:29:33:bc:cf:bc:6b:c8:26:e9:80:e4:45:c7:33:21:ca:73:
         93:56:fe:2c:42:11:85:1d:9e:07:5a:d3:2b:cb:18:8e:0c:68:
         94:14:c7:cd:64:e2:20:c8:3d:cc:f1:13:36:ef:c4:15:2e:b3:
         14:56:91:5b:38:ea:9e:cd:8a:7e:30:de:7d:ee:59:33:c6:39:
         d2:ec:4d:2f:8c:1d:de:5b:76:4b:eb:78:57:15:fa:1f:6f:c1:
         a7:4c:52:6b:76:b5:67:c9:8a:2a:84:ab:ea:73:ff:70:30:b9:
         42:8f:b2:67:ba:4f:1a:8d:8f:fe:82:de:aa:fd:41:87:92:27:
         ba:20:ed:aa
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2c6rPQH4kcDwJffkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy
MmQ2MB4XDTI2MDQyNDEzMDAzMVoXDTI2MDcyMzEzMDAzMVowLzEtMCsGA1UEAxMk
OWNkOGE0NmQtZWFhNS00ZDY5LTlmYjAtYTZiMDUwN2U4MzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyvfKvm6U5zApM/6yqhWxJ7Pi9u3/XuQYc4u
e3JGArYUZWlAa3aEH6rz0pr9+pgbNVeJIj0B59IG9iYJUUMtYN+rXMco366kTqzi
s5+MKwTa0mI7sZQ9ETBb3AIFSfVPsjOE+PhH9tW8ojfq/HFICc8R+ps/4z8UKXAk
Mr1V67aw+QaN4ULUEIARB9dSd9/dQSaem3TMzsr3sOcdDcZcbd2ebBqXvhVzocPS
4svM6s+j54ja/+wagyh/AXfItVgKBiUVttT2pgtgnETqh6AmZWBeZu4ml9NLUNEl
Y+LYSjG+2Xu5sTcTFaOp7PjWSOs9Y3app1I/nSTYfrG9QW5jzQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFI05cwBpawY49Nej8WNYrxSZOsxJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2
NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvMjY0MzEzYjItODVlNi0z
MmNjLTlkZTctY2YzZjE5MzRiNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh
OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw
MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1
MGQ5MDIyZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL0xgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASSg1fS+xPYEf+oduUB1MqK6vVsetFPkWcIX0BCfZKDriA9IZdWXS
urDhHuMJpAAgbVOvXpAkQ+DnwixvS5NUjNh4G/RB8IQIc7r4akUjWDUr7v874/3X
XuQRBR2ie489Dbq3dNU87vO8cWyklhzVDgI0zgwKwgMkVxjtvLf8CCkzvM+8a8gm
6YDkRcczIcpzk1b+LEIRhR2eB1rTK8sYjgxolBTHzWTiIMg9zPETNu/EFS6zFFaR
Wzjqns2KfjDefe5ZM8Y50uxNL4wd3lt2S+t4VxX6H2/Bp0xSa3a1Z8mKKoSr6nP/
cDC5Qo+yZ7pPGo2P/oLeqv1Bh5InuiDtqg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:21:42 2026 by rpki-client