Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/5b2cd881-f41e-386e-8d2e-4ad5956543cd.roa
File:                     5b2cd881-f41e-386e-8d2e-4ad5956543cd.roa (raw, json)
Hash identifier:          /gTymswK4I4GnRiaDGz1s5vvCxeommZuRjN6SJmJe3E=
Subject key identifier:   BF:78:2C:C2:AC:31:D5:62:30:8E:4E:38:64:EF:84:90:95:D8:22:2C
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F4328584D237A1547321A990914A4C3C0
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/5b2cd881-f41e-386e-8d2e-4ad5956543cd.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        2602:fcd8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:15:47:32:1a:99:09:14:a4:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=09d8e8db-a023-4796-9f62-e8daf6c5ed94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:67:9c:2e:de:88:9e:b4:45:2a:6e:c8:a4:
                    1c:56:d5:d9:56:d9:dc:55:c7:b0:af:ee:e9:1d:62:
                    db:28:f3:b0:00:f3:94:d2:57:ce:2c:dd:57:13:5d:
                    1e:fa:6a:71:c8:dd:36:db:eb:b7:2b:11:f0:81:d5:
                    7b:e7:46:0e:26:d3:15:94:32:18:8a:9f:76:47:3c:
                    63:0f:f1:82:3f:9b:ff:dc:cc:70:77:53:32:06:6d:
                    89:99:2d:95:58:b5:77:85:a3:f4:2d:a7:0a:cc:be:
                    3b:08:1a:a5:ea:29:b3:1f:2d:85:a0:f1:51:55:44:
                    6f:64:8b:3c:a4:24:c7:75:1c:d2:04:33:b5:ea:7f:
                    da:09:1a:0b:c0:f1:b4:d5:27:8d:3b:0c:18:5b:f5:
                    f2:7b:e4:e0:bd:b7:e5:88:9c:4e:ee:63:55:f8:f9:
                    e1:af:32:0e:f4:d2:93:81:9a:72:f4:2e:15:da:5d:
                    6a:15:2c:76:54:68:91:63:e8:a1:3f:fd:9b:9e:ca:
                    26:c5:28:82:33:c0:21:46:bb:52:97:2a:fe:07:cc:
                    cb:66:bb:66:f0:b0:da:e9:94:f5:6f:15:f3:13:b8:
                    ad:61:8b:fe:81:68:b7:e9:a8:d8:3f:e4:5a:e5:b7:
                    de:03:9d:13:12:db:6c:c4:45:c8:95:6a:2a:8d:eb:
                    2c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:78:2C:C2:AC:31:D5:62:30:8E:4E:38:64:EF:84:90:95:D8:22:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/5b2cd881-f41e-386e-8d2e-4ad5956543cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:73:48:67:d3:7f:2d:45:e0:c9:80:cc:6e:c3:ea:88:35:49:
         df:06:99:8b:23:40:80:40:6e:40:b7:7f:25:86:8c:c2:cb:0c:
         7d:ce:92:79:44:e4:78:cc:73:a5:03:d6:87:42:7a:09:d3:c4:
         4b:aa:68:95:60:2d:55:b6:d9:02:6f:c2:81:19:47:a6:91:b3:
         fd:b5:29:72:a6:38:95:8c:9d:b8:29:27:a1:59:8a:70:5b:e9:
         09:49:72:90:9a:ea:db:62:27:fa:e7:a9:7d:e0:b3:dd:bc:6b:
         e5:c8:83:5f:07:ed:2a:3b:87:64:26:e5:64:68:bb:54:0c:5e:
         ac:34:ee:a3:27:bf:c9:04:db:a5:2e:ce:75:ea:f4:91:f0:f5:
         06:9c:e9:9a:7d:de:71:3d:23:46:4f:d7:4e:d1:98:cb:b1:b8:
         d9:72:98:63:79:71:cb:8f:97:cf:b8:0d:9c:11:8b:a0:db:1f:
         20:e7:5f:98:3b:5b:f9:cf:b0:19:64:f3:01:37:f1:58:58:7f:
         1f:a7:ad:ca:aa:e9:71:d3:e1:77:78:3c:d1:44:83:8a:3e:b1:
         fa:38:6f:25:26:5a:a1:0a:bb:65:a1:34:99:9d:ea:01:ba:a4:
         e7:0c:ad:08:11:05:96:b8:c4:55:f8:b1:0a:12:fa:f4:da:65:
         5c:93:bd:43
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jehVHMhqZCRSkw8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWU4ZWQ5NTAtNDQ4OC00OWIxLThkMzktYmI4YzcxYTc2
N2QyMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
MDlkOGU4ZGItYTAyMy00Nzk2LTlmNjItZThkYWY2YzVlZDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofRnnC7eiJ60RSpuyKQcVtXZVtncVcewr+7p
HWLbKPOwAPOU0lfOLN1XE10e+mpxyN022+u3KxHwgdV750YOJtMVlDIYip92Rzxj
D/GCP5v/3Mxwd1MyBm2JmS2VWLV3haP0LacKzL47CBql6imzHy2FoPFRVURvZIs8
pCTHdRzSBDO16n/aCRoLwPG01SeNOwwYW/Xye+TgvbfliJxO7mNV+PnhrzIO9NKT
gZpy9C4V2l1qFSx2VGiRY+ihP/2bnsomxSiCM8AhRrtSlyr+B8zLZrtm8LDa6ZT1
bxXzE7itYYv+gWi36ajYP+Ra5bfeA50TEttsxEXIlWoqjesshwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL94LMKsMdViMI5OOGTvhJCV2CIsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThl
ZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhjNzFhNzY3ZDIvNWIyY2Q4ODEtZjQxZS0z
ODZlLThkMmUtNGFkNTk1NjU0M2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWU4ZWQ5NTAtNDQ4OC00OWIxLThk
MzktYmI4YzcxYTc2N2QyLzllOGVkOTUwLTQ0ODgtNDliMS04ZDM5LWJiOGM3MWE3
NjdkMi5jcmwwHwYDVR0jBBgwFoAUJhbbhZB9FA+mCJFa84xIt9zz1B8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThlZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhj
NzFhNzY3ZDIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL82AAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGJzSGfTfy1F4MmAzG7D6og1Sd8GmYsjQIBAbkC3fyWGjMLLDH3O
knlE5HjMc6UD1odCegnTxEuqaJVgLVW22QJvwoEZR6aRs/21KXKmOJWMnbgpJ6FZ
inBb6QlJcpCa6ttiJ/rnqX3gs928a+XIg18H7So7h2Qm5WRou1QMXqw07qMnv8kE
26UuznXq9JHw9Qac6Zp93nE9I0ZP107RmMuxuNlymGN5ccuPl8+4DZwRi6DbHyDn
X5g7W/nPsBlk8wE38VhYfx+nrcqq6XHT4Xd4PNFEg4o+sfo4byUmWqEKu2WhNJmd
6gG6pOcMrQgRBZa4xFX4sQoS+vTaZVyTvUM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:56 2026 by rpki-client