Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b9783e06-fddb-3a23-b6c3-1b809e91e7b6.roa
File:                     b9783e06-fddb-3a23-b6c3-1b809e91e7b6.roa (raw, json)
Hash identifier:          V6Z2oTyIo2ebtFVDhwkuCvVntbImCOzvr/SQXh4fgXY=
Subject key identifier:   CB:44:BD:0B:5E:1E:8D:BF:3B:60:07:D7:77:1B:B4:B9:FE:49:F3:C5
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584D44FA61DDF6248BF10854EE80
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b9783e06-fddb-3a23-b6c3-1b809e91e7b6.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     18526
IP address blocks:        2602:fd6f:aab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:61:dd:f6:24:8b:f1:08:54:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=15a973fd-4387-492d-8f29-31cb6ed8c042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:f9:ff:0a:de:ec:e3:ec:18:30:86:de:46:
                    65:27:29:43:e9:34:24:1d:1b:e1:89:13:dc:fb:ed:
                    52:70:d4:26:c3:d2:02:9b:3c:4a:66:ff:79:93:e2:
                    60:a5:2f:00:f1:56:9d:d4:15:3a:b5:1a:69:72:71:
                    e0:d5:a0:73:8f:b7:0b:ab:e5:50:75:43:fd:9d:4a:
                    9d:9e:03:37:f4:cc:76:1b:b5:72:d4:c2:76:85:7a:
                    58:df:ec:be:61:63:0e:44:6c:52:81:02:76:6a:9c:
                    d5:85:cb:7b:93:1e:3e:43:32:72:a2:db:7b:4c:0e:
                    6e:91:29:1d:d3:6b:84:7d:f5:e8:84:50:7c:28:56:
                    5f:eb:26:00:34:35:9e:56:b6:ba:1e:58:cc:54:85:
                    1c:b9:c1:f7:91:27:a1:19:d5:f7:b1:f1:6d:06:1b:
                    b2:26:95:c3:16:1d:2b:d4:63:b0:7b:8f:bf:6d:f9:
                    da:50:12:3f:29:47:3c:6b:8a:ad:e3:91:12:fb:3a:
                    a9:12:e4:18:15:56:71:7f:48:41:41:7f:ab:e4:ac:
                    df:c1:26:e4:df:57:52:63:c2:36:1e:b5:3c:8a:02:
                    aa:08:cf:45:a9:48:f0:87:71:31:db:20:71:9c:2a:
                    a5:4c:e9:6f:f8:6c:f9:82:46:ae:ce:73:9f:a1:65:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:44:BD:0B:5E:1E:8D:BF:3B:60:07:D7:77:1B:B4:B9:FE:49:F3:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b9783e06-fddb-3a23-b6c3-1b809e91e7b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:aab::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1b:0c:50:8a:27:2c:9a:06:8b:5a:cc:20:91:5d:2a:da:f1:
         86:ed:78:db:2c:c3:48:a0:fa:12:ad:e7:ff:86:22:ef:5b:83:
         a2:c8:69:e2:b8:9e:15:da:de:2d:b9:c2:a6:af:8e:a4:37:41:
         72:88:41:58:eb:e3:c6:e2:c4:5b:59:ce:fa:59:cf:46:38:40:
         a0:1c:2e:1f:1b:64:79:e8:21:90:55:aa:1d:7f:f5:03:f8:df:
         b4:48:54:4e:91:48:3c:2c:c3:27:f7:2f:f7:0d:b8:e8:2c:89:
         6d:99:ab:60:ef:66:c2:29:08:0c:20:b6:c0:55:18:fd:50:62:
         e1:e7:3b:a7:2a:09:c9:af:ca:84:06:a7:6b:bd:1b:b6:d9:1d:
         e2:b2:1a:43:33:d8:bf:07:63:6a:d6:18:fe:48:a5:c0:8b:7d:
         d0:76:3a:19:83:63:a9:b7:44:23:9a:8c:50:f7:71:61:17:06:
         7f:28:4b:da:13:51:8c:9f:92:2f:09:fb:d0:f5:35:be:0d:36:
         be:3c:7c:30:f4:e3:94:c5:3e:85:e3:6e:43:49:92:14:26:18:
         aa:4d:4f:2d:9a:46:dc:15:92:2d:a2:47:00:e7:55:22:d7:33:
         8f:2c:02:66:69:7c:e9:da:c8:b8:08:d8:f3:36:23:85:4f:42:
         2d:85:f5:c3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1E+mHd9iSL8QhU7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl
NjlkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
MTVhOTczZmQtNDM4Ny00OTJkLThmMjktMzFjYjZlZDhjMDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzL5/wre7OPsGDCG3kZlJylD6TQkHRvhiRPc
++1ScNQmw9ICmzxKZv95k+JgpS8A8Vad1BU6tRppcnHg1aBzj7cLq+VQdUP9nUqd
ngM39Mx2G7Vy1MJ2hXpY3+y+YWMORGxSgQJ2apzVhct7kx4+QzJyott7TA5ukSkd
02uEffXohFB8KFZf6yYANDWeVra6HljMVIUcucH3kSehGdX3sfFtBhuyJpXDFh0r
1GOwe4+/bfnaUBI/KUc8a4qt45ES+zqpEuQYFVZxf0hBQX+r5KzfwSbk31dSY8I2
HrU8igKqCM9FqUjwh3Ex2yBxnCqlTOlv+Gz5gkauznOfoWV1BQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMtEvQteHo2/O2AH13cbtLn+SfPFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5
ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvYjk3ODNlMDYtZmRkYi0z
YTIzLWI2YzMtMWI4MDllOTFlN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2
OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4
ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3
YjU0OGU2OWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9bwqr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIAbDFCKJyyaBotazCCRXSra8YbteNssw0ig+hKt5/+GIu9bg6LI
aeK4nhXa3i25wqavjqQ3QXKIQVjr48bixFtZzvpZz0Y4QKAcLh8bZHnoIZBVqh1/
9QP437RIVE6RSDwswyf3L/cNuOgsiW2Zq2DvZsIpCAwgtsBVGP1QYuHnO6cqCcmv
yoQGp2u9G7bZHeKyGkMz2L8HY2rWGP5IpcCLfdB2OhmDY6m3RCOajFD3cWEXBn8o
S9oTUYyfki8J+9D1Nb4NNr48fDD045TFPoXjbkNJkhQmGKpNTy2aRtwVki2iRwDn
VSLXM48sAmZpfOnayLgI2PM2I4VPQi2F9cM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:49 2026 by rpki-client