Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/52eca1ab-f85f-37ed-9daf-04d84c203883.roa
File:                     52eca1ab-f85f-37ed-9daf-04d84c203883.roa (raw, json)
Hash identifier:          9Xkf30VrZWhztQCDq7R7qawo6YiP5gr7z9Pl21uVgDw=
Subject key identifier:   81:3A:22:01:A5:A5:40:16:4E:10:74:96:52:58:7D:36:F1:30:7C:32
Certificate issuer:       /CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
Certificate serial:       010D0C9F4328584E709F7C19AFD28CBDD8C81480
Authority key identifier: F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/52eca1ab-f85f-37ed-9daf-04d84c203883.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     40806
IP address blocks:        2602:f4d9:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:7c:19:af:d2:8c:bd:d8:c8:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=b79b2266-b9f4-4174-89af-bc0fc653aa06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:82:b3:6f:03:ab:6f:9c:dc:68:19:00:5c:
                    99:21:55:8d:94:69:55:44:3a:28:e0:dd:f8:ed:61:
                    f3:48:20:af:83:75:7f:f5:c9:75:3e:fb:a9:38:0a:
                    4d:ab:bc:25:87:01:64:ca:b8:8c:22:7e:13:2e:49:
                    33:b5:91:35:b9:ff:ca:53:c9:03:60:49:3d:6e:ff:
                    23:1c:e1:3a:e6:5b:d1:d6:aa:90:51:59:36:f2:57:
                    0c:25:46:80:7b:84:f6:97:22:19:1e:69:30:5a:06:
                    5b:61:47:85:5b:5a:e3:fd:a8:c5:85:d6:f5:a2:b1:
                    52:cc:c1:36:3f:a9:e9:9c:67:63:6d:83:df:35:96:
                    92:06:a6:fd:be:62:57:e4:4d:95:f9:13:a7:51:b5:
                    98:ec:52:e2:fe:45:e8:71:e5:54:ce:f6:7a:51:06:
                    79:13:08:75:c6:a9:e1:3f:76:72:b0:54:4e:2b:45:
                    2c:c5:b9:a0:03:67:e3:b7:84:7f:25:a4:b2:18:bf:
                    34:e4:fb:49:d1:38:b3:26:79:e4:b7:e3:27:c0:5e:
                    1e:b5:b5:b1:90:e2:04:c3:d0:84:52:8f:14:71:d4:
                    1b:07:c7:53:eb:47:4e:83:f9:56:b0:2c:43:82:23:
                    d8:c0:ec:85:41:a7:9a:74:d0:e5:89:d2:d1:cd:1b:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3A:22:01:A5:A5:40:16:4E:10:74:96:52:58:7D:36:F1:30:7C:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/52eca1ab-f85f-37ed-9daf-04d84c203883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl

            X509v3 Authority Key Identifier:
                keyid:F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4d9:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:15:3e:f0:6c:13:6a:69:c1:43:76:e4:ae:c8:0b:62:be:2a:
         f1:63:d4:3f:c8:d3:6c:1b:9f:e7:50:03:2f:3d:8c:36:35:7c:
         fa:e0:80:f3:8b:0a:e6:a2:3b:85:d7:cd:d9:1d:4e:94:f2:89:
         3c:d6:3c:2f:f2:93:b6:0b:4e:36:83:a3:65:25:6e:99:61:31:
         d6:20:25:f2:51:40:0a:92:ba:75:40:e3:01:bd:31:0f:cb:e6:
         d7:a6:1a:2b:22:86:1f:0a:b2:6b:40:32:4a:24:bf:33:2e:dc:
         04:42:66:9d:96:a5:99:32:bf:9e:20:28:8a:50:f1:54:0c:df:
         f8:c3:81:ef:f9:11:96:d4:f0:9e:1f:e9:e5:6b:19:01:76:54:
         75:1a:41:cf:5b:6f:25:83:e7:ea:2c:2c:31:32:65:30:29:b2:
         ea:a2:20:3f:96:1a:de:d6:9e:90:ce:bd:5b:3d:55:10:ff:8b:
         e9:aa:e5:3c:83:44:a0:7b:4b:af:81:f1:a3:21:13:6e:b2:74:
         b6:bf:02:a0:80:87:a2:1f:30:3c:37:28:ed:7f:93:8c:32:97:
         50:da:13:a7:07:cb:83:f4:56:6e:0c:dc:73:0a:fb:95:be:09:
         23:e3:09:64:b4:1e:eb:6e:fd:87:0e:59:42:72:12:a9:8d:ce:
         68:2e:6c:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5wn3wZr9KMvdjIFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhMGNiOTItMDUwZS00NzlmLWJmZjQtZGRkZDY4ZWI0
ZTA0MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk
Yjc5YjIyNjYtYjlmNC00MTc0LTg5YWYtYmMwZmM2NTNhYTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4iCs28Dq2+c3GgZAFyZIVWNlGlVRDoo4N34
7WHzSCCvg3V/9cl1PvupOApNq7wlhwFkyriMIn4TLkkztZE1uf/KU8kDYEk9bv8j
HOE65lvR1qqQUVk28lcMJUaAe4T2lyIZHmkwWgZbYUeFW1rj/ajFhdb1orFSzME2
P6npnGdjbYPfNZaSBqb9vmJX5E2V+ROnUbWY7FLi/kXoceVUzvZ6UQZ5Ewh1xqnh
P3ZysFROK0UsxbmgA2fjt4R/JaSyGL805PtJ0TizJnnkt+MnwF4etbWxkOIEw9CE
Uo8UcdQbB8dT60dOg/lWsCxDgiPYwOyFQaeadNDlidLRzRuWiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIE6IgGlpUAWThB0llJYfTbxMHwyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lZWEw
Y2I5Mi0wNTBlLTQ3OWYtYmZmNC1kZGRkNjhlYjRlMDQvNTJlY2ExYWItZjg1Zi0z
N2VkLTlkYWYtMDRkODRjMjAzODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWVhMGNiOTItMDUwZS00NzlmLWJm
ZjQtZGRkZDY4ZWI0ZTA0L2VlYTBjYjkyLTA1MGUtNDc5Zi1iZmY0LWRkZGQ2OGVi
NGUwNC5jcmwwHwYDVR0jBBgwFoAU+LbKuMYtFG0LFoI8NVeEJpwBDkEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9lZWEwY2I5Mi0wNTBlLTQ3OWYtYmZmNC1kZGRk
NjhlYjRlMDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL02QAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFQVPvBsE2ppwUN25K7IC2K+KvFj1D/I02wbn+dQAy89jDY1fPrg
gPOLCuaiO4XXzdkdTpTyiTzWPC/yk7YLTjaDo2UlbplhMdYgJfJRQAqSunVA4wG9
MQ/L5temGisihh8KsmtAMkokvzMu3ARCZp2WpZkyv54gKIpQ8VQM3/jDge/5EZbU
8J4f6eVrGQF2VHUaQc9bbyWD5+osLDEyZTApsuqiID+WGt7WnpDOvVs9VRD/i+mq
5TyDRKB7S6+B8aMhE26ydLa/AqCAh6IfMDw3KO1/k4wyl1DaE6cHy4P0Vm4M3HMK
+5W+CSPjCWS0Hutu/YcOWUJyEqmNzmgubLI=
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:53 2026 by rpki-client