Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/02d672a4-08bb-3e92-b541-ae26424edbc7.roa
File:                     02d672a4-08bb-3e92-b541-ae26424edbc7.roa (raw, json)
Hash identifier:          2XpZerbB1wupAAGX0z6PXUFzYiDotMGx8AE1LTKRXoA=
Subject key identifier:   3E:99:14:03:14:76:96:41:0E:8C:F9:0F:92:AD:9F:2A:8C:6A:66:FC
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584DBA3B01CC9A5C094CBBE17EC0
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/02d672a4-08bb-3e92-b541-ae26424edbc7.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     393249
IP address blocks:        2607:f8f0:614::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:01:cc:9a:5c:09:4c:bb:e1:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=cc06c078-de1b-4cc4-8132-a29a17c04462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ab:b9:9a:3e:aa:1e:ee:01:1b:aa:73:bf:e2:
                    d6:26:7d:0d:40:95:f5:58:a9:42:6d:8f:31:88:6f:
                    ea:25:a4:10:0d:ff:9a:95:1a:c7:d4:91:16:3c:2e:
                    c2:f9:55:d9:3b:48:d6:75:31:fe:11:b6:fb:df:f8:
                    d5:8b:cd:78:fa:ab:ca:37:3b:05:6b:ab:9a:ac:b6:
                    4b:8e:8d:ae:01:ab:93:0c:62:d2:65:fe:6b:e7:b5:
                    52:32:04:46:d6:43:ea:a4:19:94:4f:44:0f:23:d2:
                    a7:43:ac:e8:9d:c1:92:bc:d6:c2:32:70:91:2d:24:
                    cc:53:1b:b0:02:3c:3e:4d:db:3c:ee:0a:22:29:e4:
                    4d:f9:ee:06:d6:f8:c6:80:d5:4f:59:53:b5:fd:60:
                    e1:fc:e9:ba:a3:21:df:48:fa:51:a3:0e:bc:bf:79:
                    0c:c5:23:44:69:6d:84:03:f1:ee:16:16:f9:6a:f1:
                    b8:11:31:a3:fb:38:02:ef:c7:cc:e5:a0:59:b6:0f:
                    33:2a:04:d5:b2:fe:f1:7e:1e:a8:01:9f:37:0b:2d:
                    98:60:7e:74:83:2b:2e:40:b1:72:3d:09:8f:9f:28:
                    bb:1e:cb:91:ed:cc:d0:f0:ec:97:ea:05:77:6c:f8:
                    08:79:e3:21:60:69:c5:87:69:e0:53:06:2c:9d:06:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:99:14:03:14:76:96:41:0E:8C:F9:0F:92:AD:9F:2A:8C:6A:66:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/02d672a4-08bb-3e92-b541-ae26424edbc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:614::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:0c:30:c4:7d:dd:f5:46:38:9e:f7:a0:f3:b9:f7:cc:7e:85:
         0a:95:aa:35:95:d3:bc:70:e7:6d:32:88:c9:24:4e:ff:5c:e6:
         d7:b4:12:20:3b:77:ee:5b:38:6a:7f:2d:16:d2:74:89:1f:17:
         01:bb:e0:d9:e4:78:61:be:d7:39:c9:f2:72:02:9c:a5:20:bf:
         fc:70:5c:53:3a:58:a4:a0:3f:5f:1f:5e:7d:94:29:2c:90:c2:
         24:63:8b:25:b2:a3:39:b5:3b:81:8b:d5:49:79:6f:23:c0:01:
         f0:d7:04:b9:7a:ca:f4:c8:b4:9b:a0:4a:c4:bc:ff:6f:93:84:
         64:dc:65:54:a0:e4:14:f6:14:5e:e6:da:92:a0:c8:81:18:d8:
         84:43:c9:3f:1f:40:46:e7:81:11:82:54:d1:2a:c1:b6:10:fd:
         30:31:7a:07:ce:71:90:22:70:da:e4:18:92:8f:a7:aa:57:0d:
         88:d4:1d:71:b0:38:ed:9c:5c:52:e5:90:1a:4c:c4:25:7e:bd:
         d9:68:cf:da:60:f2:04:99:b2:c7:d8:b6:04:ed:66:19:26:fc:
         21:57:46:c4:39:af:fa:a7:43:f7:26:d6:2d:5c:6b:95:5b:ff:
         ac:32:56:d3:02:39:cf:9d:92:03:f2:d7:ef:68:f3:cd:a0:f8:
         e6:e0:1a:8e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE26OwHMmlwJTLvhfsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux
OGNmMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
Y2MwNmMwNzgtZGUxYi00Y2M0LTgxMzItYTI5YTE3YzA0NDYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3au5mj6qHu4BG6pzv+LWJn0NQJX1WKlCbY8x
iG/qJaQQDf+alRrH1JEWPC7C+VXZO0jWdTH+Ebb73/jVi814+qvKNzsFa6uarLZL
jo2uAauTDGLSZf5r57VSMgRG1kPqpBmUT0QPI9KnQ6zoncGSvNbCMnCRLSTMUxuw
Ajw+Tds87goiKeRN+e4G1vjGgNVPWVO1/WDh/Om6oyHfSPpRow68v3kMxSNEaW2E
A/HuFhb5avG4ETGj+zgC78fM5aBZtg8zKgTVsv7xfh6oAZ83Cy2YYH50gysuQLFy
PQmPnyi7HsuR7czQ8OyX6gV3bPgIeeMhYGnFh2ngUwYsnQYf1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD6ZFAMUdpZBDoz5D5KtnyqMamb8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi
NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvMDJkNjcyYTQtMDhiYi0z
ZTkyLWI1NDEtYWUyNjQyNGVkYmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5
MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl
MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli
NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AYU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABoMMMR93fVGOJ73oPO598x+hQqVqjWV07xw520yiMkkTv9c5te0
EiA7d+5bOGp/LRbSdIkfFwG74NnkeGG+1znJ8nICnKUgv/xwXFM6WKSgP18fXn2U
KSyQwiRjiyWyozm1O4GL1Ul5byPAAfDXBLl6yvTItJugSsS8/2+ThGTcZVSg5BT2
FF7m2pKgyIEY2IRDyT8fQEbngRGCVNEqwbYQ/TAxegfOcZAicNrkGJKPp6pXDYjU
HXGwOO2cXFLlkBpMxCV+vdloz9pg8gSZssfYtgTtZhkm/CFXRsQ5r/qnQ/cm1i1c
a5Vb/6wyVtMCOc+dkgPy1+9o882g+ObgGo4=
-----END CERTIFICATE-----
Generated at Wed May 13 11:44:37 2026 by rpki-client