Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/a463c619-0834-364e-9f48-291b1b91fa42.roa
File:                     a463c619-0834-364e-9f48-291b1b91fa42.roa (raw, json)
Hash identifier:          fOAoIfPebQOpKO8raHCOFoZblOtWZ57m3IU+KB3XUYM=
Subject key identifier:   88:A1:4D:F8:2C:A4:3D:F4:A8:CF:BD:1A:DF:F5:37:D7:A5:31:D2:BD
Certificate issuer:       /CN=77258d44-b15b-4045-943b-356f0becdaa2
Certificate serial:       010D0C9F4328584D1F4A0CEFC77B56791FCA5580
Authority key identifier: 6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/a463c619-0834-364e-9f48-291b1b91fa42.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     399554
IP address blocks:        2602:fc43::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:0c:ef:c7:7b:56:79:1f:ca:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77258d44-b15b-4045-943b-356f0becdaa2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=db6bfa8a-9051-4c5d-81a2-002b4077c299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:37:7f:46:9a:18:47:87:7f:50:b7:f9:97:
                    17:a8:bc:fd:e8:49:e1:35:cc:e8:92:0b:af:c7:1a:
                    b8:4e:56:73:fa:32:80:d9:6f:54:5e:3a:15:cd:b7:
                    d3:c8:25:ca:99:09:11:cd:3f:f8:c7:f5:10:d1:37:
                    8b:11:be:a3:e2:de:87:54:18:54:88:17:4f:92:db:
                    05:db:01:4c:2f:bf:b3:f9:bf:81:1c:5b:90:7e:b3:
                    f7:c1:1e:93:a3:f5:59:79:ab:a6:e6:ed:b5:0b:b8:
                    7e:10:2d:e4:27:81:72:47:3e:52:b9:cf:81:4b:58:
                    0e:e4:18:3d:43:a6:f8:7c:e5:e5:3d:ec:75:fc:ea:
                    33:46:34:71:d4:bc:4a:28:c9:77:17:ce:5f:df:58:
                    b9:fe:c0:1d:1c:9c:f8:85:ca:e4:52:35:c2:87:9e:
                    b6:35:30:44:10:79:2e:64:6f:f2:4a:95:ae:b2:0b:
                    40:30:3e:42:94:df:93:dd:95:8e:9a:35:dd:de:58:
                    b6:76:05:ab:1e:d4:41:92:cc:a4:d2:0d:1c:bc:4b:
                    f5:cc:bf:94:57:14:dd:7e:19:9c:35:0a:42:43:6a:
                    a5:c5:c3:fe:6d:18:ff:78:60:8a:45:24:19:df:68:
                    a6:06:72:c9:5e:c6:3e:2d:72:c8:d9:9b:79:26:66:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A1:4D:F8:2C:A4:3D:F4:A8:CF:BD:1A:DF:F5:37:D7:A5:31:D2:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/a463c619-0834-364e-9f48-291b1b91fa42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl

            X509v3 Authority Key Identifier:
                keyid:6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc43::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:30:66:41:60:47:0e:8e:00:0c:2e:1a:75:0d:87:e2:e1:d1:
         e5:e9:3d:46:af:db:76:31:7e:9d:af:df:e1:94:cf:5a:75:e7:
         53:5b:0d:61:51:a8:bb:36:84:81:07:40:d7:e5:b3:31:be:d8:
         96:ca:60:b9:a4:b2:5f:e8:bf:b8:26:36:0e:88:9b:a4:0c:07:
         06:69:c9:4c:c6:d2:fb:ab:67:b1:34:cf:5a:3e:3d:87:fc:0f:
         b0:c0:9f:50:1c:af:00:e3:46:ee:07:4e:e0:46:91:bf:d2:33:
         2f:61:ab:da:0d:ce:b4:a9:05:80:f9:83:93:7a:3c:f4:f2:ea:
         63:76:08:e2:1e:5b:3b:66:12:ad:27:40:24:d2:13:10:7a:78:
         eb:8c:8b:41:d2:4a:fb:0e:52:d8:e3:12:a4:b2:bd:a3:04:67:
         b8:f4:18:58:52:b0:7d:13:bb:43:6c:2c:cf:29:48:6a:83:c0:
         a8:59:32:69:56:1f:94:06:5f:b6:4d:95:18:57:05:c5:1e:95:
         70:59:ff:2d:31:1e:b5:f2:62:99:74:74:87:90:a9:b0:90:49:
         67:1d:f6:6d:0e:ee:5c:55:d4:52:9b:c5:11:a7:27:4d:da:50:
         f6:bc:fc:04:02:0b:94:9e:c2:3e:42:08:13:b3:91:84:64:72:
         93:d4:e8:68
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0fSgzvx3tWeR/KVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzcyNThkNDQtYjE1Yi00MDQ1LTk0M2ItMzU2ZjBiZWNk
YWEyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
ZGI2YmZhOGEtOTA1MS00YzVkLTgxYTItMDAyYjQwNzdjMjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5k3f0aaGEeHf1C3+ZcXqLz96EnhNczokguv
xxq4TlZz+jKA2W9UXjoVzbfTyCXKmQkRzT/4x/UQ0TeLEb6j4t6HVBhUiBdPktsF
2wFML7+z+b+BHFuQfrP3wR6To/VZeaum5u21C7h+EC3kJ4FyRz5Suc+BS1gO5Bg9
Q6b4fOXlPex1/OozRjRx1LxKKMl3F85f31i5/sAdHJz4hcrkUjXCh562NTBEEHku
ZG/ySpWusgtAMD5ClN+T3ZWOmjXd3li2dgWrHtRBksyk0g0cvEv1zL+UVxTdfhmc
NQpCQ2qlxcP+bRj/eGCKRSQZ32imBnLJXsY+LXLI2Zt5JmY88QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIihTfgspD30qM+9Gt/1N9elMdK9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NzI1
OGQ0NC1iMTViLTQwNDUtOTQzYi0zNTZmMGJlY2RhYTIvYTQ2M2M2MTktMDgzNC0z
NjRlLTlmNDgtMjkxYjFiOTFmYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzcyNThkNDQtYjE1Yi00MDQ1LTk0
M2ItMzU2ZjBiZWNkYWEyLzc3MjU4ZDQ0LWIxNWItNDA0NS05NDNiLTM1NmYwYmVj
ZGFhMi5jcmwwHwYDVR0jBBgwFoAUaqOvqLEhEhWHFL78vmgQRyDG97swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83NzI1OGQ0NC1iMTViLTQwNDUtOTQzYi0zNTZm
MGJlY2RhYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8QwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAlTBmQWBHDo4ADC4adQ2H4uHR5ek9Rq/bdjF+na/f4ZTPWnXnU1sN
YVGouzaEgQdA1+WzMb7YlspguaSyX+i/uCY2DoibpAwHBmnJTMbS+6tnsTTPWj49
h/wPsMCfUByvAONG7gdO4EaRv9IzL2Gr2g3OtKkFgPmDk3o89PLqY3YI4h5bO2YS
rSdAJNITEHp464yLQdJK+w5S2OMSpLK9owRnuPQYWFKwfRO7Q2wszylIaoPAqFky
aVYflAZftk2VGFcFxR6VcFn/LTEetfJimXR0h5CpsJBJZx32bQ7uXFXUUpvFEacn
TdpQ9rz8BAILlJ7CPkIIE7ORhGRyk9ToaA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:45:10 2026 by rpki-client