Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/148b1209-657b-3f16-8b10-b0395411003b.roa
File:                     148b1209-657b-3f16-8b10-b0395411003b.roa (raw, json)
Hash identifier:          cB+BDnz0M5gtHgADR7Ewfq8krWYHm3t6ow8+w7KGxMY=
Subject key identifier:   77:F0:48:2C:C6:25:1E:24:ED:EA:D9:17:C3:14:9A:EC:2F:1D:17:59
Certificate issuer:       /CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc
Certificate serial:       010D0C9F4328584DC135E02FDFFCC022D4ED4680
Authority key identifier: D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/148b1209-657b-3f16-8b10-b0395411003b.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     8143
IP address blocks:        2602:f732:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:e0:2f:df:fc:c0:22:d4:ed:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=8fa66f34-aff7-467b-aa84-ef73a72826e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:58:63:0d:b2:dd:d2:68:aa:2d:b3:25:ad:12:
                    7e:e8:37:f5:84:a9:4f:f7:89:6c:cc:a8:70:35:7c:
                    2d:71:9b:d4:13:40:31:69:90:64:ae:6f:38:a7:f4:
                    3f:c1:95:d5:6d:ba:d8:b4:43:0d:b2:5e:ec:9d:88:
                    09:a8:99:a9:7b:2b:6c:c8:aa:f4:e9:82:22:98:a1:
                    c6:2d:d5:77:ae:0a:11:a5:ad:57:c2:7a:cc:0c:7e:
                    2e:84:1f:c7:c2:8d:10:47:2f:4b:b3:9e:79:96:0c:
                    0b:82:af:97:e8:fe:b4:f3:38:c8:22:f7:9b:f7:ec:
                    1a:d5:3a:df:53:86:64:73:b8:ba:73:d3:ac:eb:e1:
                    6f:44:09:af:9b:03:8e:a4:28:f0:36:ed:a7:2a:88:
                    bd:85:ca:27:3f:4c:c5:28:17:27:15:d6:19:f5:fa:
                    71:b6:03:b0:06:60:55:8a:34:d9:7c:96:4b:84:3b:
                    9a:56:51:8d:f3:6c:b7:1c:76:9d:0c:d6:eb:be:db:
                    45:00:e4:4f:21:3d:13:0f:4b:4f:da:de:d7:d4:86:
                    6c:7e:21:e6:b5:a6:06:eb:72:38:4b:4c:87:dc:88:
                    15:4c:68:53:07:73:8a:86:1c:28:11:67:10:6d:6f:
                    47:e5:a9:f1:76:55:fa:b6:23:57:e5:de:d1:45:2c:
                    9e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F0:48:2C:C6:25:1E:24:ED:EA:D9:17:C3:14:9A:EC:2F:1D:17:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/148b1209-657b-3f16-8b10-b0395411003b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f732:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ee:fc:39:dc:f7:31:02:ed:8c:94:a5:86:d4:2e:69:c0:41:
         13:96:cc:99:6b:78:f0:58:44:5d:4a:09:e8:5f:cb:bc:1c:7f:
         5f:f9:93:33:a8:66:f7:84:a0:29:4d:8d:03:d0:8a:1e:7a:23:
         6e:2d:58:e3:25:80:ed:6e:6f:2a:6c:d3:a2:f4:02:98:03:e7:
         5c:a5:39:de:bc:bd:1c:a2:87:5d:80:ea:41:e3:1d:a0:5c:da:
         47:39:9e:7f:4d:31:98:de:8c:ab:f4:82:0d:c9:10:4f:4b:09:
         2b:ef:c4:a8:73:45:53:9e:dd:64:1d:44:df:0e:f3:d3:34:7e:
         95:18:85:75:ca:a6:f1:10:9f:ad:e2:b0:c9:5e:70:d1:3f:8c:
         81:d5:24:5e:11:76:20:55:f2:d6:ba:da:13:d6:b3:8a:85:0a:
         96:d6:4a:4a:de:a8:d5:8f:72:c1:0c:82:04:f9:f6:f1:96:6d:
         5e:ba:10:30:b8:eb:89:07:d7:be:61:b1:4e:a9:0e:20:e3:90:
         c3:32:29:aa:fb:96:d8:bd:d5:1d:fa:11:0b:dd:a2:ac:77:59:
         ce:6e:8f:05:b2:ad:2a:eb:79:5c:c2:f1:aa:9c:15:6f:01:03:
         f5:41:ee:5d:d6:84:b9:9f:31:19:fe:45:bc:cd:bc:d7:fb:4a:
         f6:15:78:ef
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3BNeAv3/zAItTtRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzJiYjRjNTQtMTRhNi00ZTMyLWIzYTAtZGVmYWQzMDBk
OWZjMB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk
OGZhNjZmMzQtYWZmNy00NjdiLWFhODQtZWY3M2E3MjgyNmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVhjDbLd0miqLbMlrRJ+6Df1hKlP94lszKhw
NXwtcZvUE0AxaZBkrm84p/Q/wZXVbbrYtEMNsl7snYgJqJmpeytsyKr06YIimKHG
LdV3rgoRpa1XwnrMDH4uhB/Hwo0QRy9Ls555lgwLgq+X6P608zjIIveb9+wa1Trf
U4Zkc7i6c9Os6+FvRAmvmwOOpCjwNu2nKoi9hconP0zFKBcnFdYZ9fpxtgOwBmBV
ijTZfJZLhDuaVlGN82y3HHadDNbrvttFAORPIT0TD0tP2t7X1IZsfiHmtaYG63I4
S0yH3IgVTGhTB3OKhhwoEWcQbW9H5anxdlX6tiNX5d7RRSyefQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHfwSCzGJR4k7erZF8MUmuwvHRdZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jMmJi
NGM1NC0xNGE2LTRlMzItYjNhMC1kZWZhZDMwMGQ5ZmMvMTQ4YjEyMDktNjU3Yi0z
ZjE2LThiMTAtYjAzOTU0MTEwMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzJiYjRjNTQtMTRhNi00ZTMyLWIz
YTAtZGVmYWQzMDBkOWZjL2MyYmI0YzU0LTE0YTYtNGUzMi1iM2EwLWRlZmFkMzAw
ZDlmYy5jcmwwHwYDVR0jBBgwFoAU1FljNJLTiXWCreXe3xu4GJvnei8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jMmJiNGM1NC0xNGE2LTRlMzItYjNhMC1kZWZh
ZDMwMGQ5ZmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3MgAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIru/Dnc9zEC7YyUpYbULmnAQROWzJlrePBYRF1KCehfy7wcf1/5
kzOoZveEoClNjQPQih56I24tWOMlgO1ubyps06L0ApgD51ylOd68vRyih12A6kHj
HaBc2kc5nn9NMZjejKv0gg3JEE9LCSvvxKhzRVOe3WQdRN8O89M0fpUYhXXKpvEQ
n63isMlecNE/jIHVJF4RdiBV8ta62hPWs4qFCpbWSkreqNWPcsEMggT59vGWbV66
EDC464kH175hsU6pDiDjkMMyKar7lti91R36EQvdoqx3Wc5ujwWyrSrreVzC8aqc
FW8BA/VB7l3WhLmfMRn+RbzNvNf7SvYVeO8=
-----END CERTIFICATE-----
Generated at Wed May 13 04:13:28 2026 by rpki-client