Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/5c1c7d7e-8d90-393e-ad9a-2677bd358a33.roa
File:                     5c1c7d7e-8d90-393e-ad9a-2677bd358a33.roa (raw, json)
Hash identifier:          W4lpnlIw7ubP+8CdA/7smDMZiihMutXUDi4VExQ5ZHo=
Subject key identifier:   1E:E8:32:A4:62:0A:E3:4F:11:5F:98:B4:E0:E9:23:F7:BF:4B:D4:31
Certificate issuer:       /CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc
Certificate serial:       010D0C9F4328584DCDC5A654C3CF64373CAF2170
Authority key identifier: D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/5c1c7d7e-8d90-393e-ad9a-2677bd358a33.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     8143
IP address blocks:        2602:f732:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a6:54:c3:cf:64:37:3c:af:21:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=85006347-bfdc-44eb-a795-d5dea41cbd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:78:a0:b6:f7:01:61:78:4c:3f:31:4b:a3:3f:
                    ae:22:d4:54:6d:c3:ca:95:93:58:9a:28:d4:58:1e:
                    d9:fa:e5:d3:4f:0b:ff:03:df:53:b0:ce:d1:34:fb:
                    f1:35:51:01:07:91:2d:b6:46:d3:98:0d:b1:ac:b9:
                    65:8c:7a:06:54:75:94:0c:47:9e:84:42:fa:0a:0e:
                    0f:82:b2:9e:0f:57:1e:b8:1d:0d:93:45:7e:38:ee:
                    e5:d2:20:15:c4:91:24:d6:f1:7a:59:89:35:83:d0:
                    0c:11:2e:c5:72:10:6e:3b:2c:0f:75:5b:8f:9f:89:
                    99:53:fb:16:75:20:e7:55:eb:aa:23:43:80:75:b9:
                    b1:64:b9:24:b0:b9:0f:f8:1e:f3:d9:9d:db:12:0b:
                    34:63:97:59:49:43:9e:52:6b:3d:ff:74:77:25:c6:
                    70:f8:6f:e1:80:05:38:f0:89:a2:73:d8:83:bf:fa:
                    65:97:71:9c:73:73:19:29:4b:94:1a:58:08:33:33:
                    fc:7d:ba:4c:81:5a:8f:4e:80:7f:c1:5c:59:af:e1:
                    69:26:a9:c2:c5:dd:42:82:94:dd:6c:5f:5c:64:40:
                    de:7a:b4:5a:26:b6:cf:6e:8f:38:68:66:fb:bd:84:
                    39:dd:36:ab:b2:6f:cc:37:91:4d:32:bf:52:47:a6:
                    07:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E8:32:A4:62:0A:E3:4F:11:5F:98:B4:E0:E9:23:F7:BF:4B:D4:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/5c1c7d7e-8d90-393e-ad9a-2677bd358a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f732:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:75:d1:70:70:34:ad:86:a8:ea:b6:a0:07:b4:aa:b5:ed:39:
         cd:b8:f8:50:99:7e:c6:2a:ce:5d:f3:30:8f:5d:ab:4f:4f:6c:
         3d:6e:a3:5c:07:a1:53:d6:e1:8b:39:43:64:4e:b1:5c:ff:8b:
         31:84:55:f4:97:53:94:f0:7b:0b:3e:84:98:e3:3f:eb:e0:d6:
         6d:7e:63:e2:3c:9f:23:f0:c9:87:39:e8:0a:c3:ca:18:3b:35:
         99:7b:d0:08:c5:a0:71:05:6b:b6:a7:bf:03:79:ff:f5:dd:3c:
         07:4a:32:9c:a2:3f:6e:88:52:34:8d:46:37:37:1a:e2:16:ee:
         ad:3d:1c:5d:1d:83:0d:ba:32:35:31:ce:7b:ca:ec:49:86:5a:
         24:33:97:2a:7c:43:8a:6f:b0:7e:ac:d7:78:b8:ac:23:0e:05:
         e5:9f:32:57:1d:89:a1:08:07:6f:ef:b2:b4:57:ff:a8:a7:31:
         71:15:a0:26:3d:19:89:47:7e:9b:bc:68:76:c5:62:57:43:27:
         ce:5d:94:7a:49:f3:fb:d4:4b:58:81:27:41:31:9b:9b:a5:45:
         d0:22:f1:9e:af:44:8e:6e:88:0d:ec:f6:17:0d:17:0f:b0:a6:
         30:75:99:59:b9:49:6d:a9:a2:b0:cb:bd:01:1b:06:f1:6a:9d:
         6a:f1:ba:2f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3NxaZUw89kNzyvIXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzJiYjRjNTQtMTRhNi00ZTMyLWIzYTAtZGVmYWQzMDBk
OWZjMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk
ODUwMDYzNDctYmZkYy00NGViLWE3OTUtZDVkZWE0MWNiZDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nigtvcBYXhMPzFLoz+uItRUbcPKlZNYmijU
WB7Z+uXTTwv/A99TsM7RNPvxNVEBB5EttkbTmA2xrLlljHoGVHWUDEeehEL6Cg4P
grKeD1ceuB0Nk0V+OO7l0iAVxJEk1vF6WYk1g9AMES7FchBuOywPdVuPn4mZU/sW
dSDnVeuqI0OAdbmxZLkksLkP+B7z2Z3bEgs0Y5dZSUOeUms9/3R3JcZw+G/hgAU4
8Imic9iDv/pll3Gcc3MZKUuUGlgIMzP8fbpMgVqPToB/wVxZr+FpJqnCxd1CgpTd
bF9cZEDeerRaJrbPbo84aGb7vYQ53Tarsm/MN5FNMr9SR6YHEwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB7oMqRiCuNPEV+YtODpI/e/S9QxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jMmJi
NGM1NC0xNGE2LTRlMzItYjNhMC1kZWZhZDMwMGQ5ZmMvNWMxYzdkN2UtOGQ5MC0z
OTNlLWFkOWEtMjY3N2JkMzU4YTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzJiYjRjNTQtMTRhNi00ZTMyLWIz
YTAtZGVmYWQzMDBkOWZjL2MyYmI0YzU0LTE0YTYtNGUzMi1iM2EwLWRlZmFkMzAw
ZDlmYy5jcmwwHwYDVR0jBBgwFoAU1FljNJLTiXWCreXe3xu4GJvnei8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jMmJiNGM1NC0xNGE2LTRlMzItYjNhMC1kZWZh
ZDMwMGQ5ZmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3MgAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABd10XBwNK2GqOq2oAe0qrXtOc24+FCZfsYqzl3zMI9dq09PbD1u
o1wHoVPW4Ys5Q2ROsVz/izGEVfSXU5Twews+hJjjP+vg1m1+Y+I8nyPwyYc56ArD
yhg7NZl70AjFoHEFa7anvwN5//XdPAdKMpyiP26IUjSNRjc3GuIW7q09HF0dgw26
MjUxznvK7EmGWiQzlyp8Q4pvsH6s13i4rCMOBeWfMlcdiaEIB2/vsrRX/6inMXEV
oCY9GYlHfpu8aHbFYldDJ85dlHpJ8/vUS1iBJ0Exm5ulRdAi8Z6vRI5uiA3s9hcN
Fw+wpjB1mVm5SW2porDLvQEbBvFqnWrxui8=
-----END CERTIFICATE-----
Generated at Wed May 13 01:44:10 2026 by rpki-client