Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/05d4a2a6-29fe-3d79-afe4-e976f6f1366a.roa
File:                     05d4a2a6-29fe-3d79-afe4-e976f6f1366a.roa (raw, json)
Hash identifier:          HW9ow76JznYtguKE7+b/jMmcdrmRe0gCLvzDfwKBdCA=
Subject key identifier:   58:F5:B4:47:A9:91:C2:41:65:9F:CC:3E:36:43:7C:61:B5:D8:2D:BC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB652B395D91BE23EC1EC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/05d4a2a6-29fe-3d79-afe4-e976f6f1366a.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        2602:10d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:65:2b:39:5d:91:be:23:ec:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=cf565f23-5d13-4fdc-9712-6902b9652650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:cc:4d:4c:49:fe:78:0e:50:d4:da:fa:78:
                    47:40:65:f1:06:1c:35:73:ac:e4:97:a9:fb:15:b5:
                    3e:09:05:11:f3:bd:58:be:6c:e8:67:6f:2a:d2:2b:
                    8c:1c:65:f8:a8:cc:3d:52:45:71:98:34:7d:e7:98:
                    44:10:73:d5:05:52:e0:1c:03:ac:5a:bd:7a:73:3d:
                    27:54:b3:fb:b7:c3:ba:a5:76:eb:cf:88:f4:a7:0a:
                    f8:43:38:dc:24:93:99:05:4a:9f:ca:c9:91:1c:86:
                    be:5a:2e:52:3d:3e:6c:28:b7:4b:e2:d6:ec:a8:da:
                    83:bf:ef:58:ba:94:47:31:58:3c:40:dd:37:2c:28:
                    71:e4:a4:e3:03:c0:25:1d:10:b6:44:27:46:34:2f:
                    36:65:1e:69:4d:b2:9b:1f:10:a1:ab:51:cc:ad:7e:
                    01:ea:8b:e9:2a:b5:ca:b4:61:f3:15:08:41:04:6d:
                    6a:ff:f0:aa:f1:da:c8:2a:a0:c0:2c:05:6b:75:55:
                    b6:0b:12:1b:8a:18:5a:32:dc:b6:b7:51:a7:09:b4:
                    75:95:6f:f5:ff:3d:a3:4e:a3:f6:d6:a9:b8:90:ec:
                    70:6f:77:6e:69:ee:ed:5f:a6:fd:98:66:11:fd:b9:
                    fc:6c:bf:7b:80:e3:e7:be:cd:05:57:0d:af:1f:49:
                    4b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F5:B4:47:A9:91:C2:41:65:9F:CC:3E:36:43:7C:61:B5:D8:2D:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/05d4a2a6-29fe-3d79-afe4-e976f6f1366a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:10d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:84:92:80:59:b2:6e:14:95:22:90:ff:e9:cc:c8:a7:6c:
         89:9d:b4:76:a8:ec:d7:85:b5:11:d6:ca:15:22:80:46:fe:8d:
         c8:04:db:74:73:03:d7:43:9c:1b:93:84:84:a9:82:72:ce:46:
         55:11:9e:6a:34:15:6d:68:44:fd:c0:f9:80:96:3a:5b:41:ce:
         54:78:2f:c8:4f:14:1e:7e:49:2a:b7:ee:af:b2:99:30:17:0d:
         1a:39:ee:3b:41:73:31:be:62:91:b6:04:71:3b:6a:ea:d4:ca:
         70:71:8a:be:5b:b6:07:3f:1e:c8:7c:5d:0a:00:4f:4e:8f:54:
         58:c2:9b:7b:3f:48:2f:66:c4:1e:46:85:d1:1a:ec:75:cb:16:
         e2:1f:7f:de:e9:16:51:05:6c:92:27:3b:33:5f:69:44:27:27:
         40:33:32:d2:16:24:ea:09:7e:c2:03:ae:19:35:f3:ae:06:ab:
         2a:54:15:88:a1:ce:a1:67:c5:e2:14:6e:e4:39:ae:3b:59:6a:
         af:11:e0:66:6e:c8:29:74:c0:51:86:2b:ca:d2:fa:b3:f0:0f:
         19:99:cc:61:1f:4d:c4:5d:2d:93:ed:76:57:66:d7:0b:94:6b:
         3c:24:08:1c:02:6b:2e:36:d3:9b:40:3b:fd:d5:3f:87:16:40:
         0a:c5:6c:e0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1Ay2UrOV2RviPsHsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
Y2Y1NjVmMjMtNWQxMy00ZmRjLTk3MTItNjkwMmI5NjUyNjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrLMTUxJ/ngOUNTa+nhHQGXxBhw1c6zkl6n7
FbU+CQUR871YvmzoZ28q0iuMHGX4qMw9UkVxmDR955hEEHPVBVLgHAOsWr16cz0n
VLP7t8O6pXbrz4j0pwr4QzjcJJOZBUqfysmRHIa+Wi5SPT5sKLdL4tbsqNqDv+9Y
upRHMVg8QN03LChx5KTjA8AlHRC2RCdGNC82ZR5pTbKbHxChq1HMrX4B6ovpKrXK
tGHzFQhBBG1q//Cq8drIKqDALAVrdVW2CxIbihhaMty2t1GnCbR1lW/1/z2jTqP2
1qm4kOxwb3duae7tX6b9mGYR/bn8bL97gOPnvs0FVw2vH0lLQQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFj1tEepkcJBZZ/MPjZDfGG12C28MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDVkNGEyYTYtMjlmZS0z
ZDc5LWFmZTQtZTk3NmY2ZjEzNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIBDQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAO4OEkoBZsm4UlSKQ/+nMyKdsiZ20dqjs14W1EdbKFSKARv6NyATb
dHMD10OcG5OEhKmCcs5GVRGeajQVbWhE/cD5gJY6W0HOVHgvyE8UHn5JKrfur7KZ
MBcNGjnuO0FzMb5ikbYEcTtq6tTKcHGKvlu2Bz8eyHxdCgBPTo9UWMKbez9IL2bE
HkaF0RrsdcsW4h9/3ukWUQVskic7M19pRCcnQDMy0hYk6gl+wgOuGTXzrgarKlQV
iKHOoWfF4hRu5DmuO1lqrxHgZm7IKXTAUYYrytL6s/APGZnMYR9NxF0tk+12V2bX
C5RrPCQIHAJrLjbTm0A7/dU/hxZACsVs4A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:37 2026 by rpki-client