Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6b68391d-edd1-3765-936c-281608f3a8db.roa
File:                     6b68391d-edd1-3765-936c-281608f3a8db.roa (raw, json)
Hash identifier:          +cbkGq8sw8z+Qe2pROUHwyA/cRp+LxDrem1IPCHi0nM=
Subject key identifier:   81:3E:20:A7:E0:57:40:92:BB:3A:A8:6F:DC:C9:FC:99:4A:23:15:03
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D95EFF8F4C595044E87EC3860
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6b68391d-edd1-3765-936c-281608f3a8db.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     20001
IP address blocks:        2602:107:4e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f8:f4:c5:95:04:4e:87:ec:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=a50440b1-4f63-4252-8e9e-f2ac4b57ace7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5a:46:af:2e:ad:5f:27:48:b9:84:cd:db:6b:
                    55:d1:20:20:09:19:ff:c8:0d:31:c0:7a:60:88:17:
                    c0:ab:64:79:96:59:23:6a:a7:d8:6a:01:61:8f:dc:
                    d4:de:86:40:7b:70:1a:71:b8:d1:98:97:89:84:55:
                    b9:91:4b:95:13:94:d4:1c:04:69:02:f0:10:26:21:
                    16:7b:1f:74:d1:f7:fc:bc:a3:2c:b9:e4:16:e4:15:
                    0f:d0:e8:06:69:9a:22:6c:86:4a:2b:22:87:2d:62:
                    3f:2e:8b:11:25:8d:ee:b1:bc:0f:52:1c:23:4b:08:
                    80:34:90:75:80:8c:6d:2f:bc:82:d6:6d:28:01:44:
                    c8:b6:ce:35:f4:c4:7a:2a:7d:23:ab:9d:d6:16:b9:
                    29:11:db:e4:6a:e0:74:66:bd:2d:f5:dc:85:db:30:
                    4e:6d:81:28:f3:9e:0b:2d:3c:9d:ca:b3:f3:92:4d:
                    f7:7e:23:26:1f:4c:f3:48:4a:c5:39:f0:87:0e:a3:
                    82:bd:fd:cc:ff:0d:34:88:b6:20:04:a0:7d:6a:1b:
                    1b:e1:9d:e8:fc:ba:9d:dc:1a:e4:88:c4:19:83:65:
                    6b:d3:be:7f:50:f1:34:02:13:1a:6a:98:03:30:e2:
                    38:73:83:69:e2:70:0e:a6:72:21:ce:f9:a3:bf:55:
                    47:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3E:20:A7:E0:57:40:92:BB:3A:A8:6F:DC:C9:FC:99:4A:23:15:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6b68391d-edd1-3765-936c-281608f3a8db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:4e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:82:32:32:8a:d3:a8:00:af:08:f2:5c:e3:2a:95:9c:2f:29:
         b0:d0:00:de:1b:2b:d3:8e:38:3b:1e:be:d6:77:d8:37:b3:97:
         ff:48:52:51:f2:ba:13:75:47:1d:5a:29:fa:07:d9:a4:67:53:
         19:f8:e9:e5:f8:40:c8:e4:41:50:6a:8a:42:3b:e2:b5:00:64:
         53:0a:86:ed:59:c1:e2:2d:83:dd:8d:11:d4:aa:cf:f2:c1:78:
         07:b4:79:32:56:2e:78:5b:18:a3:1f:92:45:0b:bf:1c:26:e5:
         be:6e:07:2c:bc:07:54:69:a5:e3:cc:20:12:5c:c5:75:58:e8:
         37:24:78:ed:42:6f:5d:05:e9:3e:b0:2c:9b:93:1b:11:30:ac:
         f9:08:1f:b9:2e:3c:b7:a6:4d:ae:c9:52:2f:93:ad:33:c5:ea:
         4a:a0:b0:95:26:fc:dd:17:4b:a0:70:d5:6f:36:77:d9:7a:37:
         18:f4:80:2f:4e:30:67:42:c6:db:af:c1:c0:d3:20:75:bf:fe:
         30:c7:a9:b9:92:39:cc:3b:72:3f:30:02:5a:4a:9d:df:fe:6c:
         46:4b:82:c8:57:66:f8:91:06:c9:71:06:2a:dc:c1:dc:c8:15:
         21:75:4e:8c:c5:d3:f1:70:42:61:e7:19:c0:2a:fe:f4:db:48:
         19:fb:78:09
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2V7/j0xZUETofsOGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
YTUwNDQwYjEtNGY2My00MjUyLThlOWUtZjJhYzRiNTdhY2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFpGry6tXydIuYTN22tV0SAgCRn/yA0xwHpg
iBfAq2R5llkjaqfYagFhj9zU3oZAe3AacbjRmJeJhFW5kUuVE5TUHARpAvAQJiEW
ex900ff8vKMsueQW5BUP0OgGaZoibIZKKyKHLWI/LosRJY3usbwPUhwjSwiANJB1
gIxtL7yC1m0oAUTIts419MR6Kn0jq53WFrkpEdvkauB0Zr0t9dyF2zBObYEo854L
LTydyrPzkk33fiMmH0zzSErFOfCHDqOCvf3M/w00iLYgBKB9ahsb4Z3o/Lqd3Brk
iMQZg2Vr075/UPE0AhMaapgDMOI4c4Np4nAOpnIhzvmjv1VH8wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIE+IKfgV0CSuzqob9zJ/JlKIxUDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNmI2ODM5MWQtZWRkMS0z
NzY1LTkzNmMtMjgxNjA4ZjNhOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIBB04w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASIIyMorTqACvCPJc4yqVnC8psNAA3hsr0444Ox6+1nfYN7OX/0hS
UfK6E3VHHVop+gfZpGdTGfjp5fhAyORBUGqKQjvitQBkUwqG7VnB4i2D3Y0R1KrP
8sF4B7R5MlYueFsYox+SRQu/HCblvm4HLLwHVGml48wgElzFdVjoNyR47UJvXQXp
PrAsm5MbETCs+QgfuS48t6ZNrslSL5OtM8XqSqCwlSb83RdLoHDVbzZ32Xo3GPSA
L04wZ0LG26/BwNMgdb/+MMepuZI5zDtyPzACWkqd3/5sRkuCyFdm+JEGyXEGKtzB
3MgVIXVOjMXT8XBCYecZwCr+9NtIGft4CQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:19:57 2026 by rpki-client