Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/debfb3c3-da88-39dc-b565-23094d966451.roa
File:                     debfb3c3-da88-39dc-b565-23094d966451.roa (raw, json)
Hash identifier:          BQcbiUE/GtlDWBzuijUlLJoQtGh7jcvwbOwEYibZtwM=
Subject key identifier:   A4:EC:4E:44:FC:C7:EA:57:B0:C2:6F:B8:08:31:8B:94:0F:DB:D6:E0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB48F5E70164BF19415A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/debfb3c3-da88-39dc-b565-23094d966451.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20001
IP address blocks:        2602:107:4a10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:48:f5:e7:01:64:bf:19:41:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=ae2ae970-7a4e-4b3a-b7e5-02a4bd5a893d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:e1:0d:e3:d2:ca:66:7d:f7:3b:6f:6e:a6:
                    d1:9f:cd:31:ba:73:82:6f:8d:81:57:82:3a:ba:b7:
                    23:ec:19:66:2b:2b:0e:3a:8f:4f:43:de:9d:9c:4b:
                    e5:d7:77:79:e2:6a:5b:ec:12:4e:74:3a:b5:c0:c7:
                    db:b8:0e:68:ad:90:ea:5f:95:cc:c8:41:9c:8b:48:
                    a7:66:a0:83:4e:6a:f7:bf:71:91:c8:a9:60:dd:32:
                    cd:f4:2e:cb:16:6a:e5:53:0f:52:f6:42:9d:08:cb:
                    e6:af:23:d7:c1:c6:a3:99:2c:9c:65:53:b9:cb:3a:
                    b0:48:3c:b9:35:6d:f3:0e:98:c8:2c:ef:1b:b4:3c:
                    10:a8:4a:be:4e:3d:3d:79:19:96:94:e2:ba:f1:7d:
                    51:a5:31:db:42:6b:07:eb:2b:53:6e:c8:f6:b0:98:
                    e9:ec:e5:be:30:2f:fd:1f:60:4a:98:cc:22:0d:8c:
                    cc:10:fa:3e:21:c1:cd:4a:5b:d4:06:1f:c6:7c:12:
                    5f:9a:d1:aa:5b:c1:6d:cd:b5:53:f6:1a:ad:b7:47:
                    ef:b7:2c:f6:f0:40:73:80:96:43:08:63:55:ff:ef:
                    b5:e4:92:ee:79:94:8f:07:3f:ca:84:1b:d2:f9:6f:
                    8f:6d:ef:eb:50:9a:07:33:e9:1d:55:0f:02:8f:2c:
                    ad:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EC:4E:44:FC:C7:EA:57:B0:C2:6F:B8:08:31:8B:94:0F:DB:D6:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/debfb3c3-da88-39dc-b565-23094d966451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:4a10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d9:f2:0d:79:3a:90:83:69:4a:e2:58:9b:06:fd:9b:24:3f:
         c1:8f:2b:ac:3c:5d:c7:11:96:2a:a4:67:94:38:61:7a:d3:26:
         29:14:26:60:31:d0:b6:30:53:e1:b2:aa:5b:cd:a9:f3:ee:0f:
         75:d4:0e:f6:34:07:ed:79:d7:ce:43:22:43:cd:21:9f:7c:c0:
         09:05:87:f5:a3:dd:02:57:30:18:09:aa:49:53:d5:fb:7e:dd:
         d5:9a:84:d0:21:14:63:66:44:2d:7a:ef:1d:48:dd:47:72:c9:
         78:34:5a:2c:0c:98:13:fe:7f:3e:d7:7f:46:5a:c3:56:ee:ca:
         89:b2:06:e6:80:c2:f2:7f:4f:fd:d9:3a:d2:26:45:11:7d:88:
         a7:42:7b:42:34:ab:bb:62:66:23:78:c0:b2:b0:f3:58:9a:ce:
         ae:11:56:14:c3:02:c6:ec:76:63:c3:3b:d0:e8:7c:a2:91:9a:
         3d:57:29:6f:60:4b:06:67:60:37:85:02:4f:cb:78:4d:fa:48:
         e0:43:7e:b9:f2:90:6a:94:2b:62:4a:c6:85:c3:af:5e:6b:07:
         fa:eb:7a:8e:ea:72:df:6b:bc:60:29:99:e4:7d:5d:e3:bc:9c:
         c2:c1:1e:f9:dc:ac:79:7e:37:b0:ea:c2:dc:c7:cb:28:84:93:
         65:7d:7e:26
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Ay0j15wFkvxlBWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
YWUyYWU5NzAtN2E0ZS00YjNhLWI3ZTUtMDJhNGJkNWE4OTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW7hDePSymZ99ztvbqbRn80xunOCb42BV4I6
urcj7BlmKysOOo9PQ96dnEvl13d54mpb7BJOdDq1wMfbuA5orZDqX5XMyEGci0in
ZqCDTmr3v3GRyKlg3TLN9C7LFmrlUw9S9kKdCMvmryPXwcajmSycZVO5yzqwSDy5
NW3zDpjILO8btDwQqEq+Tj09eRmWlOK68X1RpTHbQmsH6ytTbsj2sJjp7OW+MC/9
H2BKmMwiDYzMEPo+IcHNSlvUBh/GfBJfmtGqW8FtzbVT9hqtt0fvtyz28EBzgJZD
CGNV/++15JLueZSPBz/KhBvS+W+Pbe/rUJoHM+kdVQ8CjyytHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKTsTkT8x+pXsMJvuAgxi5QP29bgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGViZmIzYzMtZGE4OC0z
OWRjLWI1NjUtMjMwOTRkOTY2NDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIBB0oQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIvZ8g15OpCDaUriWJsG/ZskP8GPK6w8XccRliqkZ5Q4YXrTJikU
JmAx0LYwU+GyqlvNqfPuD3XUDvY0B+15185DIkPNIZ98wAkFh/Wj3QJXMBgJqklT
1ft+3dWahNAhFGNmRC167x1I3UdyyXg0WiwMmBP+fz7Xf0Zaw1buyomyBuaAwvJ/
T/3ZOtImRRF9iKdCe0I0q7tiZiN4wLKw81iazq4RVhTDAsbsdmPDO9DofKKRmj1X
KW9gSwZnYDeFAk/LeE36SOBDfrnykGqUK2JKxoXDr15rB/rreo7qct9rvGApmeR9
XeO8nMLBHvncrHl+N7DqwtzHyyiEk2V9fiY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:09 2026 by rpki-client