Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/af551ec0-d2d2-365d-ac95-d869b4c35812.roa
File:                     af551ec0-d2d2-365d-ac95-d869b4c35812.roa (raw, json)
Hash identifier:          6n/Yf6QJ+qF5iVOEHFq6oQLL+GP3b3mPISFW3RLlkIU=
Subject key identifier:   59:16:FB:FA:35:BB:58:F4:92:99:65:FB:0A:74:BE:4C:E1:5D:DC:F7
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584D0A778C7BD59D51AFF6C507A0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/af551ec0-d2d2-365d-ac95-d869b4c35812.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     16740
IP address blocks:        2602:f5c1:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:8c:7b:d5:9d:51:af:f6:c5:07:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=6f94985f-e00e-47b8-8d05-744af0ff1387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:6c:1e:c7:53:24:5d:4e:f0:5b:94:06:35:
                    4f:bf:83:04:a9:60:cf:19:f6:8e:6c:70:3a:8c:40:
                    e1:13:5c:4c:2e:49:29:71:48:f0:a9:2b:df:b7:a0:
                    3c:0f:86:7c:34:9f:bf:7f:ca:1a:00:fd:1f:bc:78:
                    42:fa:f1:fb:ed:df:26:98:e3:e6:f7:e8:8e:ce:69:
                    c2:6d:46:20:2f:80:b9:98:da:d5:79:ee:38:bb:7f:
                    d8:f6:bd:ca:26:45:e4:d4:7a:53:b9:90:ec:dd:75:
                    9d:43:5e:e2:82:2b:ab:b6:2b:e9:45:2f:23:ad:32:
                    58:e5:48:e2:e7:aa:31:f6:62:0f:a9:7e:9b:d3:12:
                    2e:5b:c7:96:74:a4:4d:af:fc:23:f6:31:97:e9:2b:
                    b0:ee:aa:96:4c:66:1c:db:1b:5e:62:33:ed:1b:cb:
                    50:1a:7f:1b:e3:cc:27:22:3f:46:18:f4:33:79:e3:
                    4d:a8:9e:0a:f8:0d:43:16:52:a5:db:17:58:ee:dd:
                    1e:e1:3a:ee:3a:72:99:5e:b3:da:c0:7c:98:bc:da:
                    77:9f:12:ca:9c:8f:eb:6b:b1:b8:fc:44:a5:eb:08:
                    49:9e:e0:69:b5:bc:ba:7e:35:ed:f9:92:ac:b5:b5:
                    b5:5e:4a:8a:17:e5:93:64:52:c4:88:d1:69:f0:8a:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:16:FB:FA:35:BB:58:F4:92:99:65:FB:0A:74:BE:4C:E1:5D:DC:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/af551ec0-d2d2-365d-ac95-d869b4c35812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:65:22:fb:5f:45:ef:67:50:e5:89:db:71:6a:5b:63:a2:ca:
         9c:1e:7f:7c:f8:a8:b0:9b:bb:bd:68:97:62:c5:d4:6d:d0:db:
         f6:41:70:29:65:90:32:6c:39:8e:53:33:4b:a0:34:11:42:da:
         48:f8:20:6a:4e:41:0a:01:6b:25:28:5d:56:cb:7f:b0:c0:27:
         9d:64:0f:d3:02:30:2f:c7:fe:92:19:2f:0e:e5:1b:54:07:38:
         d4:d3:a5:c1:06:65:1c:d6:43:c9:9e:fb:5b:44:0e:9b:38:86:
         e8:b4:c9:02:ab:b2:a9:40:ed:74:c6:46:a1:cf:ec:61:55:fe:
         48:c6:b5:42:54:80:96:4f:cd:ac:6a:9b:df:bd:78:80:b3:bf:
         f0:79:3c:5d:96:42:05:cd:de:0a:51:62:53:29:3c:b8:6c:bf:
         bd:63:ee:09:35:07:7e:5d:2d:f2:11:02:37:bb:00:21:01:54:
         22:42:1b:e9:f0:28:84:7f:f5:80:d1:4f:61:f1:9a:41:ad:6a:
         12:6e:33:5d:5c:02:e6:82:ab:f3:29:a6:55:23:78:3c:85:bf:
         dd:aa:02:25:9e:f0:0e:43:29:64:21:75:39:a0:7d:21:8d:75:
         19:0f:06:35:11:72:02:52:b0:37:5d:80:1b:18:b1:f4:ec:a6:
         4f:d7:91:fd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0Kd4x71Z1Rr/bFB6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0
MjZmMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk
NmY5NDk4NWYtZTAwZS00N2I4LThkMDUtNzQ0YWYwZmYxMzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyNsHsdTJF1O8FuUBjVPv4MEqWDPGfaObHA6
jEDhE1xMLkkpcUjwqSvft6A8D4Z8NJ+/f8oaAP0fvHhC+vH77d8mmOPm9+iOzmnC
bUYgL4C5mNrVee44u3/Y9r3KJkXk1HpTuZDs3XWdQ17igiurtivpRS8jrTJY5Uji
56ox9mIPqX6b0xIuW8eWdKRNr/wj9jGX6Suw7qqWTGYc2xteYjPtG8tQGn8b48wn
Ij9GGPQzeeNNqJ4K+A1DFlKl2xdY7t0e4TruOnKZXrPawHyYvNp3nxLKnI/ra7G4
/ESl6whJnuBptby6fjXt+ZKstbW1XkqKF+WTZFLEiNFp8IqJBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFkW+/o1u1j0kpll+wp0vkzhXdz3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh
MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvYWY1NTFlYzAtZDJkMi0z
NjVkLWFjOTUtZDg2OWI0YzM1ODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj
OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh
NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw
N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQAI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEtlIvtfRe9nUOWJ23FqW2Oiypwef3z4qLCbu71ol2LF1G3Q2/ZB
cCllkDJsOY5TM0ugNBFC2kj4IGpOQQoBayUoXVbLf7DAJ51kD9MCMC/H/pIZLw7l
G1QHONTTpcEGZRzWQ8me+1tEDps4hui0yQKrsqlA7XTGRqHP7GFV/kjGtUJUgJZP
zaxqm9+9eICzv/B5PF2WQgXN3gpRYlMpPLhsv71j7gk1B35dLfIRAje7ACEBVCJC
G+nwKIR/9YDRT2HxmkGtahJuM11cAuaCq/MpplUjeDyFv92qAiWe8A5DKWQhdTmg
fSGNdRkPBjURcgJSsDddgBsYsfTspk/Xkf0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:42 2026 by rpki-client