Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91194420-e2df-423e-a715-069836ed02a7/6017fefb-b5f7-3d35-82a5-c5abe7b0ff35.roa
File:                     6017fefb-b5f7-3d35-82a5-c5abe7b0ff35.roa (raw, json)
Hash identifier:          xrxqMOKgmb6wKk1Jk6SmjI7YCLdQ7JBVTd7YK/viLo8=
Subject key identifier:   C8:30:9D:DC:68:73:EB:60:AF:7B:53:0F:67:F3:4E:2D:18:B9:56:F5
Certificate issuer:       /CN=91194420-e2df-423e-a715-069836ed02a7
Certificate serial:       010D0C9F4328584DB7704183EC85A150582F7C80
Authority key identifier: 6D:C3:6A:9A:24:DC:D9:45:6A:E4:D1:BC:50:33:15:F5:2E:A9:C3:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91194420-e2df-423e-a715-069836ed02a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91194420-e2df-423e-a715-069836ed02a7/6017fefb-b5f7-3d35-82a5-c5abe7b0ff35.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     401932
IP address blocks:        2602:f59d:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91194420-e2df-423e-a715-069836ed02a7/91194420-e2df-423e-a715-069836ed02a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91194420-e2df-423e-a715-069836ed02a7/91194420-e2df-423e-a715-069836ed02a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91194420-e2df-423e-a715-069836ed02a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:41:83:ec:85:a1:50:58:2f:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91194420-e2df-423e-a715-069836ed02a7
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=d71d5af4-c297-4cdb-a4ad-3bbb83588e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7f:db:90:11:14:9b:18:d9:d6:24:df:3f:03:
                    55:35:9b:bf:af:5f:d9:7b:fe:87:44:be:07:56:bb:
                    72:70:2c:bb:12:5a:0f:97:bd:19:b4:c0:59:79:94:
                    87:a5:b1:f0:b2:fc:fa:31:0a:5e:0c:2e:1d:6b:8d:
                    4b:d0:e5:3d:84:57:60:7b:9b:9b:50:b2:40:c6:43:
                    35:bd:32:dc:6b:56:aa:51:45:1b:5e:ce:ae:55:31:
                    c5:47:99:ed:22:90:cc:27:b4:61:cd:10:ac:c6:4d:
                    69:6a:bb:4b:01:a6:1c:d7:57:fb:7b:59:43:20:0d:
                    1e:bd:06:b7:6b:12:92:49:4c:c2:b1:92:dc:4d:3e:
                    22:ce:ce:21:a0:c9:fc:fb:3c:0d:fe:04:fb:b1:d3:
                    ca:37:49:1c:8d:8a:aa:03:06:28:42:9e:70:88:d6:
                    32:4a:d6:78:3b:3c:27:71:56:0e:c7:2a:2a:2b:f1:
                    db:64:f3:27:c5:a8:30:2f:05:fd:63:79:68:df:1f:
                    e3:6b:38:9c:02:bb:28:b1:a3:32:8d:fa:de:51:af:
                    cd:19:7c:13:48:f7:89:57:74:bd:eb:36:97:2b:1b:
                    33:6b:ff:aa:30:d9:b9:67:e0:fc:2b:b4:af:e5:96:
                    9c:10:e3:ee:4e:20:a4:34:14:b1:17:76:14:0e:7e:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:30:9D:DC:68:73:EB:60:AF:7B:53:0F:67:F3:4E:2D:18:B9:56:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91194420-e2df-423e-a715-069836ed02a7/6017fefb-b5f7-3d35-82a5-c5abe7b0ff35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91194420-e2df-423e-a715-069836ed02a7/91194420-e2df-423e-a715-069836ed02a7.crl

            X509v3 Authority Key Identifier:
                keyid:6D:C3:6A:9A:24:DC:D9:45:6A:E4:D1:BC:50:33:15:F5:2E:A9:C3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91194420-e2df-423e-a715-069836ed02a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f59d:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0a:75:87:e6:c3:06:d7:5d:08:18:53:64:56:fb:fc:1c:c7:
         d4:9d:39:68:39:08:c4:70:10:bf:6b:83:08:ff:96:87:59:1b:
         b2:8b:16:c7:02:65:1e:f8:c9:06:fe:86:42:5f:b5:ee:aa:0f:
         44:d2:cb:ca:6f:01:33:71:b7:ba:d0:87:29:d6:23:25:2b:b7:
         a7:a6:81:00:37:c4:c0:de:53:e3:ed:c3:b0:92:e7:47:39:dc:
         8a:f6:d1:25:da:96:00:6b:d9:6e:00:1e:43:62:28:d0:7b:79:
         71:7e:fa:73:6a:27:7e:13:ee:8c:1d:3d:f7:81:12:0e:5e:1e:
         a4:27:9b:e8:15:a3:48:4f:d7:e0:ac:15:78:14:b6:16:36:e5:
         36:e0:5b:87:79:fa:7f:1e:c3:b2:04:0d:58:8f:da:d3:e8:da:
         fd:83:8c:ab:a0:8c:20:b7:9a:a1:d5:5e:03:0d:40:22:0b:e4:
         6d:f6:09:02:11:d2:17:0a:10:ac:46:2c:cc:30:24:7a:64:3f:
         8a:4c:53:e3:3f:9c:9f:81:ec:a1:f6:c6:3f:e4:6d:44:33:29:
         07:0c:76:fe:3b:05:8a:b3:6b:2e:e5:97:86:fd:ca:2e:6f:22:
         ab:76:02:fe:80:7f:9d:37:5b:6c:55:bf:84:8a:54:b6:e1:09:
         79:3e:15:38
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE23cEGD7IWhUFgvfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTExOTQ0MjAtZTJkZi00MjNlLWE3MTUtMDY5ODM2ZWQw
MmE3MB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
ZDcxZDVhZjQtYzI5Ny00Y2RiLWE0YWQtM2JiYjgzNTg4ZTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn/bkBEUmxjZ1iTfPwNVNZu/r1/Ze/6HRL4H
VrtycCy7EloPl70ZtMBZeZSHpbHwsvz6MQpeDC4da41L0OU9hFdge5ubULJAxkM1
vTLca1aqUUUbXs6uVTHFR5ntIpDMJ7RhzRCsxk1partLAaYc11f7e1lDIA0evQa3
axKSSUzCsZLcTT4izs4hoMn8+zwN/gT7sdPKN0kcjYqqAwYoQp5wiNYyStZ4Ozwn
cVYOxyoqK/HbZPMnxagwLwX9Y3lo3x/jazicArsosaMyjfreUa/NGXwTSPeJV3S9
6zaXKxsza/+qMNm5Z+D8K7Sv5ZacEOPuTiCkNBSxF3YUDn6AxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMgwndxoc+tgr3tTD2fzTi0YuVb1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85MTE5
NDQyMC1lMmRmLTQyM2UtYTcxNS0wNjk4MzZlZDAyYTcvNjAxN2ZlZmItYjVmNy0z
ZDM1LTgyYTUtYzVhYmU3YjBmZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTExOTQ0MjAtZTJkZi00MjNlLWE3
MTUtMDY5ODM2ZWQwMmE3LzkxMTk0NDIwLWUyZGYtNDIzZS1hNzE1LTA2OTgzNmVk
MDJhNy5jcmwwHwYDVR0jBBgwFoAUbcNqmiTc2UVq5NG8UDMV9S6pw/8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC85MTE5NDQyMC1lMmRmLTQyM2UtYTcxNS0wNjk4
MzZlZDAyYTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1nQAF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHUKdYfmwwbXXQgYU2RW+/wcx9SdOWg5CMRwEL9rgwj/lodZG7KL
FscCZR74yQb+hkJfte6qD0TSy8pvATNxt7rQhynWIyUrt6emgQA3xMDeU+Ptw7CS
50c53Ir20SXalgBr2W4AHkNiKNB7eXF++nNqJ34T7owdPfeBEg5eHqQnm+gVo0hP
1+CsFXgUthY25TbgW4d5+n8ew7IEDViP2tPo2v2DjKugjCC3mqHVXgMNQCIL5G32
CQIR0hcKEKxGLMwwJHpkP4pMU+M/nJ+B7KH2xj/kbUQzKQcMdv47BYqzay7ll4b9
yi5vIqt2Av6Af503W2xVv4SKVLbhCXk+FTg=
-----END CERTIFICATE-----
Generated at Wed May 13 06:49:51 2026 by rpki-client