Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8c93e15-eeb5-4526-a19f-a7387b259725/d9691a95-cce5-3856-9b84-13995f260c20.roa
File:                     d9691a95-cce5-3856-9b84-13995f260c20.roa (raw, json)
Hash identifier:          96gSOLwMidB8qq4HkgygRM0H/ng+2k30hLYn9sgE1n8=
Subject key identifier:   D3:91:B1:3C:90:41:32:1E:B4:B9:CD:99:46:05:D5:8F:23:1E:00:E2
Certificate issuer:       /CN=c8c93e15-eeb5-4526-a19f-a7387b259725
Certificate serial:       010D0C9F4328584DB4A56EC39BBC9C96FD26F780
Authority key identifier: AD:B1:ED:0D:CF:31:68:66:5E:7C:FF:6E:C2:BA:7A:0D:E7:47:2D:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8c93e15-eeb5-4526-a19f-a7387b259725.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8c93e15-eeb5-4526-a19f-a7387b259725/d9691a95-cce5-3856-9b84-13995f260c20.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54591
IP address blocks:        2602:f577::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8c93e15-eeb5-4526-a19f-a7387b259725/c8c93e15-eeb5-4526-a19f-a7387b259725.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8c93e15-eeb5-4526-a19f-a7387b259725/c8c93e15-eeb5-4526-a19f-a7387b259725.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8c93e15-eeb5-4526-a19f-a7387b259725.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:6e:c3:9b:bc:9c:96:fd:26:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c93e15-eeb5-4526-a19f-a7387b259725
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=1a157056-0b09-45ed-8c1e-0aa6386f8749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b1:8e:0b:d1:bc:c8:77:0b:0e:54:12:70:08:
                    3c:5a:19:d5:6a:56:4d:2d:d8:bf:b7:aa:f8:8a:8e:
                    4b:39:84:1c:8a:9c:01:ec:8a:0b:46:b4:b4:09:ff:
                    a2:36:5d:7d:3b:07:3c:0f:e0:35:e7:be:03:ef:25:
                    5f:89:28:39:fb:b3:57:e0:2a:7e:3b:5b:30:5b:8d:
                    8b:21:36:5d:80:e4:f9:b0:a7:e0:df:26:40:d5:14:
                    c8:13:04:d9:64:23:02:75:0b:97:06:75:c1:11:7c:
                    c2:a8:3d:4d:72:d7:79:5c:12:26:f2:57:1a:2a:31:
                    ca:5b:9b:35:2e:2f:58:f2:56:57:6a:e5:e6:71:7f:
                    52:90:5c:f9:36:bf:1e:4b:12:c4:f3:97:48:da:1c:
                    63:1d:5e:08:7c:a0:48:3d:44:fa:72:31:0c:c9:11:
                    48:cf:8f:78:15:37:6a:a7:59:c1:c1:41:cc:cf:f1:
                    7e:d6:cf:94:4b:19:7a:b5:0b:a2:c4:0b:0c:cb:d9:
                    d6:f1:d5:8d:d9:95:c5:b5:f6:90:d9:5f:b8:da:11:
                    06:4d:b5:e8:89:6d:3b:66:1b:7c:d4:d5:24:8e:fe:
                    92:75:63:90:aa:b7:08:01:b3:f8:0f:00:1e:2e:ec:
                    91:d4:78:b9:59:eb:0f:79:42:a6:d1:8a:00:a8:ea:
                    98:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:91:B1:3C:90:41:32:1E:B4:B9:CD:99:46:05:D5:8F:23:1E:00:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8c93e15-eeb5-4526-a19f-a7387b259725/d9691a95-cce5-3856-9b84-13995f260c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8c93e15-eeb5-4526-a19f-a7387b259725/c8c93e15-eeb5-4526-a19f-a7387b259725.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:ED:0D:CF:31:68:66:5E:7C:FF:6E:C2:BA:7A:0D:E7:47:2D:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8c93e15-eeb5-4526-a19f-a7387b259725.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f577::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:29:ed:13:52:57:92:75:0e:e6:2c:df:1f:5f:83:35:c8:a9:
         e8:9e:97:ad:18:97:8a:70:e5:36:26:b7:47:f8:6c:6c:fc:f9:
         5f:2d:06:a3:98:7b:7e:34:e7:a1:4f:5f:1e:86:84:53:e6:40:
         30:5a:0b:c3:c4:a1:15:72:a8:35:f3:3a:f7:a6:58:d0:65:d3:
         2e:9b:bd:12:93:63:9f:99:88:10:65:34:b0:88:a7:aa:cb:3a:
         b6:43:b1:32:8f:f8:e6:d4:05:35:e1:b8:72:06:75:98:fa:a8:
         78:19:7e:bf:f6:4c:90:ec:c6:ab:eb:df:fc:a4:7f:88:d1:60:
         13:7c:6e:05:69:61:b6:35:62:05:f8:f1:ad:c3:ca:36:83:e4:
         82:f0:e5:6a:0d:b1:b4:74:df:f7:db:86:bf:bc:ef:0f:5a:3b:
         4d:4d:1e:e3:b9:70:1f:a2:c9:f2:99:ea:a6:63:24:86:1b:38:
         64:7f:0b:91:d6:28:df:42:32:19:6a:1d:74:a0:48:7f:7c:cf:
         ce:c2:3e:ca:75:6e:29:68:4a:c5:d3:53:e0:b4:87:d3:b1:99:
         b4:a7:1d:39:e1:87:33:1b:87:dd:ba:6a:a1:7b:e8:f5:56:dc:
         d6:bf:3c:62:11:65:7e:19:29:60:59:88:48:92:c1:c5:63:0a:
         51:31:dc:e0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE20pW7Dm7yclv0m94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzhjOTNlMTUtZWViNS00NTI2LWExOWYtYTczODdiMjU5
NzI1MB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
MWExNTcwNTYtMGIwOS00NWVkLThjMWUtMGFhNjM4NmY4NzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbGOC9G8yHcLDlQScAg8WhnValZNLdi/t6r4
io5LOYQcipwB7IoLRrS0Cf+iNl19Owc8D+A1574D7yVfiSg5+7NX4Cp+O1swW42L
ITZdgOT5sKfg3yZA1RTIEwTZZCMCdQuXBnXBEXzCqD1Nctd5XBIm8lcaKjHKW5s1
Li9Y8lZXauXmcX9SkFz5Nr8eSxLE85dI2hxjHV4IfKBIPUT6cjEMyRFIz494FTdq
p1nBwUHMz/F+1s+USxl6tQuixAsMy9nW8dWN2ZXFtfaQ2V+42hEGTbXoiW07Zht8
1NUkjv6SdWOQqrcIAbP4DwAeLuyR1Hi5WesPeUKm0YoAqOqYFwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNORsTyQQTIetLnNmUYF1Y8jHgDiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jOGM5
M2UxNS1lZWI1LTQ1MjYtYTE5Zi1hNzM4N2IyNTk3MjUvZDk2OTFhOTUtY2NlNS0z
ODU2LTliODQtMTM5OTVmMjYwYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzhjOTNlMTUtZWViNS00NTI2LWEx
OWYtYTczODdiMjU5NzI1L2M4YzkzZTE1LWVlYjUtNDUyNi1hMTlmLWE3Mzg3YjI1
OTcyNS5jcmwwHwYDVR0jBBgwFoAUrbHtDc8xaGZefP9uwrp6DedHLYIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jOGM5M2UxNS1lZWI1LTQ1MjYtYTE5Zi1hNzM4
N2IyNTk3MjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1dwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOyntE1JXknUO5izfH1+DNcip6J6XrRiXinDlNia3R/hsbPz5Xy0G
o5h7fjTnoU9fHoaEU+ZAMFoLw8ShFXKoNfM696ZY0GXTLpu9EpNjn5mIEGU0sIin
qss6tkOxMo/45tQFNeG4cgZ1mPqoeBl+v/ZMkOzGq+vf/KR/iNFgE3xuBWlhtjVi
BfjxrcPKNoPkgvDlag2xtHTf99uGv7zvD1o7TU0e47lwH6LJ8pnqpmMkhhs4ZH8L
kdYo30IyGWoddKBIf3zPzsI+ynVuKWhKxdNT4LSH07GZtKcdOeGHMxuH3bpqoXvo
9Vbc1r88YhFlfhkpYFmISJLBxWMKUTHc4A==
-----END CERTIFICATE-----
Generated at Wed May 13 16:09:10 2026 by rpki-client