Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa
File:                     83c6daf3-1df5-34c8-bcfe-d09465201564.roa (raw, json)
Hash identifier:          AiWGf45Nd+MmGMneIwVdbmy2rnUpsJDNQlnUlDOPEBA=
Subject key identifier:   76:9D:B0:44:C4:5E:33:2E:21:35:A1:54:8B:14:E2:24:AA:6D:0B:72
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584D5E1A68EB0F4D8C145374ED80
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     0
IP address blocks:        2602:f777::/38 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:68:eb:0f:4d:8c:14:53:74:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=cb323466-77b8-4f4f-8b1c-e97685f52327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:59:fe:12:fd:13:a3:4e:1c:31:47:da:c4:
                    07:46:d2:c2:25:a5:2e:0a:44:c7:a5:02:ef:a5:c5:
                    19:b9:47:b7:0d:db:6b:0c:f5:f6:29:17:78:cd:d1:
                    7c:0d:93:ef:6b:9a:5d:58:09:4b:b5:d8:b7:90:be:
                    4b:3b:68:8b:3c:8f:cd:0a:27:18:95:fa:28:d4:85:
                    be:9d:bb:ef:d0:b9:63:1c:fb:3b:28:02:48:84:cb:
                    dd:16:36:84:ec:3c:c5:57:0d:3f:ed:36:65:f4:bb:
                    2a:58:c4:82:a2:a1:e1:c6:b2:c4:36:8e:70:19:40:
                    63:2e:96:76:6c:c1:8f:f3:ef:82:ef:c0:a7:88:bf:
                    e9:9e:5b:44:5f:db:42:42:05:09:88:93:cf:9a:1a:
                    91:44:ac:c6:8b:ff:eb:e8:b1:f3:aa:e0:9a:e3:3b:
                    a8:a2:7c:93:af:17:59:c3:cb:46:ac:3a:83:79:a5:
                    7a:47:e3:cf:d5:0f:5f:6c:41:88:1a:63:86:a9:8d:
                    79:06:2a:2e:97:7f:b3:50:cd:f8:d5:cc:6b:55:f7:
                    cf:2b:02:e3:3e:83:f1:12:a4:53:f5:d3:29:0e:4b:
                    2c:a3:ae:eb:3e:1a:cb:60:b0:ca:c9:be:e8:06:7c:
                    3d:e2:99:ff:c3:05:19:e7:3e:8d:e4:d2:bd:70:18:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9D:B0:44:C4:5E:33:2E:21:35:A1:54:8B:14:E2:24:AA:6D:0B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f777::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:01:05:7e:6e:c7:8f:6d:db:c1:96:91:8d:85:09:86:59:9d:
         da:d9:91:3d:37:df:b8:3f:07:ee:61:a7:e1:e6:6b:e6:d0:7f:
         7d:d7:63:74:c1:ad:76:70:ee:c5:46:36:4f:f5:19:0e:62:c4:
         96:16:80:f8:9e:df:e1:95:ce:64:f0:13:5e:2b:06:31:55:54:
         c8:ed:7d:68:31:83:ed:f1:5f:0a:2c:05:a3:16:1b:9a:dc:7e:
         13:52:9e:1f:1e:db:8c:d5:6d:ed:7d:e5:c9:5d:35:b2:4f:80:
         70:2e:80:32:37:35:e0:b0:09:ed:6f:e8:a3:14:7f:f2:c8:09:
         4e:c8:42:d8:c5:7d:c1:a1:f8:d0:66:06:a1:ba:68:26:4d:00:
         2d:02:9f:e8:e1:b4:10:b7:25:84:13:d8:a3:89:86:b8:ad:89:
         d3:f9:75:2c:c4:1c:db:d8:f9:c0:d4:8d:71:00:6c:43:c8:83:
         03:a0:43:c4:15:fe:5a:b1:30:0b:b4:2f:7d:6d:b0:90:00:d4:
         ef:eb:b6:46:7b:03:13:94:f4:7d:cd:b5:95:da:c3:63:ac:b5:
         23:a0:0b:9f:7c:47:74:d1:fa:15:0c:62:8a:9e:50:6f:8e:ba:
         2d:91:52:f8:05:79:8c:3c:8c:49:9b:d6:f1:d1:43:1e:4b:03:
         7c:67:6e:44
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1eGmjrD02MFFN07YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NhYTljMjctNmI2OC00NWE4LWI3NzctNGM3YjAwNDgy
YWI4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
Y2IzMjM0NjYtNzdiOC00ZjRmLThiMWMtZTk3Njg1ZjUyMzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAondZ/hL9E6NOHDFH2sQHRtLCJaUuCkTHpQLv
pcUZuUe3DdtrDPX2KRd4zdF8DZPva5pdWAlLtdi3kL5LO2iLPI/NCicYlfoo1IW+
nbvv0LljHPs7KAJIhMvdFjaE7DzFVw0/7TZl9LsqWMSCoqHhxrLENo5wGUBjLpZ2
bMGP8++C78CniL/pnltEX9tCQgUJiJPPmhqRRKzGi//r6LHzquCa4zuoonyTrxdZ
w8tGrDqDeaV6R+PP1Q9fbEGIGmOGqY15Bioul3+zUM341cxrVffPKwLjPoPxEqRT
9dMpDksso67rPhrLYLDKyb7oBnw94pn/wwUZ5z6N5NK9cBhXrwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHadsETEXjMuITWhVIsU4iSqbQtyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jY2Fh
OWMyNy02YjY4LTQ1YTgtYjc3Ny00YzdiMDA0ODJhYjgvODNjNmRhZjMtMWRmNS0z
NGM4LWJjZmUtZDA5NDY1MjAxNTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2NhYTljMjctNmI2OC00NWE4LWI3
NzctNGM3YjAwNDgyYWI4L2NjYWE5YzI3LTZiNjgtNDVhOC1iNzc3LTRjN2IwMDQ4
MmFiOC5jcmwwHwYDVR0jBBgwFoAUokHvW5pqS+aRVpyHiqhu3FSyf4YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jY2FhOWMyNy02YjY4LTQ1YTgtYjc3Ny00Yzdi
MDA0ODJhYjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgL3dwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAlwEFfm7Hj23bwZaRjYUJhlmd2tmRPTffuD8H7mGn4eZr5tB/fddj
dMGtdnDuxUY2T/UZDmLElhaA+J7f4ZXOZPATXisGMVVUyO19aDGD7fFfCiwFoxYb
mtx+E1KeHx7bjNVt7X3lyV01sk+AcC6AMjc14LAJ7W/ooxR/8sgJTshC2MV9waH4
0GYGobpoJk0ALQKf6OG0ELclhBPYo4mGuK2J0/l1LMQc29j5wNSNcQBsQ8iDA6BD
xBX+WrEwC7QvfW2wkADU7+u2RnsDE5T0fc21ldrDY6y1I6ALn3xHdNH6FQxiip5Q
b466LZFS+AV5jDyMSZvW8dFDHksDfGduRA==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:38 2026 by rpki-client