Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/62e51151-f56c-3a38-b24e-40421c70b31d.roa
File:                     62e51151-f56c-3a38-b24e-40421c70b31d.roa (raw, json)
Hash identifier:          m69txrgDuB3KaPf7h3SBMEEVAj6C44PzW/s6UxawCYU=
Subject key identifier:   9A:88:58:DC:59:AE:D3:7D:15:F1:72:D7:DF:86:04:08:87:4A:5A:10
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584D4D5A55D555FFE359A29ADA60
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/62e51151-f56c-3a38-b24e-40421c70b31d.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        2605:84c0:cc2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:55:d5:55:ff:e3:59:a2:9a:da:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=c8c93019-ee80-4127-b21e-bf431bd01668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5d:be:0b:45:48:1e:4a:65:4c:26:0d:8d:49:
                    04:0d:ee:e4:64:9c:14:57:c8:0c:9d:ae:74:18:d3:
                    6b:ea:b8:5a:b3:46:4b:65:0c:d2:fb:95:63:f3:f3:
                    72:1f:51:42:0a:d0:b7:1f:40:20:90:f4:c2:62:80:
                    44:0e:af:96:d4:ed:5c:43:98:bb:36:9c:2d:dc:46:
                    2e:cf:ba:84:34:1a:6d:ae:1a:05:f9:d7:aa:66:b3:
                    d6:87:82:89:dd:70:ee:8b:a6:a7:47:a8:47:06:e7:
                    06:a3:91:b7:de:8b:c9:9d:7b:36:07:06:04:42:1f:
                    5c:90:59:03:4a:3d:0c:98:5c:0e:25:2f:f4:b7:89:
                    d3:9f:b7:10:df:88:da:64:16:87:57:01:92:32:11:
                    72:99:17:b4:2b:4f:b5:27:14:d6:05:61:94:f1:8f:
                    2c:b4:ea:92:a9:31:3a:4d:7c:3e:bc:2c:20:0b:93:
                    e6:f6:d4:75:38:59:fa:3c:14:cf:e9:69:2a:97:74:
                    e7:5a:ae:ab:42:97:0a:72:d4:64:d5:27:35:0d:0a:
                    25:74:9a:e0:e9:de:c7:9d:df:45:8c:3f:2a:0f:d0:
                    a0:38:5a:6d:5a:e2:78:62:4c:f3:49:d2:79:ec:63:
                    c5:97:6e:44:28:63:4a:9d:14:d3:6e:2e:5e:71:15:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:88:58:DC:59:AE:D3:7D:15:F1:72:D7:DF:86:04:08:87:4A:5A:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/62e51151-f56c-3a38-b24e-40421c70b31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:cc2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:94:1e:36:e2:cb:73:2b:37:db:2a:c9:a8:be:67:d6:d3:
         3f:db:90:07:4f:6f:11:7d:b2:f6:e0:43:57:7b:b9:90:ee:79:
         7e:29:33:94:f8:3e:dc:13:6a:86:b5:e1:bc:dc:78:8d:80:4b:
         3b:0f:2d:79:be:aa:07:09:5a:ed:97:5f:90:0d:c8:f5:4c:d2:
         b4:34:24:da:0a:1c:3e:cf:e8:65:97:ef:6d:53:9d:c3:6a:82:
         3d:53:2f:8e:7b:7e:d9:93:ac:30:d8:1e:b4:56:5a:22:16:63:
         f1:4e:0c:03:0f:a7:3c:58:6b:1d:77:54:8c:97:b4:a5:09:09:
         97:0c:48:88:71:04:a6:c6:15:dc:02:df:f8:2b:a7:c5:51:ee:
         05:68:4d:f0:23:fc:1f:89:1c:99:7e:81:89:90:81:01:d9:15:
         84:8f:e8:93:5f:31:42:a0:43:06:a3:30:99:80:d9:d1:ef:e3:
         b4:8f:fb:ff:43:15:76:03:d7:d4:58:2d:5c:71:89:aa:dd:49:
         8f:22:ff:53:ad:1a:ba:5d:30:bf:2a:96:1f:9e:a4:c5:4e:7f:
         86:ef:0f:2d:ad:c0:a3:02:9b:b4:73:a3:c3:49:ea:ad:9d:ea:
         5f:15:ef:c0:ba:81:ca:77:e1:c3:59:e2:cd:6b:e7:00:d2:f0:
         c7:b9:d1:3c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1NWlXVVf/jWaKa2mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3
MDBjMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
YzhjOTMwMTktZWU4MC00MTI3LWIyMWUtYmY0MzFiZDAxNjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh12+C0VIHkplTCYNjUkEDe7kZJwUV8gMna50
GNNr6rhas0ZLZQzS+5Vj8/NyH1FCCtC3H0AgkPTCYoBEDq+W1O1cQ5i7Npwt3EYu
z7qENBptrhoF+deqZrPWh4KJ3XDui6anR6hHBucGo5G33ovJnXs2BwYEQh9ckFkD
Sj0MmFwOJS/0t4nTn7cQ34jaZBaHVwGSMhFymRe0K0+1JxTWBWGU8Y8stOqSqTE6
TXw+vCwgC5Pm9tR1OFn6PBTP6Wkql3TnWq6rQpcKctRk1Sc1DQoldJrg6d7Hnd9F
jD8qD9CgOFptWuJ4YkzzSdJ57GPFl25EKGNKnRTTbi5ecRWfeQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJqIWNxZrtN9FfFy19+GBAiHSloQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3
MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvNjJlNTExNTEtZjU2Yy0z
YTM4LWIyNGUtNDA0MjFjNzBiMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0
MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2
NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy
N2E5NjcwMGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWEwAzC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACralB424stzKzfbKsmovmfW0z/bkAdPbxF9svbgQ1d7uZDueX4p
M5T4PtwTaoa14bzceI2ASzsPLXm+qgcJWu2XX5ANyPVM0rQ0JNoKHD7P6GWX721T
ncNqgj1TL457ftmTrDDYHrRWWiIWY/FODAMPpzxYax13VIyXtKUJCZcMSIhxBKbG
FdwC3/grp8VR7gVoTfAj/B+JHJl+gYmQgQHZFYSP6JNfMUKgQwajMJmA2dHv47SP
+/9DFXYD19RYLVxxiardSY8i/1OtGrpdML8qlh+epMVOf4bvDy2twKMCm7Rzo8NJ
6q2d6l8V78C6gcp34cNZ4s1r5wDS8Me50Tw=
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:31:56 2026 by rpki-client