Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/1c25c1f7-cc69-3865-a774-e3f443680e2a.roa
File:                     1c25c1f7-cc69-3865-a774-e3f443680e2a.roa (raw, json)
Hash identifier:          4RLqrjzegdiPC2fxPdttwvD1Tb3tC8nEZaIvT/qJxM4=
Subject key identifier:   E0:58:AF:23:77:16:30:69:1B:12:A6:06:A6:61:BD:92:8E:EC:3D:02
Certificate issuer:       /CN=0c50e3d6-0902-477b-85fe-37d2d7c97e30
Certificate serial:       010D0C9F4328584D237A0EF9EDDE34575479F000
Authority key identifier: C1:36:E9:3C:D0:03:48:7A:EC:54:B6:CB:90:1A:24:7C:3E:D8:ED:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/1c25c1f7-cc69-3865-a774-e3f443680e2a.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     395648
IP address blocks:        2602:fac9::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/0c50e3d6-0902-477b-85fe-37d2d7c97e30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/0c50e3d6-0902-477b-85fe-37d2d7c97e30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:0e:f9:ed:de:34:57:54:79:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c50e3d6-0902-477b-85fe-37d2d7c97e30
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=b4ecd123-663a-4c29-a174-2c71f33e0965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:cc:ce:a7:00:f3:4b:1c:eb:7c:fa:4c:0c:
                    0d:ab:14:75:4f:47:9c:48:95:ec:cc:0d:6f:43:4d:
                    11:f1:bf:cf:71:d6:65:38:64:57:87:5a:a8:75:89:
                    3e:0e:9f:a9:2d:8d:f7:27:b6:09:87:ac:a4:da:0d:
                    e9:a8:09:bf:16:95:8d:af:8c:6c:ba:2d:88:f1:e2:
                    4d:8c:65:0b:1f:12:26:f4:22:8b:69:ac:ea:0c:6d:
                    49:38:cb:a5:5a:6f:13:8f:d9:01:39:57:6f:48:c6:
                    d6:58:23:7a:8d:c1:a6:57:08:bc:48:55:c7:50:6b:
                    d2:7d:22:59:97:9f:07:99:9f:6d:8b:93:38:36:84:
                    e2:51:2d:1f:22:73:dc:8e:ca:1e:e9:0f:e2:cb:49:
                    7d:01:b0:a2:49:ad:eb:8b:d8:fa:a2:b6:2e:3e:1b:
                    21:b3:3d:0e:c1:12:2e:52:1d:84:5e:1e:b8:bd:43:
                    52:64:34:05:de:10:3b:e4:6f:ff:68:4a:84:2e:02:
                    8f:cf:f8:59:a4:47:a7:8e:26:67:0b:ed:a0:db:19:
                    6c:06:af:a8:2d:bf:f4:8e:b0:f5:b9:e3:41:9a:d8:
                    1e:6d:16:71:0f:6f:53:e4:ae:c7:95:cc:66:85:cf:
                    f3:3a:5c:60:e3:a0:1b:47:54:36:97:14:c7:55:d4:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:58:AF:23:77:16:30:69:1B:12:A6:06:A6:61:BD:92:8E:EC:3D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/1c25c1f7-cc69-3865-a774-e3f443680e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/0c50e3d6-0902-477b-85fe-37d2d7c97e30.crl

            X509v3 Authority Key Identifier:
                keyid:C1:36:E9:3C:D0:03:48:7A:EC:54:B6:CB:90:1A:24:7C:3E:D8:ED:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac9::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f8:9b:d3:ec:e3:9b:4c:8e:a1:a9:de:78:46:c0:ca:1e:74:
         1a:a7:4c:e7:1c:4e:01:44:f9:18:ff:db:8f:fe:b8:7c:d4:76:
         df:77:02:e9:81:06:bd:8b:b8:65:27:40:56:74:57:01:bd:03:
         bd:ea:80:4f:9d:dc:7e:b6:10:47:99:fb:7c:5a:43:0d:77:3b:
         fc:5a:1d:65:ab:0f:67:99:12:9e:ea:a2:53:19:c0:db:ff:d2:
         eb:1e:97:9e:cf:b4:53:45:d4:c1:35:65:2f:53:94:7b:22:56:
         6b:34:57:ca:30:38:74:e3:84:48:c8:93:d5:99:08:f9:dc:20:
         72:d2:cb:ff:fd:df:73:52:1f:bc:eb:c8:10:e7:dd:08:6a:f8:
         67:7a:5c:32:63:97:e2:34:d0:2b:c6:19:44:9d:be:bd:6d:a8:
         ce:1f:ad:e7:2e:c2:e2:eb:6b:c6:36:94:54:9d:54:0c:01:41:
         11:ca:b4:5d:6a:b6:1f:92:d1:d8:ef:77:4c:8c:a3:06:39:b0:
         52:42:6c:fc:eb:7e:6b:ce:5a:1e:75:4d:f0:1c:89:bc:c2:bc:
         4a:30:8f:6f:a4:bf:4b:81:9f:69:a1:48:88:2c:af:6e:00:99:
         94:6c:08:cd:1c:55:f0:e5:c0:d9:68:ee:c7:e6:96:b0:59:74:
         5e:37:b3:d9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0jeg757d40V1R58AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM1MGUzZDYtMDkwMi00NzdiLTg1ZmUtMzdkMmQ3Yzk3
ZTMwMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
YjRlY2QxMjMtNjYzYS00YzI5LWExNzQtMmM3MWYzM2UwOTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiHMzqcA80sc63z6TAwNqxR1T0ecSJXszA1v
Q00R8b/PcdZlOGRXh1qodYk+Dp+pLY33J7YJh6yk2g3pqAm/FpWNr4xsui2I8eJN
jGULHxIm9CKLaazqDG1JOMulWm8Tj9kBOVdvSMbWWCN6jcGmVwi8SFXHUGvSfSJZ
l58HmZ9ti5M4NoTiUS0fInPcjsoe6Q/iy0l9AbCiSa3ri9j6orYuPhshsz0OwRIu
Uh2EXh64vUNSZDQF3hA75G//aEqELgKPz/hZpEenjiZnC+2g2xlsBq+oLb/0jrD1
ueNBmtgebRZxD29T5K7Hlcxmhc/zOlxg46AbR1Q2lxTHVdSUfwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOBYryN3FjBpGxKmBqZhvZKO7D0CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzUw
ZTNkNi0wOTAyLTQ3N2ItODVmZS0zN2QyZDdjOTdlMzAvMWMyNWMxZjctY2M2OS0z
ODY1LWE3NzQtZTNmNDQzNjgwZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM1MGUzZDYtMDkwMi00NzdiLTg1
ZmUtMzdkMmQ3Yzk3ZTMwLzBjNTBlM2Q2LTA5MDItNDc3Yi04NWZlLTM3ZDJkN2M5
N2UzMC5jcmwwHwYDVR0jBBgwFoAUwTbpPNADSHrsVLbLkBokfD7Y7acwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzUwZTNkNi0wOTAyLTQ3N2ItODVmZS0zN2Qy
ZDdjOTdlMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6yQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAe/ib0+zjm0yOoaneeEbAyh50GqdM5xxOAUT5GP/bj/64fNR233cC
6YEGvYu4ZSdAVnRXAb0DveqAT53cfrYQR5n7fFpDDXc7/FodZasPZ5kSnuqiUxnA
2//S6x6Xns+0U0XUwTVlL1OUeyJWazRXyjA4dOOESMiT1ZkI+dwgctLL//3fc1If
vOvIEOfdCGr4Z3pcMmOX4jTQK8YZRJ2+vW2ozh+t5y7C4utrxjaUVJ1UDAFBEcq0
XWq2H5LR2O93TIyjBjmwUkJs/Ot+a85aHnVN8ByJvMK8SjCPb6S/S4GfaaFIiCyv
bgCZlGwIzRxV8OXA2Wjux+aWsFl0Xjez2Q==
-----END CERTIFICATE-----
Generated at Sun Mar 22 07:39:08 2026 by rpki-client