Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/61983bb9-0584-3236-ad13-b1c76e185e20.roa
File:                     61983bb9-0584-3236-ad13-b1c76e185e20.roa (raw, json)
Hash identifier:          KjMPQc5ll+h2sYhAG9i5204ve78cPFG3u5Mg9gB+LeQ=
Subject key identifier:   A9:83:D9:59:B5:5F:86:34:66:AF:4B:80:0D:27:FA:83:8F:17:31:43
Certificate issuer:       /CN=3057ebcb-33e6-4734-8aed-0486104b2865
Certificate serial:       010D0C9F4328584E516F3AD7EF57666AC8B78E40
Authority key identifier: 83:B3:A8:7D:FF:77:85:F1:23:CF:48:8D:B9:DA:81:F6:A2:8A:0E:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/61983bb9-0584-3236-ad13-b1c76e185e20.roa
Signing time:             Sun 28 Jun 2026 04:53:06 +0000
ROA not before:           Sun 28 Jun 2026 04:53:06 +0000
ROA not after:            Fri 25 Sep 2026 18:51:12 +0000
asID:                     401673
IP address blocks:        2602:f371::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/3057ebcb-33e6-4734-8aed-0486104b2865.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/3057ebcb-33e6-4734-8aed-0486104b2865.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:6f:3a:d7:ef:57:66:6a:c8:b7:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3057ebcb-33e6-4734-8aed-0486104b2865
        Validity
            Not Before: Jun 28 04:53:06 2026 GMT
            Not After : Sep 25 18:51:12 2026 GMT
        Subject: CN=483a5a22-06bd-4ced-91b3-31c315e5831f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:e9:c2:c6:d2:56:cc:72:bd:13:96:9c:11:
                    98:a4:0d:eb:c9:cc:6c:69:55:1e:42:ae:ae:4e:41:
                    77:05:15:15:40:12:f6:b8:b5:95:05:12:79:8a:2e:
                    72:51:52:19:e0:b7:ac:a4:25:42:2a:7e:e4:e9:53:
                    fe:d3:56:d2:fc:fd:aa:d5:34:b6:9a:85:d5:08:f0:
                    00:8b:17:50:89:38:cb:23:eb:e3:3a:4b:57:74:50:
                    4b:c5:2f:b0:bf:18:05:37:05:04:19:fd:0e:80:66:
                    25:e5:94:f7:ff:a3:65:35:31:8e:8d:d7:28:82:a2:
                    53:62:5b:eb:c1:12:1b:88:1b:80:1a:9e:11:d2:79:
                    8a:84:75:c6:d8:09:1f:0e:3d:a3:1d:d5:42:ee:9b:
                    c5:99:88:aa:54:3f:fc:20:89:4d:4c:7a:28:e9:02:
                    c3:bf:59:37:50:cb:23:10:e2:c3:77:3e:70:43:44:
                    9b:8d:1b:af:6f:50:fc:d5:6b:1a:d7:6b:9a:38:2b:
                    d2:0f:d1:23:1a:5a:1e:99:01:b2:51:c9:16:86:f2:
                    08:d4:8e:fe:7a:93:c0:94:9d:50:e9:ec:b1:13:ff:
                    1e:cd:fa:d2:82:7c:f1:fc:8d:6d:ec:fa:08:59:17:
                    8f:a1:5d:f6:89:27:b1:ef:d7:6b:cb:33:d8:00:47:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:83:D9:59:B5:5F:86:34:66:AF:4B:80:0D:27:FA:83:8F:17:31:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/61983bb9-0584-3236-ad13-b1c76e185e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/3057ebcb-33e6-4734-8aed-0486104b2865.crl

            X509v3 Authority Key Identifier:
                keyid:83:B3:A8:7D:FF:77:85:F1:23:CF:48:8D:B9:DA:81:F6:A2:8A:0E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f371::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:da:cf:d1:48:c1:f6:66:7f:ab:0d:fa:8d:d8:d3:cc:7c:80:
         e2:03:cd:dd:d2:df:e7:e2:e7:20:e4:49:3b:80:d5:7c:42:09:
         7e:59:2a:ab:89:72:74:89:25:0f:24:3a:b8:79:37:f9:df:0b:
         1f:03:c4:08:dc:11:49:9f:ac:3d:b3:c2:e1:96:33:d7:b6:2f:
         21:97:d9:18:b8:a4:a5:a0:f0:e1:f4:35:1b:4b:30:48:4e:36:
         a6:33:45:4b:c5:53:5b:b6:43:5c:c4:88:c5:70:70:86:91:6f:
         93:2e:10:d5:c7:c7:d1:8b:f8:0f:78:b9:6c:08:34:25:44:0e:
         7f:5a:71:2a:7b:4e:1f:fb:8d:bb:7b:cd:81:64:d3:99:a5:db:
         41:e9:41:82:35:3a:e3:8e:7d:95:1d:2d:71:cd:0e:ba:a7:30:
         5d:2d:9c:94:29:22:85:22:c5:f1:bc:9d:93:a0:43:11:2e:33:
         11:31:2e:7a:b2:cf:fa:38:d3:7a:8c:8b:be:1b:11:1d:7c:0c:
         51:f1:88:44:e6:22:69:36:26:5f:d2:75:f8:79:31:d2:5b:d0:
         3e:79:2f:45:94:cb:88:7d:bd:c9:df:4b:94:06:c4:08:ae:ca:
         bb:a1:04:29:1b:f2:c7:a2:2f:1c:3a:f7:2a:b2:ec:23:ce:fa:
         18:3b:eb:d3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5RbzrX71dmasi3jkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzA1N2ViY2ItMzNlNi00NzM0LThhZWQtMDQ4NjEwNGIy
ODY1MB4XDTI2MDYyODA0NTMwNloXDTI2MDkyNTE4NTExMlowLzEtMCsGA1UEAxMk
NDgzYTVhMjItMDZiZC00Y2VkLTkxYjMtMzFjMzE1ZTU4MzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A/pwsbSVsxyvROWnBGYpA3rycxsaVUeQq6u
TkF3BRUVQBL2uLWVBRJ5ii5yUVIZ4LespCVCKn7k6VP+01bS/P2q1TS2moXVCPAA
ixdQiTjLI+vjOktXdFBLxS+wvxgFNwUEGf0OgGYl5ZT3/6NlNTGOjdcogqJTYlvr
wRIbiBuAGp4R0nmKhHXG2AkfDj2jHdVC7pvFmYiqVD/8IIlNTHoo6QLDv1k3UMsj
EOLDdz5wQ0SbjRuvb1D81Wsa12uaOCvSD9EjGloemQGyUckWhvII1I7+epPAlJ1Q
6eyxE/8ezfrSgnzx/I1t7PoIWRePoV32iSex79dryzPYAEd28QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKmD2Vm1X4Y0Zq9LgA0n+oOPFzFDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zMDU3
ZWJjYi0zM2U2LTQ3MzQtOGFlZC0wNDg2MTA0YjI4NjUvNjE5ODNiYjktMDU4NC0z
MjM2LWFkMTMtYjFjNzZlMTg1ZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzA1N2ViY2ItMzNlNi00NzM0LThh
ZWQtMDQ4NjEwNGIyODY1LzMwNTdlYmNiLTMzZTYtNDczNC04YWVkLTA0ODYxMDRi
Mjg2NS5jcmwwHwYDVR0jBBgwFoAUg7Ooff93hfEjz0iNudqB9qKKDrwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8zMDU3ZWJjYi0zM2U2LTQ3MzQtOGFlZC0wNDg2
MTA0YjI4NjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgLzcQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWtrP0UjB9mZ/qw36jdjTzHyA4gPN3dLf5+LnIORJO4DVfEIJflkq
q4lydIklDyQ6uHk3+d8LHwPECNwRSZ+sPbPC4ZYz17YvIZfZGLikpaDw4fQ1G0sw
SE42pjNFS8VTW7ZDXMSIxXBwhpFvky4Q1cfH0Yv4D3i5bAg0JUQOf1pxKntOH/uN
u3vNgWTTmaXbQelBgjU64459lR0tcc0OuqcwXS2clCkihSLF8bydk6BDES4zETEu
erLP+jjTeoyLvhsRHXwMUfGIROYiaTYmX9J1+Hkx0lvQPnkvRZTLiH29yd9LlAbE
CK7Ku6EEKRvyx6IvHDr3KrLsI876GDvr0w==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:40:16 2026 by rpki-client