Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/b74c0189-c905-3046-8d51-dc9a10241a23.roa
File:                     b74c0189-c905-3046-8d51-dc9a10241a23.roa (raw, json)
Hash identifier:          63OxnBJ2DkkfYlPXY2+MX53KmQ7v1PHSKJ7tMFIntKk=
Subject key identifier:   83:7B:84:59:0B:FA:B6:9A:BC:DA:4D:21:08:68:4C:D2:16:1E:DE:D8
Certificate issuer:       /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial:       010D0C9F4328584D3B34E2C894EBF6A8001A2900
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/b74c0189-c905-3046-8d51-dc9a10241a23.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     400919
IP address blocks:        2602:817:2002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:e2:c8:94:eb:f6:a8:00:1a:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=ac238073-f115-450d-9df8-9aa78879d1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:98:8a:49:13:36:81:2c:c8:91:3c:51:c8:a9:
                    b6:67:60:16:e4:69:74:9a:7e:0e:59:a3:fd:de:22:
                    49:be:39:c9:5d:24:18:61:2b:6d:54:19:06:e9:3a:
                    8a:b7:b1:8d:df:e4:b3:9a:31:01:5b:95:1b:c6:22:
                    e8:a3:52:bb:b2:f7:1d:70:8c:8b:9e:9a:b9:58:bf:
                    15:a1:58:e1:c7:75:ec:63:4c:7f:56:4a:2d:88:f3:
                    77:c1:8b:24:e3:85:90:45:4f:92:58:1a:47:0f:51:
                    fd:bb:43:1f:9e:12:d4:79:67:2c:99:8e:20:22:33:
                    fb:4b:7a:91:d6:bd:a0:28:b9:8f:56:e1:29:04:cf:
                    64:90:bd:48:3f:34:ba:48:02:e1:c2:0b:44:20:8c:
                    4c:09:66:b2:de:94:e3:3e:2c:59:1f:9b:e5:60:84:
                    4a:4f:11:a9:a4:f7:9a:61:9c:86:c4:f2:eb:20:30:
                    cf:04:83:67:fd:8f:bf:c8:f9:fd:2b:2e:06:0e:37:
                    7d:3d:08:ce:0e:a3:87:b9:91:3e:63:c8:8d:0d:ce:
                    2d:ae:2c:a1:a4:75:06:83:d5:1a:e5:db:c8:4f:38:
                    8e:d5:ef:be:df:f2:f1:ee:de:82:3b:58:64:b3:9d:
                    09:dd:ed:61:3b:a9:63:20:5e:43:2a:0d:d4:e3:78:
                    ba:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7B:84:59:0B:FA:B6:9A:BC:DA:4D:21:08:68:4C:D2:16:1E:DE:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/b74c0189-c905-3046-8d51-dc9a10241a23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl

            X509v3 Authority Key Identifier:
                keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:2002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:b0:47:87:6a:65:e6:5e:a8:89:96:60:fd:22:24:a9:cf:
         7d:bf:73:01:0c:ff:88:47:cd:64:d8:d6:11:a0:32:83:f9:db:
         0d:a9:dd:83:e5:8a:bd:45:05:1b:aa:69:7f:22:91:44:a3:bc:
         3c:b0:d5:93:36:b0:ea:26:12:ce:76:3e:27:53:d2:9f:63:57:
         71:cb:c5:55:21:ec:e4:32:47:a1:a7:a6:97:6a:16:09:8c:b2:
         64:7c:fc:2b:6f:5c:72:61:0b:2a:af:13:3b:cf:c6:93:2c:bf:
         ff:a5:85:41:37:25:05:55:1d:26:12:49:10:1a:95:0c:5c:bc:
         30:0e:67:fc:35:39:de:3d:52:6d:ac:ed:15:b3:88:57:46:17:
         5d:ed:23:9c:91:a4:20:b0:4d:44:ac:8f:7e:d5:df:8c:f5:04:
         b3:ae:67:20:8d:7e:ff:f9:92:97:0e:33:f2:08:0e:45:50:8f:
         f1:22:2f:f5:96:ad:9d:68:65:47:3d:5c:6e:99:59:ce:fb:48:
         9a:f2:d6:b2:43:d6:09:32:3f:b6:fd:2b:f2:28:88:b1:4e:c4:
         d4:3a:2b:fe:ec:9d:4c:17:7b:db:4f:95:b2:a8:59:b0:4f:15:
         e0:5b:e1:4e:72:d3:7e:fd:3d:51:93:c4:07:b0:31:b2:94:92:
         2a:2f:51:a4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07NOLIlOv2qAAaKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE3NjdmYjMtMDkxMS00MzVhLWEzYTQtMTg5YjgyNjIy
MTU3MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk
YWMyMzgwNzMtZjExNS00NTBkLTlkZjgtOWFhNzg4NzlkMWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpiKSRM2gSzIkTxRyKm2Z2AW5Gl0mn4OWaP9
3iJJvjnJXSQYYSttVBkG6TqKt7GN3+SzmjEBW5UbxiLoo1K7svcdcIyLnpq5WL8V
oVjhx3XsY0x/VkotiPN3wYsk44WQRU+SWBpHD1H9u0MfnhLUeWcsmY4gIjP7S3qR
1r2gKLmPVuEpBM9kkL1IPzS6SALhwgtEIIxMCWay3pTjPixZH5vlYIRKTxGppPea
YZyGxPLrIDDPBINn/Y+/yPn9Ky4GDjd9PQjODqOHuZE+Y8iNDc4triyhpHUGg9Ua
5dvITziO1e++3/Lx7t6CO1hks50J3e1hO6ljIF5DKg3U43i6UQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIN7hFkL+raavNpNIQhoTNIWHt7YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYTc2
N2ZiMy0wOTExLTQzNWEtYTNhNC0xODliODI2MjIxNTcvYjc0YzAxODktYzkwNS0z
MDQ2LThkNTEtZGM5YTEwMjQxYTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWE3NjdmYjMtMDkxMS00MzVhLWEz
YTQtMTg5YjgyNjIyMTU3LzFhNzY3ZmIzLTA5MTEtNDM1YS1hM2E0LTE4OWI4MjYy
MjE1Ny5jcmwwHwYDVR0jBBgwFoAUMZd8fKTs1HliGSxrDAQkrzTVdKEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xYTc2N2ZiMy0wOTExLTQzNWEtYTNhNC0xODli
ODI2MjIxNTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFyAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABwNsEeHamXmXqiJlmD9IiSpz32/cwEM/4hHzWTY1hGgMoP52w2p
3YPlir1FBRuqaX8ikUSjvDyw1ZM2sOomEs52PidT0p9jV3HLxVUh7OQyR6Gnppdq
FgmMsmR8/CtvXHJhCyqvEzvPxpMsv/+lhUE3JQVVHSYSSRAalQxcvDAOZ/w1Od49
Um2s7RWziFdGF13tI5yRpCCwTUSsj37V34z1BLOuZyCNfv/5kpcOM/IIDkVQj/Ei
L/WWrZ1oZUc9XG6ZWc77SJry1rJD1gkyP7b9K/IoiLFOxNQ6K/7snUwXe9tPlbKo
WbBPFeBb4U5y0379PVGTxAewMbKUkiovUaQ=
-----END CERTIFICATE-----
Generated at Sat Mar 21 20:57:03 2026 by rpki-client