Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/f4226605-fb14-3651-9051-1a359243cab9.roa
File:                     f4226605-fb14-3651-9051-1a359243cab9.roa (raw, json)
Hash identifier:          ZgirXY8CNSaVhGBDuOZqmBdl7m1SFiCwSPMkl1yHw3E=
Subject key identifier:   17:EC:C8:AC:14:83:A3:30:AE:F8:7E:B0:61:CB:D6:7B:BD:40:B2:49
Certificate issuer:       /CN=2a71f00e-0200-48df-9cb4-008df9a4a854
Certificate serial:       010D0C9F4328584D905A96D42375A7123D54AFD0
Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/f4226605-fb14-3651-9051-1a359243cab9.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     3356
IP address blocks:        2602:fd26::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:96:d4:23:75:a7:12:3d:54:af:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=243573fc-7984-4717-af66-20a4283d8d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:58:99:3b:5c:cd:d1:f3:22:e7:a7:f7:fc:
                    8b:6d:df:d6:3f:40:47:93:49:0e:b7:6f:f1:27:c6:
                    de:38:1a:73:98:f9:98:c0:f0:3a:06:4e:f4:7e:03:
                    f7:19:5e:89:86:40:ce:ba:04:37:91:66:70:42:f0:
                    32:98:4c:29:89:db:75:52:1f:05:aa:64:56:52:8b:
                    89:96:51:c7:f7:37:8e:31:c4:77:81:04:14:7e:85:
                    c7:98:76:1f:32:18:db:3f:c4:d7:0e:90:28:cb:6d:
                    7c:46:c9:ab:40:9d:02:51:f5:4d:4a:38:92:ca:fe:
                    2d:59:47:c3:35:eb:a8:5b:9c:63:c2:d5:fc:fe:48:
                    9b:61:6e:06:67:ad:2d:9e:8d:bf:5c:d3:1d:53:60:
                    9f:be:6b:b8:0c:ac:83:5c:fa:12:be:1a:22:f7:5d:
                    eb:68:0f:05:ce:70:ae:b8:5a:be:17:ed:64:b0:43:
                    91:4e:e3:71:92:e1:89:68:dd:33:63:42:b3:dc:fe:
                    a0:c5:2b:8b:ba:1a:e9:d5:72:16:bb:18:23:3e:ea:
                    f3:b5:79:69:e7:30:8e:14:21:d1:37:b0:1b:f8:d2:
                    ff:81:d2:72:3e:bf:45:66:13:70:ed:c8:3f:51:ba:
                    22:c3:33:b3:86:a2:e2:df:17:97:76:02:dc:cc:62:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EC:C8:AC:14:83:A3:30:AE:F8:7E:B0:61:CB:D6:7B:BD:40:B2:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/f4226605-fb14-3651-9051-1a359243cab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl

            X509v3 Authority Key Identifier:
                keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd26::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:04:e6:37:bd:12:19:5d:b3:64:18:54:e6:bf:55:ec:a2:ac:
         71:b9:2b:92:54:46:09:f3:55:ae:b4:a9:d9:5e:14:a7:d6:e5:
         c1:c0:33:d8:b3:38:a5:f9:85:cb:17:6e:95:c7:cb:e2:76:a2:
         87:d0:bf:8d:4b:d6:6d:3c:d6:49:df:36:da:b7:08:75:c3:d6:
         4d:4a:6a:4c:17:33:9c:f5:cf:54:df:41:51:f3:6f:59:a7:4c:
         84:62:bb:99:0c:80:96:37:ac:bf:c5:03:58:dc:3c:40:ef:73:
         eb:f8:e4:19:d7:64:73:68:5f:97:69:0a:9c:8c:4f:d9:2b:fa:
         d8:0b:1c:a3:d0:82:6c:8c:f4:2b:d9:04:76:d4:83:85:96:5e:
         0c:c3:62:e6:c3:3c:ba:91:1b:77:c6:28:02:eb:d6:a3:d2:3d:
         f2:b6:fb:66:af:29:e7:69:91:b0:67:ae:b4:ce:2a:c0:65:59:
         e4:31:2b:ac:d6:8a:9a:2d:91:08:55:ad:d7:d9:76:47:dc:42:
         b7:e1:0c:9d:b7:2e:1a:c3:b9:fb:18:15:9a:42:61:36:05:fb:
         c0:dd:cd:9f:40:6e:9a:bb:08:31:d0:69:ad:c4:4e:5a:6f:03:
         5e:f3:a0:eb:0e:9f:53:ea:d7:1e:64:ce:69:23:8c:54:1d:bf:
         14:aa:54:17
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2QWpbUI3WnEj1Ur9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE3MWYwMGUtMDIwMC00OGRmLTljYjQtMDA4ZGY5YTRh
ODU0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk
MjQzNTczZmMtNzk4NC00NzE3LWFmNjYtMjBhNDI4M2Q4ZDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBdYmTtczdHzIuen9/yLbd/WP0BHk0kOt2/x
J8beOBpzmPmYwPA6Bk70fgP3GV6JhkDOugQ3kWZwQvAymEwpidt1Uh8FqmRWUouJ
llHH9zeOMcR3gQQUfoXHmHYfMhjbP8TXDpAoy218RsmrQJ0CUfVNSjiSyv4tWUfD
NeuoW5xjwtX8/kibYW4GZ60tno2/XNMdU2Cfvmu4DKyDXPoSvhoi913raA8FznCu
uFq+F+1ksEORTuNxkuGJaN0zY0Kz3P6gxSuLuhrp1XIWuxgjPurztXlp5zCOFCHR
N7Ab+NL/gdJyPr9FZhNw7cg/UboiwzOzhqLi3xeXdgLczGKXhwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBfsyKwUg6Mwrvh+sGHL1nu9QLJJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYTcx
ZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhkZjlhNGE4NTQvZjQyMjY2MDUtZmIxNC0z
NjUxLTkwNTEtMWEzNTkyNDNjYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmE3MWYwMGUtMDIwMC00OGRmLTlj
YjQtMDA4ZGY5YTRhODU0LzJhNzFmMDBlLTAyMDAtNDhkZi05Y2I0LTAwOGRmOWE0
YTg1NC5jcmwwHwYDVR0jBBgwFoAUOA1kwPwYBvuiE5kqAVi9GUZ3do0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yYTcxZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhk
ZjlhNGE4NTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9JgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUwTmN70SGV2zZBhU5r9V7KKscbkrklRGCfNVrrSp2V4Up9blwcAz
2LM4pfmFyxdulcfL4naih9C/jUvWbTzWSd822rcIdcPWTUpqTBcznPXPVN9BUfNv
WadMhGK7mQyAljesv8UDWNw8QO9z6/jkGddkc2hfl2kKnIxP2Sv62Asco9CCbIz0
K9kEdtSDhZZeDMNi5sM8upEbd8YoAuvWo9I98rb7Zq8p52mRsGeutM4qwGVZ5DEr
rNaKmi2RCFWt19l2R9xCt+EMnbcuGsO5+xgVmkJhNgX7wN3Nn0BumrsIMdBprcRO
Wm8DXvOg6w6fU+rXHmTOaSOMVB2/FKpUFw==
-----END CERTIFICATE-----
Generated at Fri Apr 24 14:24:54 2026 by rpki-client