Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/bdd3d443-3917-38eb-8d15-a0fc55930f02.roa
File:                     bdd3d443-3917-38eb-8d15-a0fc55930f02.roa (raw, json)
Hash identifier:          nzxL6XjJMsVfK3nBy0YBFiZv6v2S7ksgzZ9xsH9Sg5w=
Subject key identifier:   56:F9:C2:CC:0D:9E:B7:F2:A7:FC:7C:11:F1:18:59:17:1A:36:34:BA
Certificate issuer:       /CN=46369a04-d9fc-4dd8-bc96-cf22af084843
Certificate serial:       010D0C9F4328584D9A200CB1CF60B4B1F3C34A00
Authority key identifier: B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/bdd3d443-3917-38eb-8d15-a0fc55930f02.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     400550
IP address blocks:        2602:fb9e:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 May 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:0c:b1:cf:60:b4:b1:f3:c3:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46369a04-d9fc-4dd8-bc96-cf22af084843
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=e5cf54f9-f9ae-4ac2-8c7a-5315d7bf7ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8d:d0:64:3e:b5:fc:f5:a6:2c:89:38:38:6e:
                    d8:71:4c:e5:87:a3:0f:d4:c5:16:c6:30:10:36:6a:
                    f0:2d:26:f7:ab:fd:1d:7c:06:a0:a0:cb:d0:4b:e8:
                    1e:31:00:20:f7:a9:38:a3:9d:cd:bd:2c:a6:a8:cb:
                    d0:da:54:bd:ab:bb:36:5d:67:c8:2a:8b:0f:21:78:
                    e2:ad:57:9c:a6:ca:80:71:9f:99:fd:7d:96:1f:79:
                    40:e2:61:48:0a:57:65:b1:0b:24:10:2d:a8:aa:e8:
                    05:ab:5d:16:d4:f6:bf:c4:8d:cd:96:90:e9:32:53:
                    f3:e2:76:83:c3:13:30:81:b7:37:10:43:10:02:7b:
                    06:f1:a2:2c:21:45:93:cb:1e:0e:ed:b9:c6:25:ab:
                    ae:59:82:68:5e:10:cb:8b:87:6f:06:f2:48:ec:1e:
                    89:77:72:3d:fc:cb:84:bc:2b:7a:03:62:8c:7b:aa:
                    35:77:91:31:96:8f:61:51:47:ec:63:9d:55:4e:36:
                    5a:a8:34:f5:fd:c2:e1:7f:73:e0:52:7b:5b:64:d8:
                    82:c7:34:24:b4:1c:9c:ae:fe:99:b5:43:fd:5c:9b:
                    24:65:a4:60:71:58:33:70:75:18:bf:cf:46:ec:d3:
                    c1:3c:7f:3b:8d:cb:03:66:11:49:5b:b6:2d:c9:f8:
                    ed:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F9:C2:CC:0D:9E:B7:F2:A7:FC:7C:11:F1:18:59:17:1A:36:34:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/bdd3d443-3917-38eb-8d15-a0fc55930f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl

            X509v3 Authority Key Identifier:
                keyid:B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb9e:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ae:f6:7f:7c:1b:4b:0e:81:6e:90:7b:a7:e4:4e:f5:88:3b:
         0a:67:87:5b:95:68:97:26:d9:dd:90:7d:8d:4a:23:79:c3:18:
         7b:26:e0:c8:31:09:04:45:0a:b7:f4:03:b6:af:f2:59:d6:95:
         aa:c4:84:53:f9:24:15:14:75:10:6e:0c:7d:4c:db:f8:56:d1:
         82:5c:8c:37:08:c5:59:00:ec:4f:38:48:47:90:f0:bf:3e:32:
         f9:5c:98:8a:8d:17:ec:6f:70:f7:99:05:ec:c8:61:fa:39:64:
         aa:b3:bf:df:4e:6d:6f:96:c1:0b:9d:65:91:03:db:c4:10:a5:
         6b:0e:08:a5:c2:4e:23:b2:2f:b1:2d:6a:91:ca:fa:2f:60:8b:
         ee:c5:ec:3a:1a:88:7c:99:f8:16:71:e3:9e:79:41:e3:73:5c:
         ed:27:0b:65:04:6e:35:6a:39:3f:6f:22:e2:7e:d3:db:54:50:
         94:b2:fe:ab:84:79:a4:1c:18:d8:b1:06:f4:b3:ba:e6:bc:c4:
         2c:cb:8b:96:af:bf:d7:86:73:fb:79:aa:63:35:24:a8:5c:b6:
         e1:3f:65:1d:6b:14:39:31:78:69:43:06:2e:72:a8:70:d8:ea:
         ed:8d:72:f4:d3:63:8c:d5:18:c6:c9:34:54:34:c0:12:b5:a2:
         20:82:bf:25
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2aIAyxz2C0sfPDSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDYzNjlhMDQtZDlmYy00ZGQ4LWJjOTYtY2YyMmFmMDg0
ODQzMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
ZTVjZjU0ZjktZjlhZS00YWMyLThjN2EtNTMxNWQ3YmY3YWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI3QZD61/PWmLIk4OG7YcUzlh6MP1MUWxjAQ
NmrwLSb3q/0dfAagoMvQS+geMQAg96k4o53NvSymqMvQ2lS9q7s2XWfIKosPIXji
rVecpsqAcZ+Z/X2WH3lA4mFICldlsQskEC2oqugFq10W1Pa/xI3NlpDpMlPz4naD
wxMwgbc3EEMQAnsG8aIsIUWTyx4O7bnGJauuWYJoXhDLi4dvBvJI7B6Jd3I9/MuE
vCt6A2KMe6o1d5Exlo9hUUfsY51VTjZaqDT1/cLhf3PgUntbZNiCxzQktBycrv6Z
tUP9XJskZaRgcVgzcHUYv89G7NPBPH87jcsDZhFJW7YtyfjtEwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFb5wswNnrfyp/x8EfEYWRcaNjS6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NjM2
OWEwNC1kOWZjLTRkZDgtYmM5Ni1jZjIyYWYwODQ4NDMvYmRkM2Q0NDMtMzkxNy0z
OGViLThkMTUtYTBmYzU1OTMwZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDYzNjlhMDQtZDlmYy00ZGQ4LWJj
OTYtY2YyMmFmMDg0ODQzLzQ2MzY5YTA0LWQ5ZmMtNGRkOC1iYzk2LWNmMjJhZjA4
NDg0My5jcmwwHwYDVR0jBBgwFoAUuWi3LSclH4svCBQeUP6CdKa7wA0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NjM2OWEwNC1kOWZjLTRkZDgtYmM5Ni1jZjIy
YWYwODQ4NDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7ngAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGuu9n98G0sOgW6Qe6fkTvWIOwpnh1uVaJcm2d2QfY1KI3nDGHsm
4MgxCQRFCrf0A7av8lnWlarEhFP5JBUUdRBuDH1M2/hW0YJcjDcIxVkA7E84SEeQ
8L8+MvlcmIqNF+xvcPeZBezIYfo5ZKqzv99ObW+WwQudZZED28QQpWsOCKXCTiOy
L7EtapHK+i9gi+7F7DoaiHyZ+BZx4555QeNzXO0nC2UEbjVqOT9vIuJ+09tUUJSy
/quEeaQcGNixBvSzuua8xCzLi5avv9eGc/t5qmM1JKhctuE/ZR1rFDkxeGlDBi5y
qHDY6u2NcvTTY4zVGMbJNFQ0wBK1oiCCvyU=
-----END CERTIFICATE-----
Generated at Wed May 6 01:39:48 2026 by rpki-client