Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/6cc8fce7-bb5e-38b0-ba30-6d2f526247dd.roa
File:                     6cc8fce7-bb5e-38b0-ba30-6d2f526247dd.roa (raw, json)
Hash identifier:          f5hO/49mvnaNa249ouC5fXdwWkgpOHSWJs2Uc8/RUKE=
Subject key identifier:   AA:9B:57:CD:B8:DB:AD:81:DE:44:9D:FE:6F:BA:75:2C:2D:6F:32:B9
Certificate issuer:       /CN=1045948a-6e89-46b9-82ff-13c039b622e6
Certificate serial:       010D0C9F4328584D95F0057A36A113E043794800
Authority key identifier: 6F:25:74:E8:4F:2D:27:12:40:B8:C1:69:E6:78:F4:A4:20:79:D0:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/6cc8fce7-bb5e-38b0-ba30-6d2f526247dd.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     11263
IP address blocks:        2602:2ed::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/1045948a-6e89-46b9-82ff-13c039b622e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/1045948a-6e89-46b9-82ff-13c039b622e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:05:7a:36:a1:13:e0:43:79:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045948a-6e89-46b9-82ff-13c039b622e6
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=61198140-c11d-41da-8ae9-8c4793f4315c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:b7:9c:7a:f0:50:5d:23:19:5b:8e:42:61:
                    f6:b7:78:39:a5:89:a8:0a:bc:b1:a4:e9:65:5d:b6:
                    68:46:68:2d:f9:40:5f:46:0b:b3:9b:8f:74:7d:10:
                    98:a7:2d:6b:c5:fa:4c:fa:a0:5c:5f:a1:92:c2:67:
                    60:d1:32:9b:3c:19:4a:80:82:ca:c5:3e:2c:ae:52:
                    17:fc:86:3d:63:54:d7:81:e6:1c:7f:b1:d1:47:6a:
                    cc:56:fb:77:9d:02:a5:ac:b2:6b:ea:c4:11:12:da:
                    de:89:54:bc:34:11:1e:5d:40:d0:d7:bf:09:b0:4c:
                    f9:f0:1b:c2:bb:dd:89:18:b0:59:92:b1:43:80:25:
                    58:90:dc:04:5a:65:f4:fe:17:ba:d6:5a:3b:10:37:
                    88:12:72:aa:d8:59:13:ee:20:6d:cc:41:86:bc:26:
                    31:a8:0f:ff:4a:d3:96:8c:e4:5a:a8:c8:5d:16:6d:
                    74:e4:f3:80:7b:c1:66:4b:44:41:8e:df:5e:bb:b2:
                    ce:6b:f2:b8:a1:b8:8a:8e:b6:24:14:d7:ca:5e:91:
                    9a:d2:8d:30:a7:37:46:e5:19:52:81:e1:69:8c:2b:
                    28:f8:09:94:6c:f7:d0:7d:20:c0:25:43:a7:67:6f:
                    43:8b:59:04:16:31:ea:1f:42:94:0a:d1:08:d4:af:
                    76:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9B:57:CD:B8:DB:AD:81:DE:44:9D:FE:6F:BA:75:2C:2D:6F:32:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/6cc8fce7-bb5e-38b0-ba30-6d2f526247dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/1045948a-6e89-46b9-82ff-13c039b622e6.crl

            X509v3 Authority Key Identifier:
                keyid:6F:25:74:E8:4F:2D:27:12:40:B8:C1:69:E6:78:F4:A4:20:79:D0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2ed::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:69:b2:a8:7c:29:f6:b0:3b:2d:21:f1:db:6f:5c:2c:ca:2b:
         5c:bc:15:5e:07:90:93:f4:9a:d1:1b:42:ed:b9:b4:53:92:85:
         07:c9:87:49:ce:07:fe:ba:cc:73:63:a1:38:54:44:0b:06:91:
         f5:71:5a:51:70:71:92:ad:83:93:63:8a:ba:72:22:6e:0b:68:
         b7:45:4c:1a:14:9a:44:83:a7:2a:99:2c:95:d6:89:f7:ff:28:
         48:4e:d1:be:86:df:bf:dc:35:cd:4e:cf:8a:e9:c5:98:d7:e8:
         13:65:58:9b:0e:ee:68:7f:c7:83:e2:c5:cb:6c:b4:d9:1e:db:
         f8:a9:dd:e7:62:2e:ee:36:04:65:81:6c:28:ae:f4:d7:ed:61:
         7b:20:da:2f:42:5c:5b:3f:a5:cc:4a:82:7d:a7:39:ff:60:67:
         56:9b:23:ea:d0:9a:9b:7b:76:31:51:4a:02:b9:4e:b9:bc:2d:
         56:95:5a:cf:ea:92:95:f9:68:c5:2a:9a:03:de:67:b9:b0:33:
         e8:c3:ed:c8:b3:cf:6a:2e:da:e9:82:82:cf:36:e7:88:6a:a5:
         4c:25:7b:6f:e0:3d:f7:44:58:f7:b6:2f:1a:df:ea:11:59:64:
         45:f1:93:0b:88:5f:29:7c:4a:b2:05:9f:6c:61:d5:e4:e3:cf:
         dd:de:eb:48
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2V8AV6NqET4EN5SAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTA0NTk0OGEtNmU4OS00NmI5LTgyZmYtMTNjMDM5YjYy
MmU2MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
NjExOTgxNDAtYzExZC00MWRhLThhZTktOGM0NzkzZjQzMTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD23nHrwUF0jGVuOQmH2t3g5pYmoCryxpOll
XbZoRmgt+UBfRguzm490fRCYpy1rxfpM+qBcX6GSwmdg0TKbPBlKgILKxT4srlIX
/IY9Y1TXgeYcf7HRR2rMVvt3nQKlrLJr6sQREtreiVS8NBEeXUDQ178JsEz58BvC
u92JGLBZkrFDgCVYkNwEWmX0/he61lo7EDeIEnKq2FkT7iBtzEGGvCYxqA//StOW
jORaqMhdFm105POAe8FmS0RBjt9eu7LOa/K4obiKjrYkFNfKXpGa0o0wpzdG5RlS
geFpjCso+AmUbPfQfSDAJUOnZ29Di1kEFjHqH0KUCtEI1K92XQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKqbV824262B3kSd/m+6dSwtbzK5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMDQ1
OTQ4YS02ZTg5LTQ2YjktODJmZi0xM2MwMzliNjIyZTYvNmNjOGZjZTctYmI1ZS0z
OGIwLWJhMzAtNmQyZjUyNjI0N2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTA0NTk0OGEtNmU4OS00NmI5LTgy
ZmYtMTNjMDM5YjYyMmU2LzEwNDU5NDhhLTZlODktNDZiOS04MmZmLTEzYzAzOWI2
MjJlNi5jcmwwHwYDVR0jBBgwFoAUbyV06E8tJxJAuMFp5nj0pCB50PIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMDQ1OTQ4YS02ZTg5LTQ2YjktODJmZi0xM2Mw
MzliNjIyZTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIC7QAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADxpsqh8KfawOy0h8dtvXCzKK1y8FV4HkJP0mtEbQu25tFOShQfJ
h0nOB/66zHNjoThURAsGkfVxWlFwcZKtg5NjirpyIm4LaLdFTBoUmkSDpyqZLJXW
iff/KEhO0b6G37/cNc1Oz4rpxZjX6BNlWJsO7mh/x4PixctstNke2/ip3ediLu42
BGWBbCiu9NftYXsg2i9CXFs/pcxKgn2nOf9gZ1abI+rQmpt7djFRSgK5Trm8LVaV
Ws/qkpX5aMUqmgPeZ7mwM+jD7cizz2ou2umCgs8254hqpUwle2/gPfdEWPe2Lxrf
6hFZZEXxkwuIXyl8SrIFn2xh1eTjz93e60g=
-----END CERTIFICATE-----
Generated at Fri May 1 17:50:45 2026 by rpki-client