Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/352e0bf1-c858-31db-a4b1-a0641760c140.roa
File:                     352e0bf1-c858-31db-a4b1-a0641760c140.roa (raw, json)
Hash identifier:          9fmFCeYt5iLPAzlaoBqAQ8wPpsrQYK/BDeeS3/AY9vU=
Subject key identifier:   E3:10:8C:AB:90:BB:F3:11:96:8F:92:20:A1:94:6E:5D:85:35:D3:39
Certificate issuer:       /CN=206290f3-53e1-4d17-8678-29dace17c006
Certificate serial:       010D0C9F4328584D2644C754F604277712844700
Authority key identifier: B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/352e0bf1-c858-31db-a4b1-a0641760c140.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     33179
IP address blocks:        2602:fa21::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:c7:54:f6:04:27:77:12:84:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206290f3-53e1-4d17-8678-29dace17c006
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=884557ec-54e2-4c34-829e-9a06f2095e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:a0:68:78:b9:e8:c0:30:9a:9d:fd:45:a6:
                    55:a7:92:8f:dd:cb:86:34:bb:93:a4:7c:76:06:d8:
                    8e:07:b1:c1:00:cd:da:51:47:05:71:2f:8e:ca:04:
                    95:02:e3:57:25:32:64:13:10:95:26:5c:1c:8c:1e:
                    74:b1:88:3b:1a:ac:dd:b8:c0:9b:5a:b7:bb:b7:14:
                    b6:c5:4d:94:43:1d:db:fc:94:e1:c1:50:4a:35:22:
                    68:46:ed:45:8d:ef:44:27:49:83:b4:e8:cc:ec:76:
                    70:81:74:b9:45:fc:09:9f:2b:b1:8d:37:ba:4b:52:
                    bf:93:c0:3f:fb:aa:e2:fd:4c:b2:53:90:80:18:5f:
                    23:3b:52:a3:ba:02:79:a4:75:18:6e:9a:e3:94:5e:
                    c9:9f:46:f0:23:08:21:62:6a:a4:e2:5c:a5:57:1e:
                    d7:92:db:be:46:da:e7:79:66:b6:76:ec:68:8c:1d:
                    f3:63:85:e3:ea:ba:c9:2c:c1:b9:2b:ff:cb:e0:d8:
                    df:6a:2e:ba:98:63:b7:2b:e3:59:b5:ee:ce:22:17:
                    c0:7c:5a:e2:43:fa:b6:79:72:39:bc:f8:f0:3e:d2:
                    f8:e6:67:7d:0e:75:9b:70:0b:98:93:3f:6a:78:2e:
                    12:36:32:5e:21:39:2b:98:94:5b:10:06:3f:7a:63:
                    a8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:10:8C:AB:90:BB:F3:11:96:8F:92:20:A1:94:6E:5D:85:35:D3:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/352e0bf1-c858-31db-a4b1-a0641760c140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl

            X509v3 Authority Key Identifier:
                keyid:B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa21::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a8:c2:8f:b7:91:0e:ed:ba:1f:0f:f7:90:fa:77:17:25:86:
         32:5a:f9:26:0f:b4:9c:ab:8a:e3:06:db:16:77:f7:60:99:f1:
         ff:72:1d:99:96:5f:73:9d:0c:85:a3:64:22:17:58:6e:fd:c5:
         6f:0e:81:fb:88:9d:c9:51:e6:8c:d4:ef:80:85:73:98:cc:83:
         cf:d5:f1:06:41:43:7d:74:25:61:d1:e4:8b:c0:db:15:0b:34:
         91:67:57:49:e9:f7:ae:64:3a:51:45:1b:82:b5:7e:ca:56:7b:
         a1:24:c4:2e:82:58:07:3c:5e:d7:1a:c6:c1:c5:85:1e:5a:19:
         26:ff:b5:bf:54:53:d6:ad:8e:86:ab:9e:7b:ed:53:df:ba:dd:
         b3:b6:14:3d:d9:fe:9b:bd:d5:66:22:d8:d7:2d:72:32:ba:5b:
         68:9a:84:34:e5:51:00:06:33:ae:bf:22:8e:f7:10:62:f0:41:
         cb:18:d8:70:02:3e:c4:ed:18:ca:f4:b6:92:45:a6:f2:ea:35:
         dc:d6:75:c9:06:5b:09:43:e9:11:1c:df:f8:3d:6d:4b:b5:b9:
         a7:2e:81:74:77:c5:e8:ae:b8:e4:60:20:29:3a:87:ca:49:b5:
         c2:29:c9:2a:62:58:36:5f:05:c3:12:62:dc:b3:50:15:ac:28:
         25:fc:5d:45
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0mRMdU9gQndxKERwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA2MjkwZjMtNTNlMS00ZDE3LTg2NzgtMjlkYWNlMTdj
MDA2MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
ODg0NTU3ZWMtNTRlMi00YzM0LTgyOWUtOWEwNmYyMDk1ZTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvygaHi56MAwmp39RaZVp5KP3cuGNLuTpHx2
BtiOB7HBAM3aUUcFcS+OygSVAuNXJTJkExCVJlwcjB50sYg7GqzduMCbWre7txS2
xU2UQx3b/JThwVBKNSJoRu1Fje9EJ0mDtOjM7HZwgXS5RfwJnyuxjTe6S1K/k8A/
+6ri/UyyU5CAGF8jO1KjugJ5pHUYbprjlF7Jn0bwIwghYmqk4lylVx7Xktu+Rtrn
eWa2duxojB3zY4Xj6rrJLMG5K//L4Njfai66mGO3K+NZte7OIhfAfFriQ/q2eXI5
vPjwPtL45md9DnWbcAuYkz9qeC4SNjJeITkrmJRbEAY/emOoiQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOMQjKuQu/MRlo+SIKGUbl2FNdM5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYy
OTBmMy01M2UxLTRkMTctODY3OC0yOWRhY2UxN2MwMDYvMzUyZTBiZjEtYzg1OC0z
MWRiLWE0YjEtYTA2NDE3NjBjMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjA2MjkwZjMtNTNlMS00ZDE3LTg2
NzgtMjlkYWNlMTdjMDA2LzIwNjI5MGYzLTUzZTEtNGQxNy04Njc4LTI5ZGFjZTE3
YzAwNi5jcmwwHwYDVR0jBBgwFoAUsHV107looknvuXfhkkalRpfsG/gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYyOTBmMy01M2UxLTRkMTctODY3OC0yOWRh
Y2UxN2MwMDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6IQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANKjCj7eRDu26Hw/3kPp3FyWGMlr5Jg+0nKuK4wbbFnf3YJnx/3Id
mZZfc50MhaNkIhdYbv3Fbw6B+4idyVHmjNTvgIVzmMyDz9XxBkFDfXQlYdHki8Db
FQs0kWdXSen3rmQ6UUUbgrV+ylZ7oSTELoJYBzxe1xrGwcWFHloZJv+1v1RT1q2O
hquee+1T37rds7YUPdn+m73VZiLY1y1yMrpbaJqENOVRAAYzrr8ijvcQYvBByxjY
cAI+xO0YyvS2kkWm8uo13NZ1yQZbCUPpERzf+D1tS7W5py6BdHfF6K645GAgKTqH
ykm1winJKmJYNl8FwxJi3LNQFawoJfxdRQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:14:18 2026 by rpki-client