Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/b96d661d-151e-3e40-92d8-32407e1e3c9a.roa
File:                     b96d661d-151e-3e40-92d8-32407e1e3c9a.roa (raw, json)
Hash identifier:          ugTdNqTjkuW199VY/rxwzSltunSAxc9tULTh1kfsuPw=
Subject key identifier:   F3:9E:80:9F:91:1E:DB:B1:3E:DD:1E:00:2E:9A:FA:6E:5F:33:08:4A
Certificate issuer:       /CN=380e678f-a53e-4fa7-8c2f-15f6fca7c8f9
Certificate serial:       010D0C9F4328584D15A266863942EBA321082760
Authority key identifier: 71:E2:18:12:C7:06:61:45:DF:F7:A1:DA:01:23:23:5A:5C:02:E9:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/b96d661d-151e-3e40-92d8-32407e1e3c9a.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     53616
IP address blocks:        2602:fa67::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:66:86:39:42:eb:a3:21:08:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380e678f-a53e-4fa7-8c2f-15f6fca7c8f9
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=6ae13d88-0622-4607-8780-2d4c386f23b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7b:27:75:2f:df:8d:84:3e:1b:b9:08:c1:59:
                    a4:e7:4e:a0:bb:b8:b0:0a:8e:c1:d2:4f:77:87:49:
                    29:82:49:ae:9b:b8:6f:c6:21:26:31:84:6d:0b:a9:
                    34:72:39:71:5a:e0:ab:a0:07:93:b2:46:2f:23:cd:
                    d0:6c:e1:c0:9f:45:52:7f:2c:fd:ce:c6:60:eb:47:
                    e7:f5:9a:02:b4:94:60:79:48:a5:52:7b:3c:df:d0:
                    a7:df:e9:7c:e0:de:6d:db:8b:88:d4:56:84:52:f4:
                    8a:9e:bb:43:31:e3:52:68:02:24:ac:04:51:8b:7f:
                    a1:67:60:4d:21:81:ba:4e:72:fd:51:e2:da:9f:86:
                    a5:a6:93:e5:e6:09:0c:78:f4:87:94:81:bd:ac:82:
                    81:fa:0b:13:0f:ff:76:a2:b6:d8:54:05:12:77:ce:
                    58:18:a7:ec:eb:11:cd:02:73:f5:ba:8f:fc:31:09:
                    7f:7b:3f:ae:ff:78:83:c6:37:e7:b4:3b:79:18:f4:
                    0d:17:69:5d:58:86:d5:75:a5:76:58:e8:45:8b:e3:
                    2e:f9:7a:e5:f4:d0:45:b0:5b:0c:c9:6e:df:d4:30:
                    3d:18:95:ce:50:85:82:e2:77:89:f8:b4:0f:47:36:
                    c9:af:b8:42:58:b6:22:3f:8c:33:02:0d:10:06:5e:
                    07:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9E:80:9F:91:1E:DB:B1:3E:DD:1E:00:2E:9A:FA:6E:5F:33:08:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/b96d661d-151e-3e40-92d8-32407e1e3c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.crl

            X509v3 Authority Key Identifier:
                keyid:71:E2:18:12:C7:06:61:45:DF:F7:A1:DA:01:23:23:5A:5C:02:E9:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa67::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:44:90:8c:03:af:d9:6e:39:e4:12:80:97:88:97:06:56:52:
         17:1a:fd:54:71:d5:b5:74:eb:96:0f:c5:1a:b4:22:e3:1b:be:
         02:b8:45:dd:3c:95:d2:bd:d5:e9:7d:b1:58:3d:c8:c2:35:c4:
         90:78:84:90:22:4e:3d:39:f3:60:e6:a0:f8:52:81:04:be:13:
         93:71:d6:0c:c6:37:1e:17:47:c7:7d:3d:e3:11:86:09:01:4b:
         f0:ca:00:c9:f3:c3:97:b5:f5:08:11:78:57:c7:54:bc:fa:91:
         e0:3c:0a:b4:fb:d3:5a:ac:aa:f0:7a:78:85:8d:ed:62:7e:2a:
         7b:29:de:22:82:44:c5:44:cf:46:8f:a1:7b:31:71:fe:6b:f5:
         1c:8a:95:24:76:d8:dd:13:6a:e0:8f:6d:30:9e:9a:77:17:d9:
         77:9a:28:b6:d9:70:a2:b6:33:42:e6:f7:78:d8:9d:53:89:da:
         b6:ce:1a:c9:72:8d:fe:a7:cc:6d:8a:00:01:d0:fe:30:0e:a5:
         15:04:42:3b:a6:66:be:0b:15:6e:61:16:af:6f:12:d8:87:0b:
         ce:ff:e2:d6:e6:ba:61:e5:e3:71:1f:46:43:c0:d9:65:85:7c:
         c5:8d:0e:4a:d9:19:28:7e:cb:51:8a:07:9f:0b:48:24:ed:96:
         54:ee:f8:4b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0VomaGOULroyEIJ2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzgwZTY3OGYtYTUzZS00ZmE3LThjMmYtMTVmNmZjYTdj
OGY5MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk
NmFlMTNkODgtMDYyMi00NjA3LTg3ODAtMmQ0YzM4NmYyM2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnsndS/fjYQ+G7kIwVmk506gu7iwCo7B0k93
h0kpgkmum7hvxiEmMYRtC6k0cjlxWuCroAeTskYvI83QbOHAn0VSfyz9zsZg60fn
9ZoCtJRgeUilUns839Cn3+l84N5t24uI1FaEUvSKnrtDMeNSaAIkrARRi3+hZ2BN
IYG6TnL9UeLan4alppPl5gkMePSHlIG9rIKB+gsTD/92orbYVAUSd85YGKfs6xHN
AnP1uo/8MQl/ez+u/3iDxjfntDt5GPQNF2ldWIbVdaV2WOhFi+Mu+Xrl9NBFsFsM
yW7f1DA9GJXOUIWC4neJ+LQPRzbJr7hCWLYiP4wzAg0QBl4HiQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPOegJ+RHtuxPt0eAC6a+m5fMwhKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zODBl
Njc4Zi1hNTNlLTRmYTctOGMyZi0xNWY2ZmNhN2M4ZjkvYjk2ZDY2MWQtMTUxZS0z
ZTQwLTkyZDgtMzI0MDdlMWUzYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzgwZTY3OGYtYTUzZS00ZmE3LThj
MmYtMTVmNmZjYTdjOGY5LzM4MGU2NzhmLWE1M2UtNGZhNy04YzJmLTE1ZjZmY2E3
YzhmOS5jcmwwHwYDVR0jBBgwFoAUceIYEscGYUXf96HaASMjWlwC6WUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zODBlNjc4Zi1hNTNlLTRmYTctOGMyZi0xNWY2
ZmNhN2M4ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6ZwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAV0SQjAOv2W455BKAl4iXBlZSFxr9VHHVtXTrlg/FGrQi4xu+ArhF
3TyV0r3V6X2xWD3IwjXEkHiEkCJOPTnzYOag+FKBBL4Tk3HWDMY3HhdHx3094xGG
CQFL8MoAyfPDl7X1CBF4V8dUvPqR4DwKtPvTWqyq8Hp4hY3tYn4qeyneIoJExUTP
Ro+hezFx/mv1HIqVJHbY3RNq4I9tMJ6adxfZd5oottlworYzQub3eNidU4nats4a
yXKN/qfMbYoAAdD+MA6lFQRCO6ZmvgsVbmEWr28S2IcLzv/i1ua6YeXjcR9GQ8DZ
ZYV8xY0OStkZKH7LUYoHnwtIJO2WVO74Sw==
-----END CERTIFICATE-----
Generated at Sat Mar 21 17:53:04 2026 by rpki-client