Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/5b2f3d47-01c0-385d-80b6-55e854983c66.roa
File:                     5b2f3d47-01c0-385d-80b6-55e854983c66.roa (raw, json)
Hash identifier:          5Sh6DGkfZSK+zpIm/wOx/r/cbzxlKKATmXDAIB1g/A8=
Subject key identifier:   9F:57:B4:27:92:05:0B:6E:F1:19:34:FF:D3:65:D5:DB:51:B3:07:C6
Certificate issuer:       /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial:       010D0C9F4328584DDA55CDEA826F53B398E30480
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/5b2f3d47-01c0-385d-80b6-55e854983c66.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     174
IP address blocks:        2602:fa3d:a93::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:cd:ea:82:6f:53:b3:98:e3:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=39a2adae-c4ad-4b03-af52-01917adc7f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:be:c6:e0:6a:06:c3:4d:52:ed:70:c1:c5:
                    fa:f7:0c:df:74:cd:1d:f1:2f:df:ee:b6:57:56:1d:
                    5d:67:78:ed:05:ac:56:be:77:06:4f:e7:aa:65:87:
                    01:1e:7a:b4:b0:cf:f4:17:d1:32:19:6d:6f:1a:98:
                    e3:a4:f3:12:ae:94:d2:48:f6:0c:90:13:91:51:76:
                    90:25:6e:8a:4d:d1:c1:d4:ef:97:52:4d:e2:73:02:
                    30:c2:79:05:75:43:bd:1d:05:b0:d2:b4:05:a3:7d:
                    00:ac:94:ae:1e:1f:cb:14:6d:4c:fa:55:98:b0:d3:
                    21:28:8f:53:59:6e:ef:99:9d:df:20:54:9e:55:8d:
                    ed:72:c3:b7:25:99:f9:b2:bf:0d:a1:b6:a4:a7:0a:
                    5b:f9:41:31:e1:a9:64:ef:66:fa:29:39:1c:c8:03:
                    47:d0:d3:6c:f4:1e:08:6f:fe:5c:2a:8e:08:82:3e:
                    c3:57:16:fd:78:29:f5:3b:be:66:be:49:c3:66:48:
                    c0:1c:2d:cc:ae:bf:96:83:3c:a4:cf:43:5c:f9:9e:
                    82:a7:71:9b:5f:bb:66:9b:61:9b:a5:96:c1:cf:5a:
                    6a:70:9a:6f:7a:9f:eb:a7:ef:ca:ca:e2:c1:9d:13:
                    16:d5:68:2e:00:3d:c7:54:93:a6:56:89:e3:73:d6:
                    62:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:57:B4:27:92:05:0B:6E:F1:19:34:FF:D3:65:D5:DB:51:B3:07:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/5b2f3d47-01c0-385d-80b6-55e854983c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa3d:a93::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0a:5a:cc:a7:c2:0b:29:83:12:57:be:9d:fb:60:7f:89:33:
         23:bd:a6:d1:f9:ce:81:fd:5d:81:28:f1:24:d3:68:96:da:58:
         9a:6c:c3:e7:8f:fd:18:bc:a5:22:5f:39:66:62:63:e7:32:cb:
         d1:48:d7:f5:78:0f:30:ed:db:50:e3:61:fc:ca:b6:da:b6:70:
         02:86:3a:a1:e3:61:98:13:dc:9c:c8:e0:e5:0d:4d:9e:36:6a:
         53:a5:e0:ee:72:a2:2f:bf:45:f6:f4:62:66:fc:cb:cf:99:3e:
         84:06:00:50:64:46:28:26:48:51:32:9c:b8:ce:e5:b6:2d:7b:
         a1:54:f9:95:b9:05:fd:de:be:c9:9d:cd:98:80:4d:cf:86:5a:
         c4:6b:89:9f:8c:83:ed:e6:84:d1:07:5b:cf:1f:44:53:a7:e2:
         14:5c:ee:74:32:bb:8f:9a:96:7e:c3:dc:0f:60:11:3e:bf:23:
         f6:74:09:15:1b:6e:60:bd:bb:bc:93:1a:fe:b2:95:00:42:30:
         d1:1d:34:15:c5:76:27:e9:ae:3b:49:00:85:6b:07:f4:53:04:
         3d:78:8e:aa:a7:65:57:e4:bd:bf:2a:08:70:6b:78:4e:24:e4:
         c4:0d:7e:d7:5c:88:73:6f:30:a5:34:6e:48:ce:1e:04:4e:22:
         2a:d3:f2:ad
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3aVc3qgm9Ts5jjBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJhMDMwNjQtMDI4OC00ZWM0LWI3M2YtZDZiYTFkNjM5
OTYxMB4XDTI2MDUxNjEzMDAzMVoXDTI2MDgxNDEzMDAzMVowLzEtMCsGA1UEAxMk
MzlhMmFkYWUtYzRhZC00YjAzLWFmNTItMDE5MTdhZGM3ZjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNW+xuBqBsNNUu1wwcX69wzfdM0d8S/f7rZX
Vh1dZ3jtBaxWvncGT+eqZYcBHnq0sM/0F9EyGW1vGpjjpPMSrpTSSPYMkBORUXaQ
JW6KTdHB1O+XUk3icwIwwnkFdUO9HQWw0rQFo30ArJSuHh/LFG1M+lWYsNMhKI9T
WW7vmZ3fIFSeVY3tcsO3JZn5sr8Nobakpwpb+UEx4alk72b6KTkcyANH0NNs9B4I
b/5cKo4Igj7DVxb9eCn1O75mvknDZkjAHC3Mrr+Wgzykz0Nc+Z6Cp3GbX7tmm2Gb
pZbBz1pqcJpvep/rp+/KyuLBnRMW1WguAD3HVJOmVonjc9ZiOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ9XtCeSBQtu8Rk0/9Nl1dtRswfGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YmEw
MzA2NC0wMjg4LTRlYzQtYjczZi1kNmJhMWQ2Mzk5NjEvNWIyZjNkNDctMDFjMC0z
ODVkLTgwYjYtNTVlODU0OTgzYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGJhMDMwNjQtMDI4OC00ZWM0LWI3
M2YtZDZiYTFkNjM5OTYxLzRiYTAzMDY0LTAyODgtNGVjNC1iNzNmLWQ2YmExZDYz
OTk2MS5jcmwwHwYDVR0jBBgwFoAU1bCh9ujIDJsNuG89eCAve3nUrdUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80YmEwMzA2NC0wMjg4LTRlYzQtYjczZi1kNmJh
MWQ2Mzk5NjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6PQqT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHAKWsynwgspgxJXvp37YH+JMyO9ptH5zoH9XYEo8STTaJbaWJps
w+eP/Ri8pSJfOWZiY+cyy9FI1/V4DzDt21DjYfzKttq2cAKGOqHjYZgT3JzI4OUN
TZ42alOl4O5yoi+/Rfb0Ymb8y8+ZPoQGAFBkRigmSFEynLjO5bYte6FU+ZW5Bf3e
vsmdzZiATc+GWsRriZ+Mg+3mhNEHW88fRFOn4hRc7nQyu4+aln7D3A9gET6/I/Z0
CRUbbmC9u7yTGv6ylQBCMNEdNBXFdifprjtJAIVrB/RTBD14jqqnZVfkvb8qCHBr
eE4k5MQNftdciHNvMKU0bkjOHgROIirT8q0=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:31:22 2026 by rpki-client