Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa
File:                     c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa (raw, json)
Hash identifier:          kEZOvC/3BCWLoEQYULPJmzGIpmOxaa2xitNnhnHmLnw=
Subject key identifier:   D2:E3:3E:17:ED:FB:73:0D:71:BA:D7:8F:4F:80:7A:C9:7F:8E:40:62
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584D15A2645DD2F63227E296D9E0
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     36519
IP address blocks:        2602:80a:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:64:5d:d2:f6:32:27:e2:96:d9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=38f2520b-29c3-4470-bc89-7411139cb190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:46:31:39:0c:c2:a7:ec:ce:bb:ed:d7:f2:c3:
                    50:e2:af:0e:ef:33:ea:2e:e3:a5:8f:ed:88:65:cb:
                    ba:88:24:64:0b:f2:a7:ef:70:b2:c9:a8:22:ab:7a:
                    d6:7d:8e:d6:ad:03:af:71:16:b9:dd:27:b0:e6:4f:
                    c9:90:b1:7d:fa:df:b0:07:25:28:f2:f2:56:13:9b:
                    63:f5:15:f5:21:e3:c4:60:69:79:ae:60:32:31:2e:
                    5f:46:fd:75:9f:ab:2d:da:2f:75:d5:5e:87:a8:65:
                    dd:79:bd:ad:b3:e0:fb:74:79:d1:95:55:c9:7a:14:
                    3c:fb:1d:7e:c3:75:86:2e:0b:5a:bd:11:e6:6a:cb:
                    84:3a:e0:2b:01:b1:0c:d6:ab:85:37:68:5c:45:71:
                    1f:cc:7d:6c:6f:75:e4:5f:d2:1e:cb:6d:e3:b8:51:
                    b2:df:18:3c:90:8f:ab:73:01:37:68:04:e3:52:d7:
                    ce:60:7e:8b:b3:9a:cc:f5:89:52:65:57:0c:26:29:
                    4d:cd:17:4f:78:06:d6:0c:2c:8e:1a:3c:07:c4:6a:
                    fb:c3:65:35:07:98:4c:ce:d6:88:d4:57:64:91:f6:
                    d9:f9:d2:17:7b:c8:bd:0b:7c:f2:c3:18:2b:62:61:
                    6e:ea:bb:f2:33:0b:5d:50:26:84:2e:ee:98:77:07:
                    c1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E3:3E:17:ED:FB:73:0D:71:BA:D7:8F:4F:80:7A:C9:7F:8E:40:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:3b:aa:45:86:f4:c6:e3:01:25:49:58:66:37:9f:30:7a:0e:
         d4:f0:a3:4c:bb:1d:81:19:df:91:d2:e3:ed:1a:e5:02:35:f3:
         cd:55:e7:6a:c6:57:85:b7:d0:ac:b7:16:1c:2d:7d:2c:a1:5b:
         25:fa:da:2a:fa:95:9f:d8:91:a4:26:fd:b9:e1:e2:09:64:84:
         0e:7e:3c:7a:0b:2b:9a:98:76:51:49:ab:43:9b:7a:e1:6c:e2:
         87:d4:fc:0b:fa:b6:dd:54:9a:1c:94:37:7b:d1:1f:e3:49:fe:
         c7:0f:07:e7:c5:92:a4:bc:d1:be:cd:2e:10:be:5a:97:67:15:
         1a:c4:3c:c0:59:c1:9b:b2:1a:9a:bc:51:40:4e:7f:08:ca:4e:
         17:8b:f4:77:c4:38:7e:67:7c:b4:cb:a8:c1:23:96:b4:1c:c2:
         12:ee:9b:9e:2c:3c:27:94:45:76:46:76:02:fc:95:71:22:a4:
         00:a3:d5:6f:fa:7c:5f:4d:d3:35:d9:0f:c5:6d:f7:35:9b:fc:
         d6:9c:dc:28:e6:56:e1:8c:08:87:fd:06:9e:a2:0d:06:c6:4a:
         f8:7e:30:b8:45:d6:76:0c:02:3d:5f:fe:ff:7f:45:52:18:43:
         8c:8b:93:55:77:7e:be:60:5d:86:1f:70:56:a2:42:f5:d9:5b:
         7b:f2:8b:06
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0VomRd0vYyJ+KW2eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy
MDZiMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk
MzhmMjUyMGItMjljMy00NDcwLWJjODktNzQxMTEzOWNiMTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UYxOQzCp+zOu+3X8sNQ4q8O7zPqLuOlj+2I
Zcu6iCRkC/Kn73Cyyagiq3rWfY7WrQOvcRa53Sew5k/JkLF9+t+wByUo8vJWE5tj
9RX1IePEYGl5rmAyMS5fRv11n6st2i911V6HqGXdeb2ts+D7dHnRlVXJehQ8+x1+
w3WGLgtavRHmasuEOuArAbEM1quFN2hcRXEfzH1sb3XkX9Iey23juFGy3xg8kI+r
cwE3aATjUtfOYH6Ls5rM9YlSZVcMJilNzRdPeAbWDCyOGjwHxGr7w2U1B5hMztaI
1FdkkfbZ+dIXe8i9C3zywxgrYmFu6rvyMwtdUCaELu6YdwfBvQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNLjPhft+3MNcbrXj0+Aesl/jkBiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5
NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvYzgyOTM1YjYtNWQzZS0z
ZDVhLWExY2UtYTUzOTAxMGMwZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1
M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy
MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0
NjU1MjIwNmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIICvAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFI7qkWG9MbjASVJWGY3nzB6DtTwo0y7HYEZ35HS4+0a5QI1881V
52rGV4W30Ky3FhwtfSyhWyX62ir6lZ/YkaQm/bnh4glkhA5+PHoLK5qYdlFJq0Ob
euFs4ofU/Av6tt1UmhyUN3vRH+NJ/scPB+fFkqS80b7NLhC+WpdnFRrEPMBZwZuy
Gpq8UUBOfwjKTheL9HfEOH5nfLTLqMEjlrQcwhLum54sPCeURXZGdgL8lXEipACj
1W/6fF9N0zXZD8Vt9zWb/Nac3CjmVuGMCIf9Bp6iDQbGSvh+MLhF1nYMAj1f/v9/
RVIYQ4yLk1V3fr5gXYYfcFaiQvXZW3vyiwY=
-----END CERTIFICATE-----
Generated at Thu Mar 19 15:40:47 2026 by rpki-client