Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/49142997-3803-3a83-97cc-18506cb9ec80.roa
File:                     49142997-3803-3a83-97cc-18506cb9ec80.roa (raw, json)
Hash identifier:          PFU5zu0uhr/xH1+1qGrpaQu5ByV1mB21FZsyos0Nims=
Subject key identifier:   B0:99:D6:0A:F2:77:B1:96:5B:6D:45:1A:61:AF:8A:51:38:EC:1D:45
Certificate issuer:       /CN=932105b1-ce56-44a7-9670-6f4e56578ef8
Certificate serial:       010D0C9F4328584D19B4DBB556C3FE0DE60A9CA0
Authority key identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/49142997-3803-3a83-97cc-18506cb9ec80.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     63018
IP address blocks:        2602:f7f8:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:db:b5:56:c3:fe:0d:e6:0a:9c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932105b1-ce56-44a7-9670-6f4e56578ef8
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=96b7a926-bcd9-4168-8228-395c4af6ea09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:5e:93:7c:11:b5:2e:d5:ed:91:f8:ba:fa:
                    f2:82:65:21:4b:46:44:34:72:c2:f6:59:e8:51:c3:
                    be:fa:86:1d:25:c4:b9:72:89:43:2c:cf:7d:b0:80:
                    3a:fb:b2:6f:88:a1:46:9e:8b:27:22:29:9e:5d:1a:
                    ae:6e:0a:eb:7d:c1:54:ff:70:59:17:71:07:33:80:
                    a8:06:ae:23:4f:91:24:e4:67:1a:7f:ee:9d:3d:20:
                    54:a9:f8:ba:ea:f3:62:38:9c:e1:cd:53:f7:43:7e:
                    f8:00:07:bc:9e:30:9b:cf:85:89:d1:04:dd:2f:70:
                    6c:1f:67:b1:e1:e4:82:65:51:38:48:82:14:25:70:
                    96:ed:7e:5d:12:85:5d:ad:f6:92:e2:f0:89:32:de:
                    7a:a3:b2:01:98:e1:86:93:42:f8:9d:65:6b:53:c2:
                    fa:64:32:83:4c:c0:88:a9:55:3a:89:b7:cb:7c:61:
                    a3:05:d7:2a:1c:d8:7b:9c:d9:e1:db:3a:c4:b9:81:
                    e1:6e:0b:2c:6a:9c:13:e3:7e:26:86:6c:54:44:4b:
                    5d:c2:25:55:b0:56:f6:9d:bf:24:98:cd:e4:b6:9b:
                    b9:4f:d2:5e:9e:ff:ac:79:a5:ae:fa:18:21:a9:97:
                    f4:5a:9f:1c:00:cb:a1:d4:c4:1e:2f:7e:da:41:3f:
                    a0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:99:D6:0A:F2:77:B1:96:5B:6D:45:1A:61:AF:8A:51:38:EC:1D:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/49142997-3803-3a83-97cc-18506cb9ec80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7f8:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:62:c9:0c:57:ba:31:d4:6b:ba:29:5c:50:b4:f0:7f:1c:5c:
         ab:e2:ed:14:ab:d1:0d:48:d9:ba:0a:27:6d:05:22:48:bc:35:
         40:e1:03:ab:09:f1:f6:c6:23:0c:d2:44:c4:e0:3d:31:1b:1c:
         9c:ea:d7:d3:80:6f:c3:09:b4:96:d7:fe:02:b6:24:6f:a8:1c:
         53:be:07:65:3e:6d:7a:bc:1c:00:0f:e2:8c:77:d5:b0:4e:ef:
         5c:43:53:a3:12:4f:eb:06:af:ce:42:be:2d:d6:06:2f:b7:b9:
         be:13:b0:4d:9a:41:e0:af:d5:c8:a9:68:17:ac:f9:74:fc:37:
         0f:a9:76:2e:25:04:a0:12:3e:40:7a:41:68:79:7a:7a:ba:cd:
         83:13:59:60:82:cf:09:1d:09:c5:cc:f1:77:ab:a5:72:35:fb:
         24:c3:c4:3d:64:2f:a3:0e:cb:28:ef:13:bd:58:f3:22:e0:0e:
         cc:4d:d7:40:f0:a7:5d:91:68:ac:fd:f0:ff:8b:10:d6:40:19:
         49:49:07:45:4b:be:9d:d0:94:20:15:51:0f:1d:f3:53:8f:c6:
         0f:ef:25:7e:47:44:9b:74:47:96:1c:28:09:aa:5c:eb:b4:d4:
         26:7c:59:f6:bd:09:c7:a7:e7:3b:ae:29:e4:22:6b:83:9c:89:
         ae:16:c3:ae
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0ZtNu1VsP+DeYKnKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTMyMTA1YjEtY2U1Ni00NGE3LTk2NzAtNmY0ZTU2NTc4
ZWY4MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk
OTZiN2E5MjYtYmNkOS00MTY4LTgyMjgtMzk1YzRhZjZlYTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzONek3wRtS7V7ZH4uvrygmUhS0ZENHLC9lno
UcO++oYdJcS5colDLM99sIA6+7JviKFGnosnIimeXRqubgrrfcFU/3BZF3EHM4Co
Bq4jT5Ek5Gcaf+6dPSBUqfi66vNiOJzhzVP3Q374AAe8njCbz4WJ0QTdL3BsH2ex
4eSCZVE4SIIUJXCW7X5dEoVdrfaS4vCJMt56o7IBmOGGk0L4nWVrU8L6ZDKDTMCI
qVU6ibfLfGGjBdcqHNh7nNnh2zrEuYHhbgssapwT434mhmxUREtdwiVVsFb2nb8k
mM3ktpu5T9Jenv+seaWu+hghqZf0Wp8cAMuh1MQeL37aQT+gNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLCZ1gryd7GWW21FGmGvilE47B1FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MzIx
MDViMS1jZTU2LTQ0YTctOTY3MC02ZjRlNTY1NzhlZjgvNDkxNDI5OTctMzgwMy0z
YTgzLTk3Y2MtMTg1MDZjYjllYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTMyMTA1YjEtY2U1Ni00NGE3LTk2
NzAtNmY0ZTU2NTc4ZWY4LzkzMjEwNWIxLWNlNTYtNDRhNy05NjcwLTZmNGU1NjU3
OGVmOC5jcmwwHwYDVR0jBBgwFoAU2oXXhzBPtQ/DehLEbjKC7ia9QuYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MzIxMDViMS1jZTU2LTQ0YTctOTY3MC02ZjRl
NTY1NzhlZjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3+AAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB5iyQxXujHUa7opXFC08H8cXKvi7RSr0Q1I2boKJ20FIki8NUDh
A6sJ8fbGIwzSRMTgPTEbHJzq19OAb8MJtJbX/gK2JG+oHFO+B2U+bXq8HAAP4ox3
1bBO71xDU6MST+sGr85Cvi3WBi+3ub4TsE2aQeCv1cipaBes+XT8Nw+pdi4lBKAS
PkB6QWh5enq6zYMTWWCCzwkdCcXM8XerpXI1+yTDxD1kL6MOyyjvE71Y8yLgDsxN
10Dwp12RaKz98P+LENZAGUlJB0VLvp3QlCAVUQ8d81OPxg/vJX5HRJt0R5YcKAmq
XOu01CZ8Wfa9Ccen5zuuKeQia4Ocia4Ww64=
-----END CERTIFICATE-----
Generated at Tue Mar 10 09:13:06 2026 by rpki-client