Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/3d3b872a-6456-3cf2-9c9f-b5b3162691e5.roa
File:                     3d3b872a-6456-3cf2-9c9f-b5b3162691e5.roa (raw, json)
Hash identifier:          dWOgM44tMZvgfAwlASKJLY8ZC6pSWUmIvs47vjWJOUI=
Subject key identifier:   ED:88:87:FB:B3:82:B4:F7:ED:B2:4B:E4:EC:E7:2A:42:C5:8A:F5:74
Certificate issuer:       /CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f
Certificate serial:       010D0C9F4328584D9B855583B1E0283F64CA39C0
Authority key identifier: CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/3d3b872a-6456-3cf2-9c9f-b5b3162691e5.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     400701
IP address blocks:        2602:fb74::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:55:83:b1:e0:28:3f:64:ca:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=c959326e-15e8-4bd2-8aff-b87b9b42275e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f2:31:4c:eb:29:60:e7:d0:48:4a:34:93:aa:
                    40:75:a0:0c:7a:18:9e:93:c8:e4:97:ff:ca:50:a1:
                    ed:d8:d9:21:49:63:cc:8e:5e:87:d0:4a:80:7e:df:
                    15:24:ce:c3:64:23:fe:37:35:a6:d3:23:89:fa:02:
                    8a:94:de:10:ab:11:80:73:46:12:b1:c0:eb:c0:a8:
                    71:73:67:08:d3:a8:b3:00:9a:6c:fe:1d:e0:c4:f4:
                    b1:8c:51:dc:be:d9:e2:b1:30:d3:52:b7:8b:36:d5:
                    c3:9d:8b:f6:af:f1:10:0e:c9:58:93:35:e6:6f:85:
                    58:d2:2c:96:f4:02:0c:e4:53:4a:b1:a1:df:7d:31:
                    12:a9:f6:83:22:ab:12:77:9e:ab:19:c0:32:b1:63:
                    87:cf:2f:fb:6d:6a:21:48:58:b2:dc:43:e0:6b:c8:
                    83:3c:28:73:b1:e9:eb:ee:78:6d:85:2b:57:49:fb:
                    97:df:c2:89:78:f7:c7:a9:cb:37:6b:5e:a0:bd:e2:
                    a7:0e:1a:4f:df:03:3e:85:4d:8c:b9:70:74:92:ad:
                    27:a2:57:33:e3:81:63:2b:32:c9:ff:bb:22:a7:0a:
                    f2:9c:75:57:2f:67:9c:88:bb:af:b9:54:d1:a2:d2:
                    b4:80:72:bb:18:3b:50:5c:a8:ab:54:a5:17:db:44:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:88:87:FB:B3:82:B4:F7:ED:B2:4B:E4:EC:E7:2A:42:C5:8A:F5:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/3d3b872a-6456-3cf2-9c9f-b5b3162691e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl

            X509v3 Authority Key Identifier:
                keyid:CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb74::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:41:1b:a5:2b:27:4f:28:d2:9f:3a:9e:f6:4f:0c:2b:91:9f:
         18:f0:ad:c2:7a:5a:02:e7:be:c6:75:b1:41:94:88:3f:4f:31:
         c1:f4:80:eb:f3:b8:77:9b:21:99:65:de:a4:14:d6:e7:27:9c:
         f1:da:be:0f:0f:ab:36:62:db:cd:d6:8c:2b:bb:3f:00:90:da:
         24:68:66:a0:67:8f:78:b3:a7:ff:a9:ad:8c:6f:8c:58:29:3d:
         a0:df:ad:9f:92:2d:8d:88:39:de:1f:95:c4:32:37:db:f3:a5:
         65:3b:48:b8:30:03:22:f1:44:2b:f8:99:d4:0b:94:64:c7:16:
         81:d7:c5:0b:07:3f:c2:96:a1:a6:c5:f3:08:dd:3d:8b:8a:05:
         97:eb:bc:55:c2:a7:9c:b2:43:67:18:8a:59:66:05:c9:6c:fb:
         74:48:fd:29:72:60:07:7b:b5:5c:b6:84:f9:51:a2:ae:ce:28:
         dc:f9:ec:7e:65:32:f2:99:9a:f0:8d:cb:d3:8a:66:aa:84:41:
         72:c6:1b:e0:f8:b0:27:30:59:dd:83:0a:b3:3a:70:7a:e3:e4:
         f6:77:aa:ab:f9:3d:a6:24:24:a9:6d:b3:c4:eb:94:2c:19:9f:
         94:9a:87:01:7d:01:cc:a2:bc:02:95:06:8a:21:f7:8f:c5:b7:
         cc:37:94:2b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2bhVWDseAoP2TKOcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmN2Y2ZmItMGJhZS00YzIxLWJjZjItMmY5OTg1NDFk
YjNmMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk
Yzk1OTMyNmUtMTVlOC00YmQyLThhZmYtYjg3YjliNDIyNzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfIxTOspYOfQSEo0k6pAdaAMehiek8jkl//K
UKHt2NkhSWPMjl6H0EqAft8VJM7DZCP+NzWm0yOJ+gKKlN4QqxGAc0YSscDrwKhx
c2cI06izAJps/h3gxPSxjFHcvtnisTDTUreLNtXDnYv2r/EQDslYkzXmb4VY0iyW
9AIM5FNKsaHffTESqfaDIqsSd56rGcAysWOHzy/7bWohSFiy3EPga8iDPChzsenr
7nhthStXSfuX38KJePfHqcs3a16gveKnDhpP3wM+hU2MuXB0kq0nolcz44FjKzLJ
/7sipwrynHVXL2eciLuvuVTRotK0gHK7GDtQXKirVKUX20QmeQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFO2Ih/uzgrT37bJL5OznKkLFivV0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kY2Y3
ZjZmYi0wYmFlLTRjMjEtYmNmMi0yZjk5ODU0MWRiM2YvM2QzYjg3MmEtNjQ1Ni0z
Y2YyLTljOWYtYjViMzE2MjY5MWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGNmN2Y2ZmItMGJhZS00YzIxLWJj
ZjItMmY5OTg1NDFkYjNmL2RjZjdmNmZiLTBiYWUtNGMyMS1iY2YyLTJmOTk4NTQx
ZGIzZi5jcmwwHwYDVR0jBBgwFoAUzC+dbcy2HM4e41A5Y5HqY9GPuAIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kY2Y3ZjZmYi0wYmFlLTRjMjEtYmNmMi0yZjk5
ODU0MWRiM2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7dAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAT0EbpSsnTyjSnzqe9k8MK5GfGPCtwnpaAue+xnWxQZSIP08xwfSA
6/O4d5shmWXepBTW5yec8dq+Dw+rNmLbzdaMK7s/AJDaJGhmoGePeLOn/6mtjG+M
WCk9oN+tn5ItjYg53h+VxDI32/OlZTtIuDADIvFEK/iZ1AuUZMcWgdfFCwc/wpah
psXzCN09i4oFl+u8VcKnnLJDZxiKWWYFyWz7dEj9KXJgB3u1XLaE+VGirs4o3Pns
fmUy8pma8I3L04pmqoRBcsYb4PiwJzBZ3YMKszpweuPk9neqq/k9piQkqW2zxOuU
LBmflJqHAX0BzKK8ApUGiiH3j8W3zDeUKw==
-----END CERTIFICATE-----
Generated at Wed Apr 29 15:32:30 2026 by rpki-client