Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a1d9f10f-96c7-3a30-9b74-f496be85caae.roa
File:                     a1d9f10f-96c7-3a30-9b74-f496be85caae.roa (raw, json)
Hash identifier:          ukKvilJ9/fVj6dhYlsdiI7Cq7p4dneDcwRG8jJWvbR4=
Subject key identifier:   BD:97:F3:B6:A6:4F:E5:E4:2A:58:40:49:E1:5C:75:7D:54:D9:5E:54
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E0005CFBCD31BE34E0A774E20
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a1d9f10f-96c7-3a30-9b74-f496be85caae.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     62610
IP address blocks:        2602:ffe4:c8a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:cf:bc:d3:1b:e3:4e:0a:77:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=e254a6c6-f38f-4d95-95c6-9ccecf616efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0d:58:83:77:3b:82:1c:59:af:21:c9:c0:96:
                    46:e5:76:55:71:a1:2e:4a:f2:7d:31:a4:2c:ef:44:
                    1f:e1:99:89:d2:dd:2d:8e:a3:d0:a4:c5:14:4a:c8:
                    3c:cc:e4:23:db:d4:d2:54:3c:27:9f:24:88:80:ee:
                    7f:f2:26:11:be:2c:e4:43:08:b2:d4:47:c7:ef:f7:
                    e8:18:2a:81:55:27:14:69:c0:19:c6:a6:f9:db:66:
                    03:fa:84:f2:1d:05:c2:3d:db:b1:43:9a:39:2d:b4:
                    56:cd:5a:64:93:6e:62:56:dc:e3:01:22:c0:89:d4:
                    80:8c:8f:c7:08:c7:5a:a8:c6:7f:4d:76:96:bd:ce:
                    f1:00:69:5d:11:b3:6f:af:b2:29:5b:09:71:db:aa:
                    f9:07:61:a5:cc:34:20:e7:66:f7:80:5e:f6:a6:bf:
                    33:6b:1e:8e:94:fd:ba:6a:cc:79:ac:78:80:a5:77:
                    3a:29:41:52:df:68:17:18:a3:5a:66:94:39:1a:cf:
                    a8:d7:4c:e9:28:9a:00:a6:3e:f8:2f:ad:33:52:3f:
                    39:ae:85:e3:3e:dd:19:8d:47:be:c4:6d:84:2b:a6:
                    d8:83:b1:f1:c3:5b:2b:20:66:ce:43:f3:d6:68:77:
                    cd:0a:4e:ca:5c:c2:74:19:e3:1e:d2:83:86:78:23:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:97:F3:B6:A6:4F:E5:E4:2A:58:40:49:E1:5C:75:7D:54:D9:5E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a1d9f10f-96c7-3a30-9b74-f496be85caae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c8a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:0f:ea:05:fd:23:3e:09:3b:f5:1c:3c:92:c4:58:d3:71:54:
         a4:93:c2:92:80:e1:52:a4:30:4c:1b:26:f4:9d:ee:3c:77:34:
         49:b4:b9:f7:28:4a:33:06:bc:68:c1:b5:e3:5c:54:8c:28:5e:
         d9:f8:8c:ce:bf:56:e0:7b:78:da:ae:40:87:8f:09:9f:d8:1a:
         84:4d:df:4f:8d:d5:d0:82:bc:4c:77:ad:07:46:b5:2f:06:80:
         0e:ff:6a:ba:65:91:b2:c4:0a:48:a3:16:20:6b:e2:2b:00:c1:
         19:e6:d7:c3:ca:35:fb:de:33:4b:ef:f5:b0:02:5c:62:4c:0a:
         36:35:2a:23:3f:25:bb:f3:5e:46:29:a2:db:b6:c7:81:c4:48:
         ed:c5:eb:ac:3b:c6:ef:2d:71:41:f6:0d:85:c9:3f:8f:5e:31:
         d6:d8:3e:53:16:96:e1:78:1c:9c:38:81:1a:91:ac:e5:a4:b4:
         cb:be:65:f3:82:0e:27:4b:be:e8:58:20:49:e7:6a:b9:b5:5b:
         fd:b2:1e:a0:08:a7:29:ce:aa:df:c8:4c:85:dc:38:e1:3d:ad:
         0d:1b:61:02:26:d9:6f:9c:7d:0c:72:00:7f:49:24:4b:fd:f6:
         c2:c1:2e:ad:2f:1a:f6:5e:c9:30:33:4c:6c:8f:55:b5:de:c8:
         1b:8a:fe:c8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ABc+80xvjTgp3TiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
ZTI1NGE2YzYtZjM4Zi00ZDk1LTk1YzYtOWNjZWNmNjE2ZWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7g1Yg3c7ghxZryHJwJZG5XZVcaEuSvJ9MaQs
70Qf4ZmJ0t0tjqPQpMUUSsg8zOQj29TSVDwnnySIgO5/8iYRvizkQwiy1EfH7/fo
GCqBVScUacAZxqb522YD+oTyHQXCPduxQ5o5LbRWzVpkk25iVtzjASLAidSAjI/H
CMdaqMZ/TXaWvc7xAGldEbNvr7IpWwlx26r5B2GlzDQg52b3gF72pr8zax6OlP26
asx5rHiApXc6KUFS32gXGKNaZpQ5Gs+o10zpKJoApj74L60zUj85roXjPt0ZjUe+
xG2EK6bYg7Hxw1srIGbOQ/PWaHfNCk7KXMJ0GeMe0oOGeCO1cQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL2X87amT+XkKlhASeFcdX1U2V5UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYTFkOWYxMGYtOTZjNy0z
YTMwLTliNzQtZjQ5NmJlODVjYWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL/5AyK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABQP6gX9Iz4JO/UcPJLEWNNxVKSTwpKA4VKkMEwbJvSd7jx3NEm0
ufcoSjMGvGjBteNcVIwoXtn4jM6/VuB7eNquQIePCZ/YGoRN30+N1dCCvEx3rQdG
tS8GgA7/arplkbLECkijFiBr4isAwRnm18PKNfveM0vv9bACXGJMCjY1KiM/Jbvz
XkYpotu2x4HESO3F66w7xu8tcUH2DYXJP49eMdbYPlMWluF4HJw4gRqRrOWktMu+
ZfOCDidLvuhYIEnnarm1W/2yHqAIpynOqt/ITIXcOOE9rQ0bYQIm2W+cfQxyAH9J
JEv99sLBLq0vGvZeyTAzTGyPVbXeyBuK/sg=
-----END CERTIFICATE-----
Generated at Sat Jun 6 11:14:19 2026 by rpki-client