Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/81ca1e82-7390-35b3-93a1-140d95ece5fd.roa
File:                     81ca1e82-7390-35b3-93a1-140d95ece5fd.roa (raw, json)
Hash identifier:          8pj/Pxu0zfROFrzYZOnHHhNVSRShXxNlCxMsQ3h476s=
Subject key identifier:   EA:A0:82:DD:13:A0:92:22:FB:EE:B3:19:26:A6:B3:6D:E8:BE:CF:88
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584C4F6BC608E5B03CAEDD19A200
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/81ca1e82-7390-35b3-93a1-140d95ece5fd.roa
Signing time:             Fri 26 Dec 2025 02:00:32 +0000
ROA not before:           Fri 26 Dec 2025 02:00:32 +0000
ROA not after:            Thu 26 Mar 2026 01:00:32 +0000
asID:                     62513
IP address blocks:        2602:fd50:8200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:4f:6b:c6:08:e5:b0:3c:ae:dd:19:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Dec 26 02:00:32 2025 GMT
            Not After : Mar 26 01:00:32 2026 GMT
        Subject: CN=f74c0f39-3741-486e-a1cb-eb29d081d79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fb:ac:83:02:3b:f7:38:e5:b6:70:67:79:89:
                    77:05:ca:7e:1f:0e:f7:71:7d:cc:5c:6a:4c:ce:36:
                    02:13:09:ce:2e:e0:26:dc:b5:f9:86:28:ec:cd:73:
                    73:38:e5:01:54:d2:2e:40:c8:7e:65:c2:e0:64:31:
                    46:a8:25:09:d0:0b:cb:9c:51:50:17:ed:b3:96:fb:
                    b4:6f:31:bb:63:77:fb:f3:63:4e:2a:b1:36:39:5a:
                    a6:87:de:57:49:09:79:27:f3:ea:b5:8a:0b:aa:40:
                    3d:3b:29:fe:6e:8c:4a:27:bd:40:e4:13:70:77:1c:
                    59:60:f2:f6:78:45:60:ae:4d:fc:33:68:fd:a5:2a:
                    00:7a:0f:54:f2:34:ba:5a:01:87:39:02:43:6e:5b:
                    1f:a3:cc:af:df:de:23:5d:17:0e:c2:a0:0e:60:1a:
                    16:a3:7a:99:ce:dc:62:18:eb:f4:50:e6:f9:12:53:
                    ee:a7:e4:b0:bb:77:06:c1:4d:e7:d3:69:2f:75:2b:
                    d5:42:11:f3:b9:b5:2b:2a:25:8f:f6:a0:48:a6:e5:
                    a5:48:50:a8:bc:54:b8:b5:2c:28:fb:43:48:dd:b5:
                    95:9f:d4:b7:79:27:7f:7a:78:11:c2:a6:74:47:f1:
                    f6:57:b8:ec:9f:0d:78:89:99:7a:65:a8:aa:38:5d:
                    cf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A0:82:DD:13:A0:92:22:FB:EE:B3:19:26:A6:B3:6D:E8:BE:CF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/81ca1e82-7390-35b3-93a1-140d95ece5fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:8200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:09:72:f7:05:41:71:66:95:52:9d:4d:bf:94:18:e7:15:c0:
         73:d6:13:94:5d:1d:59:d0:25:ba:c3:b9:68:05:e3:3e:47:05:
         a7:d6:e2:7a:0f:8f:8e:7b:8b:45:82:4a:d5:14:fd:29:b4:cd:
         96:97:83:9b:74:d7:d7:4e:e2:bd:f7:23:0a:a8:68:82:2e:53:
         b0:6e:c7:08:02:3e:6c:7a:93:af:15:24:8f:a6:21:74:e0:07:
         28:85:7e:b4:55:b1:49:c6:70:c9:7a:c9:53:76:0b:88:a9:04:
         a6:1d:8d:a5:ea:3e:e2:a4:99:71:cb:93:ef:b9:15:ea:8d:08:
         b2:9f:38:24:f3:90:95:6b:61:b6:87:2a:cd:f7:44:47:02:58:
         c7:86:09:5f:b3:1e:54:af:e6:b2:43:36:2c:23:21:20:82:84:
         b0:48:8e:ba:4c:32:72:bf:0a:f6:7c:af:fd:ad:bb:42:6a:f5:
         d0:fd:08:20:35:f7:7f:e6:d3:ae:60:4c:8c:9e:7c:85:fe:6a:
         d0:eb:2c:1e:c2:5c:05:5b:5e:e0:49:59:60:ed:98:ad:c5:7d:
         3b:4c:a4:20:16:91:af:14:15:36:16:04:03:13:d0:18:05:de:
         61:c2:5a:30:31:5b:ad:6a:1f:a5:97:9b:bf:93:72:5b:6b:c6:
         28:4d:21:9c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExPa8YI5bA8rt0ZogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3
ZWU3MB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk
Zjc0YzBmMzktMzc0MS00ODZlLWExY2ItZWIyOWQwODFkNzliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvusgwI79zjltnBneYl3Bcp+Hw73cX3MXGpM
zjYCEwnOLuAm3LX5hijszXNzOOUBVNIuQMh+ZcLgZDFGqCUJ0AvLnFFQF+2zlvu0
bzG7Y3f782NOKrE2OVqmh95XSQl5J/PqtYoLqkA9Oyn+boxKJ71A5BNwdxxZYPL2
eEVgrk38M2j9pSoAeg9U8jS6WgGHOQJDblsfo8yv394jXRcOwqAOYBoWo3qZztxi
GOv0UOb5ElPup+Swu3cGwU3n02kvdSvVQhHzubUrKiWP9qBIpuWlSFCovFS4tSwo
+0NI3bWVn9S3eSd/engRwqZ0R/H2V7jsnw14iZl6ZaiqOF3PwwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOqggt0ToJIi++6zGSams23ovs+IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl
NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvODFjYTFlODItNzM5MC0z
NWIzLTkzYTEtMTQwZDk1ZWNlNWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3
YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1
N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw
MWU3NTdlZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9UIIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAnwly9wVBcWaVUp1Nv5QY5xXAc9YTlF0dWdAlusO5aAXjPkcFp9bi
eg+PjnuLRYJK1RT9KbTNlpeDm3TX107ivfcjCqhogi5TsG7HCAI+bHqTrxUkj6Yh
dOAHKIV+tFWxScZwyXrJU3YLiKkEph2Npeo+4qSZccuT77kV6o0Isp84JPOQlWth
tocqzfdERwJYx4YJX7MeVK/mskM2LCMhIIKEsEiOukwycr8K9nyv/a27Qmr10P0I
IDX3f+bTrmBMjJ58hf5q0OssHsJcBVte4ElZYO2YrcV9O0ykIBaRrxQVNhYEAxPQ
GAXeYcJaMDFbrWofpZebv5NyW2vGKE0hnA==
-----END CERTIFICATE-----
Generated at Thu Feb 26 12:33:55 2026 by rpki-client