Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/4694d567-b90d-3acf-9655-996af58f9619.roa
File:                     4694d567-b90d-3acf-9655-996af58f9619.roa (raw, json)
Hash identifier:          RCVw2TC5XPZmBJm066yObsjV3mbN26SXR9WpZcMbLsA=
Subject key identifier:   99:F4:82:BE:29:83:9E:18:41:4E:CE:82:92:39:A7:2D:64:1C:E5:D0
Certificate issuer:       /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
Certificate serial:       010D0C9F4328584DBFD056B1A60B77F5059C9780
Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/4694d567-b90d-3acf-9655-996af58f9619.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     399214
IP address blocks:        2602:fb0a::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:56:b1:a6:0b:77:f5:05:9c:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=fe92e976-2f21-4c3b-9311-46adc4c1bd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:f7:ad:3c:46:03:c2:d6:1c:2a:29:8d:52:
                    d1:a5:68:63:fd:0e:a3:f1:95:f8:53:bb:fc:0f:9f:
                    28:c8:2f:64:b7:27:71:28:1c:e5:9a:cd:2a:9e:fd:
                    14:e6:5f:28:9f:8f:99:bf:e3:73:4e:43:40:96:60:
                    77:33:96:9b:51:0e:0e:7e:d0:8c:31:4b:a7:83:8e:
                    55:39:27:0f:b7:26:a1:00:9f:af:a6:5e:c8:7d:bf:
                    3a:da:c7:39:5f:90:71:03:ff:5c:84:ad:2b:de:6d:
                    a7:0a:13:51:6f:d0:51:ac:0b:3f:e7:53:4b:2f:3e:
                    d9:0c:e2:8e:7b:61:07:f6:25:dc:68:98:ab:1e:9d:
                    f7:cc:e1:36:4e:d8:42:91:c1:46:20:5c:17:44:42:
                    60:b0:58:a7:ab:85:d8:d1:6d:5d:e6:6c:ac:51:20:
                    09:fb:53:8d:ca:1d:d2:e1:97:15:ec:70:89:95:31:
                    bc:b0:a7:5f:51:9e:56:7d:76:e3:12:85:13:b6:fa:
                    10:50:43:25:06:b5:06:08:56:b9:3e:4f:5e:4f:66:
                    ad:c2:26:5a:82:aa:f8:2a:d1:43:83:b7:d0:7e:34:
                    ea:a0:83:76:d6:22:ae:92:a4:0b:4f:74:89:36:f5:
                    99:f4:84:82:2c:9c:ba:3e:ce:ec:5a:6d:21:32:23:
                    a7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F4:82:BE:29:83:9E:18:41:4E:CE:82:92:39:A7:2D:64:1C:E5:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/4694d567-b90d-3acf-9655-996af58f9619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl

            X509v3 Authority Key Identifier:
                keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb0a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:62:88:19:19:72:07:3b:8b:21:60:3d:3b:de:8b:c0:12:17:
         6b:0f:31:be:e7:fb:b4:6a:74:5b:b3:c9:8c:93:d3:1d:bf:05:
         9a:3b:62:9e:ff:a8:bb:6c:2d:90:2a:ba:c7:a4:73:e7:f2:ba:
         9c:e4:59:3d:77:34:f1:f0:67:b1:5e:ba:73:fc:fc:84:f9:bf:
         4a:0a:19:84:9e:24:48:ea:9f:cf:89:11:d9:e8:a8:ba:53:82:
         e9:ec:39:c4:61:52:7e:27:36:48:c9:bf:c9:d7:6a:e8:17:7a:
         21:1d:5d:b3:ef:cd:6e:08:cb:cf:4e:dd:4d:4c:a4:f3:df:2b:
         60:28:3c:96:df:c6:0e:b4:5f:79:01:ba:c9:f0:68:7c:91:6d:
         29:97:0c:f6:13:e5:92:2e:6c:be:7f:66:85:e5:62:b0:cf:2a:
         a8:24:3e:e5:5d:34:57:41:b2:ab:e7:ef:60:25:96:3c:a9:87:
         71:93:87:51:61:ac:bf:e6:c4:aa:3f:39:0a:76:b8:fd:79:9a:
         21:a2:f4:b5:bc:04:0f:1c:2e:6c:c5:48:f4:c7:30:94:c5:45:
         e5:ba:b1:8a:7d:bd:b7:cd:a2:10:13:c2:90:e4:ea:6f:b5:17:
         bd:e0:14:4d:f8:7a:1d:a7:d2:f7:32:51:a1:18:01:b3:e8:db:
         06:70:b4:ac
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2/0Faxpgt39QWcl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmYwZTdjZTktNTVkNC00MzgyLWI4OTQtYWFjYTg5ZjJk
ZmQxMB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk
ZmU5MmU5NzYtMmYyMS00YzNiLTkzMTEtNDZhZGM0YzFiZDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mf3rTxGA8LWHCopjVLRpWhj/Q6j8ZX4U7v8
D58oyC9ktydxKBzlms0qnv0U5l8on4+Zv+NzTkNAlmB3M5abUQ4OftCMMUung45V
OScPtyahAJ+vpl7Ifb862sc5X5BxA/9chK0r3m2nChNRb9BRrAs/51NLLz7ZDOKO
e2EH9iXcaJirHp33zOE2TthCkcFGIFwXREJgsFinq4XY0W1d5mysUSAJ+1ONyh3S
4ZcV7HCJlTG8sKdfUZ5WfXbjEoUTtvoQUEMlBrUGCFa5Pk9eT2atwiZagqr4KtFD
g7fQfjTqoIN21iKukqQLT3SJNvWZ9ISCLJy6Ps7sWm0hMiOngwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJn0gr4pg54YQU7OgpI5py1kHOXQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBl
N2NlOS01NWQ0LTQzODItYjg5NC1hYWNhODlmMmRmZDEvNDY5NGQ1NjctYjkwZC0z
YWNmLTk2NTUtOTk2YWY1OGY5NjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmYwZTdjZTktNTVkNC00MzgyLWI4
OTQtYWFjYTg5ZjJkZmQxLzJmMGU3Y2U5LTU1ZDQtNDM4Mi1iODk0LWFhY2E4OWYy
ZGZkMS5jcmwwHwYDVR0jBBgwFoAUxwyRk31taXdKMVntxuqEo/T3CpAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBlN2NlOS01NWQ0LTQzODItYjg5NC1hYWNh
ODlmMmRmZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7CgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEApWKIGRlyBzuLIWA9O96LwBIXaw8xvuf7tGp0W7PJjJPTHb8Fmjti
nv+ou2wtkCq6x6Rz5/K6nORZPXc08fBnsV66c/z8hPm/SgoZhJ4kSOqfz4kR2eio
ulOC6ew5xGFSfic2SMm/yddq6Bd6IR1ds+/NbgjLz07dTUyk898rYCg8lt/GDrRf
eQG6yfBofJFtKZcM9hPlki5svn9mheVisM8qqCQ+5V00V0Gyq+fvYCWWPKmHcZOH
UWGsv+bEqj85Cna4/XmaIaL0tbwEDxwubMVI9McwlMVF5bqxin29t82iEBPCkOTq
b7UXveAUTfh6HafS9zJRoRgBs+jbBnC0rA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:58:01 2026 by rpki-client