Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa
File:                     0f760c1b-2287-3417-81e0-e555031d9abd.roa (raw, json)
Hash identifier:          LRjrJzogaTl9AZZ/epEJvN5WkPNBvyfw4OxQ/q87/fE=
Subject key identifier:   54:DA:EF:B1:0E:D2:61:75:76:E5:1E:94:28:E2:D5:31:72:92:EF:C0
Certificate issuer:       /CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
Certificate serial:       010D0C9F4328584D60E4FE9E1249996D13957480
Authority key identifier: 17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     399209
IP address blocks:        2602:807:6003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:fe:9e:12:49:99:6d:13:95:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=5cac4052-9456-44d2-98fa-625aff08ad27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:61:55:fa:2a:fb:6d:35:20:33:a5:72:13:00:
                    bd:a0:8b:b8:d7:51:f2:41:97:aa:46:da:cb:07:93:
                    17:5f:4b:6f:4d:b4:61:82:6f:c9:2e:4c:b9:0e:38:
                    b0:1f:53:b7:67:09:ee:4c:24:46:8b:71:d4:19:20:
                    a6:96:59:18:ac:f6:39:17:47:0c:51:e1:a7:f0:40:
                    fb:70:b6:92:3b:f1:9e:28:eb:10:70:25:29:3a:28:
                    46:ca:27:07:5e:36:96:e8:43:e5:c6:ea:48:6f:51:
                    b8:65:d6:b3:37:17:28:eb:02:53:6a:bd:68:07:69:
                    c2:e3:c4:fb:62:28:ce:d2:72:00:4d:57:06:a5:fe:
                    91:ae:e3:d7:ae:5d:0e:49:e2:e6:23:69:ec:51:12:
                    2c:0c:b9:6a:a7:93:6e:09:62:16:7b:09:8e:9d:8e:
                    58:52:98:19:01:d7:fa:24:74:28:4e:ff:a8:dc:10:
                    11:50:6c:74:d1:d8:66:ac:71:2a:93:7b:04:0e:73:
                    b5:d2:67:86:10:b9:25:66:08:0b:9b:a0:e7:06:5c:
                    eb:69:f0:3a:08:15:6b:71:9c:ea:fd:f3:2f:d4:70:
                    44:5e:e2:6c:ad:3b:bc:bf:4a:65:d5:f8:f1:6e:20:
                    f5:ee:7a:ed:8e:65:d2:0f:cf:50:d9:07:67:11:7b:
                    af:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DA:EF:B1:0E:D2:61:75:76:E5:1E:94:28:E2:D5:31:72:92:EF:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl

            X509v3 Authority Key Identifier:
                keyid:17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:6003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:39:60:de:d2:e9:4b:01:76:8e:33:d8:e5:08:d0:24:0b:8e:
         18:fd:da:7e:88:25:13:bd:61:b4:97:7b:fd:43:e7:fe:ce:72:
         3f:e7:a1:3b:e5:aa:a0:e5:6b:dc:a5:4d:c8:12:3c:2a:05:91:
         79:ea:90:41:6e:3f:89:29:a4:0d:4f:69:6d:bb:ea:c1:39:14:
         ce:b1:88:9b:92:73:85:c6:54:55:f8:b4:3e:57:e7:18:fe:a4:
         8d:a9:eb:71:58:eb:b6:85:8c:c7:e7:84:54:fa:ba:78:77:fe:
         8b:7c:97:e9:68:57:23:56:be:5e:01:d6:f1:8a:e9:52:f8:8a:
         39:71:90:d2:04:12:47:9d:9a:31:f2:c2:ff:79:1c:4c:99:c2:
         51:6c:88:3f:85:5a:12:11:d1:08:41:43:b5:3c:7e:22:f1:3d:
         54:68:89:8c:37:ff:70:ed:99:0a:a8:9a:8e:ba:b5:7b:84:18:
         00:72:31:e4:19:43:23:54:d3:cf:47:94:3e:c6:8e:d5:06:a5:
         a6:63:bc:c0:e7:bb:f6:5b:46:24:ea:07:7f:c8:18:f4:45:fc:
         32:86:3f:9e:14:1b:32:4b:85:e1:55:7c:81:86:3b:32:11:7f:
         17:0b:c9:0d:29:5b:ca:8f:79:aa:f7:53:3d:f1:97:87:90:c3:
         5b:44:63:b0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1g5P6eEkmZbROVdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmFjNTE2ZmItZTRkZi00OWMxLTgyYmMtZmVkMjM5OWQy
MWMyMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk
NWNhYzQwNTItOTQ1Ni00NGQyLTk4ZmEtNjI1YWZmMDhhZDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmFV+ir7bTUgM6VyEwC9oIu411HyQZeqRtrL
B5MXX0tvTbRhgm/JLky5DjiwH1O3ZwnuTCRGi3HUGSCmllkYrPY5F0cMUeGn8ED7
cLaSO/GeKOsQcCUpOihGyicHXjaW6EPlxupIb1G4ZdazNxco6wJTar1oB2nC48T7
YijO0nIATVcGpf6RruPXrl0OSeLmI2nsURIsDLlqp5NuCWIWewmOnY5YUpgZAdf6
JHQoTv+o3BARUGx00dhmrHEqk3sEDnO10meGELklZggLm6DnBlzrafA6CBVrcZzq
/fMv1HBEXuJsrTu8v0pl1fjxbiD17nrtjmXSD89Q2QdnEXuvewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFTa77EO0mF1duUelCji1TFyku/AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YWM1
MTZmYi1lNGRmLTQ5YzEtODJiYy1mZWQyMzk5ZDIxYzIvMGY3NjBjMWItMjI4Ny0z
NDE3LTgxZTAtZTU1NTAzMWQ5YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmFjNTE2ZmItZTRkZi00OWMxLTgy
YmMtZmVkMjM5OWQyMWMyLzZhYzUxNmZiLWU0ZGYtNDljMS04MmJjLWZlZDIzOTlk
MjFjMi5jcmwwHwYDVR0jBBgwFoAUF4lBSoEsr3LH4ic/wFzMM8KRZyswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82YWM1MTZmYi1lNGRmLTQ5YzEtODJiYy1mZWQy
Mzk5ZDIxYzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIB2AD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACE5YN7S6UsBdo4z2OUI0CQLjhj92n6IJRO9YbSXe/1D5/7Ocj/n
oTvlqqDla9ylTcgSPCoFkXnqkEFuP4kppA1PaW276sE5FM6xiJuSc4XGVFX4tD5X
5xj+pI2p63FY67aFjMfnhFT6unh3/ot8l+loVyNWvl4B1vGK6VL4ijlxkNIEEked
mjHywv95HEyZwlFsiD+FWhIR0QhBQ7U8fiLxPVRoiYw3/3DtmQqomo66tXuEGABy
MeQZQyNU089HlD7GjtUGpaZjvMDnu/ZbRiTqB3/IGPRF/DKGP54UGzJLheFVfIGG
OzIRfxcLyQ0pW8qPear3Uz3xl4eQw1tEY7A=
-----END CERTIFICATE-----
Generated at Thu Apr 9 02:28:31 2026 by rpki-client