Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75e6ba5f-021b-4778-8f7e-2f6f994fa1cb/bebaf67b-b849-3051-94c1-a5f69a179dc6.roa
File:                     bebaf67b-b849-3051-94c1-a5f69a179dc6.roa (raw, json)
Hash identifier:          R4/Tox44ASOXRoPyWllSGUIRBU4OQin8n9qY9B0DJLg=
Subject key identifier:   01:2A:A2:B6:43:23:E3:DE:6A:A2:F5:96:35:2C:85:D4:34:B2:42:8B
Certificate issuer:       /CN=75e6ba5f-021b-4778-8f7e-2f6f994fa1cb
Certificate serial:       010D0C9F4328584D703FFA4809D9FB88976A7580
Authority key identifier: DF:EB:F3:B3:8A:73:68:03:A2:5F:5D:58:DF:78:D8:49:B7:06:58:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75e6ba5f-021b-4778-8f7e-2f6f994fa1cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75e6ba5f-021b-4778-8f7e-2f6f994fa1cb/bebaf67b-b849-3051-94c1-a5f69a179dc6.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     21820
IP address blocks:        2602:f4f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75e6ba5f-021b-4778-8f7e-2f6f994fa1cb/75e6ba5f-021b-4778-8f7e-2f6f994fa1cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75e6ba5f-021b-4778-8f7e-2f6f994fa1cb/75e6ba5f-021b-4778-8f7e-2f6f994fa1cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75e6ba5f-021b-4778-8f7e-2f6f994fa1cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:fa:48:09:d9:fb:88:97:6a:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e6ba5f-021b-4778-8f7e-2f6f994fa1cb
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=dd1088d0-4036-484a-9554-0788f3268953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:30:0d:b3:4b:ab:13:c5:af:2f:8c:a3:84:e0:
                    b3:e9:0b:5b:9c:61:4d:99:de:09:a2:07:a0:3b:c0:
                    da:1e:68:e7:ba:85:78:d2:9d:67:32:3d:d1:f4:0c:
                    b5:46:ac:7e:9e:b6:19:54:61:73:59:35:88:46:c9:
                    67:be:66:75:ea:5f:d3:7b:e7:01:53:65:e1:4a:0f:
                    71:9a:50:3c:ca:89:b5:ca:a5:0a:84:4c:56:5e:d8:
                    9a:58:bf:b5:4d:30:d4:1c:25:a9:ea:bf:a5:a1:41:
                    7c:50:b7:c5:9c:f2:2b:05:75:13:71:74:72:eb:ca:
                    c4:42:49:60:cf:9d:d8:1a:97:c6:85:3c:cc:ec:a5:
                    54:fd:e1:94:d7:ba:a6:4c:ae:9b:9a:b2:0c:bc:2d:
                    32:c2:ff:c9:8e:31:26:b0:69:76:b8:7f:c6:b6:d5:
                    9f:39:e3:91:e7:93:f5:7b:4b:f3:26:88:1a:97:a7:
                    25:66:b6:ea:d4:31:08:94:20:3a:35:ab:d4:12:fd:
                    a3:cb:d5:fd:37:9b:8f:41:5b:8b:31:ec:4a:cb:c8:
                    b3:d8:f1:f2:cf:17:00:b6:c9:3c:25:9b:78:d3:11:
                    86:45:52:52:ed:ab:7e:c4:37:02:67:fa:8b:7b:b0:
                    16:51:5d:eb:93:e4:e3:dd:ba:7e:27:3d:dc:83:8c:
                    16:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2A:A2:B6:43:23:E3:DE:6A:A2:F5:96:35:2C:85:D4:34:B2:42:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75e6ba5f-021b-4778-8f7e-2f6f994fa1cb/bebaf67b-b849-3051-94c1-a5f69a179dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75e6ba5f-021b-4778-8f7e-2f6f994fa1cb/75e6ba5f-021b-4778-8f7e-2f6f994fa1cb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:EB:F3:B3:8A:73:68:03:A2:5F:5D:58:DF:78:D8:49:B7:06:58:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75e6ba5f-021b-4778-8f7e-2f6f994fa1cb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:33:86:e0:2f:04:3e:25:fd:ec:b7:c8:00:32:5e:a4:28:78:
         47:66:1c:20:34:3d:67:6f:be:ab:78:c5:c1:d5:63:e5:93:01:
         e0:18:93:17:87:9f:3d:42:ad:60:75:18:e2:39:1e:6e:9d:61:
         89:2b:51:42:e5:62:40:63:c5:fd:5f:7d:d1:05:49:3e:22:1c:
         5a:85:3a:5e:d2:44:83:14:77:b5:04:d9:6c:6a:67:dc:a4:a8:
         40:35:4a:a8:7d:7f:91:dd:d3:a6:21:6d:0e:8c:31:5d:84:0b:
         89:2f:b8:e6:39:6d:18:cc:25:bd:8e:f5:17:0e:ce:3e:1c:af:
         39:4b:a9:81:50:2c:75:50:a7:2e:1b:9b:c7:16:a3:09:36:e5:
         d4:f7:09:32:ed:3f:fb:08:28:1a:30:fc:aa:56:98:a7:ce:e4:
         fc:29:44:06:35:aa:d7:56:51:f0:1f:f5:6a:75:ba:91:d8:e9:
         ef:fe:9e:35:86:c9:2d:55:42:57:5a:f6:c2:12:6f:93:18:aa:
         af:dd:8e:28:a1:bc:86:13:09:24:4f:34:a6:f4:37:df:e8:1e:
         62:59:3c:cf:6b:dc:38:6c:98:8e:6e:9f:a8:a7:f4:56:f3:23:
         5a:c1:9c:e5:1f:b2:ba:20:ae:04:cb:a0:ca:87:85:18:c2:c8:
         ae:39:c1:6a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1wP/pICdn7iJdqdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlNmJhNWYtMDIxYi00Nzc4LThmN2UtMmY2Zjk5NGZh
MWNiMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
ZGQxMDg4ZDAtNDAzNi00ODRhLTk1NTQtMDc4OGYzMjY4OTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjANs0urE8WvL4yjhOCz6QtbnGFNmd4Jogeg
O8DaHmjnuoV40p1nMj3R9Ay1Rqx+nrYZVGFzWTWIRslnvmZ16l/Te+cBU2XhSg9x
mlA8yom1yqUKhExWXtiaWL+1TTDUHCWp6r+loUF8ULfFnPIrBXUTcXRy68rEQklg
z53YGpfGhTzM7KVU/eGU17qmTK6bmrIMvC0ywv/JjjEmsGl2uH/GttWfOeOR55P1
e0vzJogal6clZrbq1DEIlCA6NavUEv2jy9X9N5uPQVuLMexKy8iz2PHyzxcAtsk8
JZt40xGGRVJS7at+xDcCZ/qLe7AWUV3rk+Tj3bp+Jz3cg4wW1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAEqorZDI+PeaqL1ljUshdQ0skKLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83NWU2
YmE1Zi0wMjFiLTQ3NzgtOGY3ZS0yZjZmOTk0ZmExY2IvYmViYWY2N2ItYjg0OS0z
MDUxLTk0YzEtYTVmNjlhMTc5ZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNzVlNmJhNWYtMDIxYi00Nzc4LThm
N2UtMmY2Zjk5NGZhMWNiLzc1ZTZiYTVmLTAyMWItNDc3OC04ZjdlLTJmNmY5OTRm
YTFjYi5jcmwwHwYDVR0jBBgwFoAU3+vzs4pzaAOiX11Y33jYSbcGWJcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi83NWU2YmE1Zi0wMjFiLTQ3NzgtOGY3ZS0yZjZm
OTk0ZmExY2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL08QAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI0zhuAvBD4l/ey3yAAyXqQoeEdmHCA0PWdvvqt4xcHVY+WTAeAY
kxeHnz1CrWB1GOI5Hm6dYYkrUULlYkBjxf1ffdEFST4iHFqFOl7SRIMUd7UE2Wxq
Z9ykqEA1Sqh9f5Hd06YhbQ6MMV2EC4kvuOY5bRjMJb2O9RcOzj4crzlLqYFQLHVQ
py4bm8cWowk25dT3CTLtP/sIKBow/KpWmKfO5PwpRAY1qtdWUfAf9Wp1upHY6e/+
njWGyS1VQlda9sISb5MYqq/djiihvIYTCSRPNKb0N9/oHmJZPM9r3DhsmI5un6in
9FbzI1rBnOUfsrogrgTLoMqHhRjCyK45wWo=
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:04:22 2026 by rpki-client