Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/b37ece31-b7a6-37ec-9136-0a25a3f8b8bb.roa
File:                     b37ece31-b7a6-37ec-9136-0a25a3f8b8bb.roa (raw, json)
Hash identifier:          DRDC2c1Wt5JYzMOXAkxqGY4vj+zfBWMVM1Z9bKajXwU=
Subject key identifier:   6B:FA:3B:00:72:F0:8F:26:1C:66:4E:AF:2A:A2:BA:63:DA:BA:87:35
Certificate issuer:       /CN=8b56caea-2136-4342-baff-6f31268d4cc4
Certificate serial:       010D0C9F4328584D9E5018B538E05B9832764680
Authority key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/b37ece31-b7a6-37ec-9136-0a25a3f8b8bb.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     49585
IP address blocks:        2602:faaf:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:18:b5:38:e0:5b:98:32:76:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b56caea-2136-4342-baff-6f31268d4cc4
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=78c805fa-21d9-4a35-8e1b-779bddfa0f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:51:1d:60:d9:5e:ef:8c:d8:93:04:ee:af:d6:
                    70:89:ff:50:68:d8:ce:bd:46:39:34:00:d9:99:7f:
                    12:60:b3:4b:62:6a:8e:d6:ea:18:bc:88:56:36:f7:
                    6b:b2:eb:4f:ca:c0:c5:4b:1f:8e:a9:b9:e6:f0:66:
                    3e:ec:01:a9:ec:6a:87:38:5d:7b:d4:ff:2d:64:5a:
                    c1:e5:79:e8:8c:fe:5c:73:c3:40:a8:2c:6c:8e:ee:
                    70:48:fa:4d:49:b4:23:3c:6c:2d:3c:ba:2a:7b:11:
                    22:e0:85:57:67:10:c7:cd:60:c7:d5:57:63:27:58:
                    92:a3:8e:2c:64:71:45:7b:f4:16:97:81:00:f7:15:
                    38:80:2a:14:82:8f:8c:9b:01:37:b4:ca:3e:9c:82:
                    9d:37:d2:a1:8a:b4:d9:29:f6:26:17:a4:96:c2:ce:
                    e5:5a:5a:88:bc:79:f1:93:d1:0b:14:61:73:87:95:
                    08:ca:90:7a:5a:60:33:1a:4f:ac:e2:f0:c9:6c:27:
                    42:2d:2a:a9:27:7c:07:5c:19:58:2f:aa:85:a9:c6:
                    75:1a:b0:77:ad:8b:a6:48:3a:db:4a:d6:35:ed:18:
                    39:eb:a3:e1:5b:c9:4c:15:00:64:4c:df:a5:5e:6d:
                    03:b9:5b:93:a5:c9:58:85:59:88:2c:84:0a:52:e1:
                    6a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FA:3B:00:72:F0:8F:26:1C:66:4E:AF:2A:A2:BA:63:DA:BA:87:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/b37ece31-b7a6-37ec-9136-0a25a3f8b8bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl

            X509v3 Authority Key Identifier:
                keyid:5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faaf:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c5:f7:e7:a8:5f:df:2e:18:5e:ff:dd:78:83:76:85:76:d1:
         ec:8c:f0:a5:61:e7:ab:d1:ce:e3:ef:a6:6c:1d:e3:eb:7e:4b:
         f9:4b:5d:b0:cb:b5:28:ee:63:77:ed:17:f0:ab:ea:8f:7f:e4:
         50:e8:1c:f3:14:e6:00:5a:4a:f4:9d:00:db:07:e6:eb:b5:33:
         4c:e6:e8:7f:8f:61:9f:d1:4f:37:34:90:3b:3b:ac:a3:90:91:
         a4:13:8c:5d:cb:d2:84:3c:4e:18:83:55:4f:5d:3e:c0:6e:cc:
         80:74:3a:a3:72:05:95:56:4b:f0:70:5a:bd:25:a4:2e:fe:f6:
         c3:fe:c4:a1:3b:7c:b5:73:2a:2d:be:73:12:84:b2:c0:89:ca:
         6c:c5:40:72:f6:c5:a1:8c:41:2d:fc:6b:98:52:bd:f3:f7:6b:
         18:fd:13:cd:9e:bf:5b:12:6d:eb:17:74:b5:e0:9c:70:39:78:
         5a:82:13:15:0c:5e:ac:1d:c2:60:39:16:92:fd:19:12:6d:ce:
         bc:ff:7d:71:de:d9:63:75:89:c2:c1:d7:b4:de:d6:ba:89:0b:
         b0:d2:ab:fd:f1:84:ec:39:ef:f4:cd:5e:ce:51:c9:e9:d0:25:
         9e:3e:b6:7a:1f:36:63:f0:9f:96:38:cb:93:5f:80:09:3a:f0:
         17:68:40:1e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2eUBi1OOBbmDJ2RoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI1NmNhZWEtMjEzNi00MzQyLWJhZmYtNmYzMTI2OGQ0
Y2M0MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk
NzhjODA1ZmEtMjFkOS00YTM1LThlMWItNzc5YmRkZmEwZjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFEdYNle74zYkwTur9Zwif9QaNjOvUY5NADZ
mX8SYLNLYmqO1uoYvIhWNvdrsutPysDFSx+Oqbnm8GY+7AGp7GqHOF171P8tZFrB
5XnojP5cc8NAqCxsju5wSPpNSbQjPGwtPLoqexEi4IVXZxDHzWDH1VdjJ1iSo44s
ZHFFe/QWl4EA9xU4gCoUgo+MmwE3tMo+nIKdN9KhirTZKfYmF6SWws7lWlqIvHnx
k9ELFGFzh5UIypB6WmAzGk+s4vDJbCdCLSqpJ3wHXBlYL6qFqcZ1GrB3rYumSDrb
StY17Rg566PhW8lMFQBkTN+lXm0DuVuTpclYhVmILIQKUuFqiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGv6OwBy8I8mHGZOryqiumPauoc1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YjU2
Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMxMjY4ZDRjYzQvYjM3ZWNlMzEtYjdhNi0z
N2VjLTkxMzYtMGEyNWEzZjhiOGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGI1NmNhZWEtMjEzNi00MzQyLWJh
ZmYtNmYzMTI2OGQ0Y2M0LzhiNTZjYWVhLTIxMzYtNDM0Mi1iYWZmLTZmMzEyNjhk
NGNjNC5jcmwwHwYDVR0jBBgwFoAUW5RpPQjOSIIV5jmWcSEjDZCow90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YjU2Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMx
MjY4ZDRjYzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6rwAF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGDF9+eoX98uGF7/3XiDdoV20eyM8KVh56vRzuPvpmwd4+t+S/lL
XbDLtSjuY3ftF/Cr6o9/5FDoHPMU5gBaSvSdANsH5uu1M0zm6H+PYZ/RTzc0kDs7
rKOQkaQTjF3L0oQ8ThiDVU9dPsBuzIB0OqNyBZVWS/BwWr0lpC7+9sP+xKE7fLVz
Ki2+cxKEssCJymzFQHL2xaGMQS38a5hSvfP3axj9E82ev1sSbesXdLXgnHA5eFqC
ExUMXqwdwmA5FpL9GRJtzrz/fXHe2WN1icLB17Te1rqJC7DSq/3xhOw57/TNXs5R
yenQJZ4+tnofNmPwn5Y4y5NfgAk68BdoQB4=
-----END CERTIFICATE-----
Generated at Thu May 7 01:14:03 2026 by rpki-client