Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/e6bc8fdf-e537-3c1c-9aea-8017173e3a59.roa
File:                     e6bc8fdf-e537-3c1c-9aea-8017173e3a59.roa (raw, json)
Hash identifier:          2Kfwyxr1GIpO8Qi0m6PA1RX+5ZWKAQIFBgDiM80E05I=
Subject key identifier:   90:31:7A:47:6F:36:40:FC:96:FE:5F:3B:04:55:06:14:7A:56:F4:BC
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F4328584DE41B5C5316C36927415AEB00
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/e6bc8fdf-e537-3c1c-9aea-8017173e3a59.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     401243
IP address blocks:        2602:2b5:2c::/48 maxlen: 48
                          2602:2b5:2d::/48 maxlen: 48
                          2602:2b5:2e::/48 maxlen: 48
                          2602:2b5:2f::/48 maxlen: 48
                          2602:2b5:38::/48 maxlen: 48
                          2602:2b5:39::/48 maxlen: 48
                          2602:2b5:3a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:5c:53:16:c3:69:27:41:5a:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=1f2a8237-d24c-4f1d-a965-858fcd17211e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:62:02:0c:e0:19:5d:78:ce:6f:86:6c:8e:
                    e7:97:71:55:02:53:c5:7d:be:9b:8f:59:48:3c:d1:
                    69:5c:42:73:41:d0:f4:b0:19:89:16:9e:82:5f:23:
                    53:52:9f:d8:31:2d:d6:c1:b1:11:fa:28:9f:8b:bc:
                    d1:9d:28:6d:6a:4f:23:9e:4d:2a:38:79:60:5b:5a:
                    32:2c:3b:c3:27:06:f5:b2:f6:05:77:77:2f:15:c0:
                    cd:9b:0e:fe:19:8c:96:13:d0:66:e7:42:1a:e4:a9:
                    d0:6b:8f:63:43:ca:a4:b4:2d:5e:0a:10:73:a8:49:
                    2c:dc:96:df:56:1c:27:5d:a6:a8:79:e8:ab:6c:67:
                    63:88:dd:7a:7d:66:2e:31:21:a5:df:f5:76:10:c3:
                    66:3a:9e:33:a0:64:9c:4c:6b:49:4f:a3:68:d4:e2:
                    01:c8:10:e7:e5:b9:be:08:82:5f:ac:5a:58:1d:a1:
                    c8:58:f2:e9:fb:7f:50:da:37:4e:1c:f2:70:8d:4e:
                    31:b5:73:20:e9:05:3d:57:95:31:75:13:d1:e7:14:
                    01:90:8a:68:33:43:48:65:c0:58:ad:57:a3:82:9f:
                    36:40:27:9f:b0:07:26:8d:3c:16:3e:b8:85:bd:a3:
                    09:fa:38:b5:c7:17:2e:52:11:c0:1b:cf:df:51:0a:
                    87:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:31:7A:47:6F:36:40:FC:96:FE:5F:3B:04:55:06:14:7A:56:F4:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/e6bc8fdf-e537-3c1c-9aea-8017173e3a59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b5:2c::/46
                  2602:2b5:38::-2602:2b5:3a:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d8:ec:4c:c1:56:ee:4a:49:6d:6b:ab:63:75:11:5b:a7:f1:
         0e:3e:7c:00:ae:09:8e:9d:bb:c0:bc:b3:00:36:01:49:f5:aa:
         3a:50:42:7c:5c:9d:d7:ea:f3:00:14:c6:cd:f2:0b:b3:fe:61:
         76:ee:ac:2e:c0:b9:d8:4e:dc:6b:42:ba:19:94:a4:5a:8e:c4:
         ec:d7:35:f0:c4:68:97:b0:a8:ed:5a:96:f7:a4:eb:45:88:b6:
         1d:3a:7e:06:84:da:fc:ad:b6:8e:71:01:c9:6b:23:d0:1c:62:
         dd:eb:57:65:8e:b0:af:be:3f:b1:ea:ee:1d:dc:00:36:f7:56:
         68:13:fc:e5:f7:75:59:94:a9:97:66:c1:e5:ab:c0:b8:96:a9:
         54:08:13:8d:cc:b1:ee:d5:d7:a1:65:10:2f:e4:ce:f3:01:83:
         51:c3:66:4b:57:93:aa:13:eb:ec:69:ed:b1:2f:bc:71:00:d7:
         92:dd:57:04:7d:7e:2a:d2:50:94:76:1f:ed:75:11:89:93:78:
         0a:15:0d:2b:ad:48:d1:b1:de:84:13:58:07:33:be:b8:03:5a:
         92:4d:32:84:43:e0:f7:50:f9:d3:32:4f:71:f1:59:d8:82:3e:
         50:04:e8:25:15:38:a5:dd:6d:af:df:86:33:e5:32:47:bf:1a:
         3b:71:2b:48
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE3kG1xTFsNpJ0Fa6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NkY2VkMjEtOGYwNC00MjczLThmOGEtMDc1OTNjMzk2
OGZiMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
MWYyYTgyMzctZDI0Yy00ZjFkLWE5NjUtODU4ZmNkMTcyMTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQdiAgzgGV14zm+GbI7nl3FVAlPFfb6bj1lI
PNFpXEJzQdD0sBmJFp6CXyNTUp/YMS3WwbER+iifi7zRnShtak8jnk0qOHlgW1oy
LDvDJwb1svYFd3cvFcDNmw7+GYyWE9Bm50Ia5KnQa49jQ8qktC1eChBzqEks3Jbf
VhwnXaaoeeirbGdjiN16fWYuMSGl3/V2EMNmOp4zoGScTGtJT6No1OIByBDn5bm+
CIJfrFpYHaHIWPLp+39Q2jdOHPJwjU4xtXMg6QU9V5UxdRPR5xQBkIpoM0NIZcBY
rVejgp82QCefsAcmjTwWPriFvaMJ+ji1xxcuUhHAG8/fUQqHEQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFJAxekdvNkD8lv5fOwRVBhR6VvS8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2Rj
ZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5M2MzOTY4ZmIvZTZiYzhmZGYtZTUzNy0z
YzFjLTlhZWEtODAxNzE3M2UzYTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NkY2VkMjEtOGYwNC00MjczLThm
OGEtMDc1OTNjMzk2OGZiL2NjZGNlZDIxLThmMDQtNDI3My04ZjhhLTA3NTkzYzM5
NjhmYi5jcmwwHwYDVR0jBBgwFoAUstSdhUSY71nqCHYPz711A7DiR8cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jY2RjZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5
M2MzOTY4ZmIuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcCJgICtQAs
MBIDBwMmAgK1ADgDBwAmAgK1ADowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJdjsTMFW7kpJbWurY3URW6fx
Dj58AK4Jjp27wLyzADYBSfWqOlBCfFyd1+rzABTGzfILs/5hdu6sLsC52E7ca0K6
GZSkWo7E7Nc18MRol7Co7VqW96TrRYi2HTp+BoTa/K22jnEByWsj0Bxi3etXZY6w
r74/seruHdwANvdWaBP85fd1WZSpl2bB5avAuJapVAgTjcyx7tXXoWUQL+TO8wGD
UcNmS1eTqhPr7GntsS+8cQDXkt1XBH1+KtJQlHYf7XURiZN4ChUNK61I0bHehBNY
BzO+uANakk0yhEPg91D50zJPcfFZ2II+UAToJRU4pd1tr9+GM+UyR78aO3ErSA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 06:48:22 2026 by rpki-client