Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/74486b65-b5bb-390f-882d-9c03be6dbcbe.roa
File:                     74486b65-b5bb-390f-882d-9c03be6dbcbe.roa (raw, json)
Hash identifier:          qtPq4TUMK/Iu2oEF4Z5iduMFK5iDVcWdu80mbto+BpY=
Subject key identifier:   F5:D7:70:49:6F:37:90:F5:BE:66:89:12:3F:5F:8E:15:F3:F1:8D:B2
Certificate issuer:       /CN=292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a
Certificate serial:       010D0C9F4328584DEC7B49A5E6D3FD4C39142140
Authority key identifier: 4F:6B:7B:30:46:27:45:61:0E:5F:90:3B:C9:25:DA:5B:54:76:FB:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/74486b65-b5bb-390f-882d-9c03be6dbcbe.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     7124
IP address blocks:        2602:ffa9::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:49:a5:e6:d3:fd:4c:39:14:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=aa3ca19f-53b4-40c2-8f25-0987d7595353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:42:39:e8:60:35:77:9f:32:a5:d7:8f:76:
                    bf:eb:6c:96:c8:13:fa:95:47:70:0f:43:1b:2c:8b:
                    13:d9:28:ff:36:f5:b8:f8:40:5c:12:f6:11:de:1a:
                    5c:6b:37:59:dc:99:66:4b:b4:cf:7d:b5:12:9f:b8:
                    1c:87:0f:86:de:ad:e6:92:39:15:7e:58:52:e6:21:
                    21:bd:bc:d8:6f:4a:28:a5:b3:c5:84:72:3b:fd:d9:
                    e3:b3:fc:2a:86:c6:1a:f2:c3:70:84:01:44:e8:ae:
                    23:03:91:cd:72:b6:4e:a5:3b:53:88:1e:4a:cc:2b:
                    74:7a:83:a1:1c:2b:70:5d:27:ae:64:71:ca:3a:9f:
                    61:25:73:6f:58:54:a4:dd:4d:c6:79:05:0b:06:25:
                    13:8d:f0:52:8b:48:02:a5:9c:e8:6f:96:95:09:5d:
                    e6:83:b0:b5:d9:1a:b9:60:f2:77:06:0d:cd:37:d8:
                    d9:4a:cc:fa:cd:4a:76:c8:a7:73:6a:98:ea:a5:99:
                    56:31:fa:80:f7:02:a5:34:0c:10:88:5d:e2:50:99:
                    6a:99:ff:5e:25:b7:41:de:bd:a6:b3:c0:b1:69:83:
                    7a:d0:35:fe:47:dd:29:c9:aa:b2:99:c4:f4:85:3c:
                    33:2d:38:c7:a7:4a:81:83:f0:e3:c4:6c:92:d1:82:
                    fc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D7:70:49:6F:37:90:F5:BE:66:89:12:3F:5F:8E:15:F3:F1:8D:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/74486b65-b5bb-390f-882d-9c03be6dbcbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.crl

            X509v3 Authority Key Identifier:
                keyid:4F:6B:7B:30:46:27:45:61:0E:5F:90:3B:C9:25:DA:5B:54:76:FB:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffa9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:82:90:24:d5:dd:a2:c3:ae:41:4b:97:52:9b:3b:ea:2f:36:
         78:9a:bb:fe:2b:d5:e0:73:23:2a:f2:11:62:12:64:8e:b4:d2:
         30:25:42:76:dc:25:89:86:ae:6a:6a:4b:03:d7:b2:08:f5:ac:
         f5:fe:ad:d5:83:45:71:40:30:58:dd:fc:78:8f:8a:7e:cd:e6:
         f2:7a:80:5b:7b:3c:17:99:e6:b6:f7:2a:3d:e7:2f:4f:ff:a3:
         57:29:c9:8c:87:c6:29:d0:d1:cb:93:86:1a:74:9e:e0:f8:20:
         2b:ef:79:6f:38:cf:cf:bb:d8:5a:3b:87:c5:84:c9:85:c8:8f:
         9a:cd:ca:ab:1b:36:da:77:5b:55:6b:d7:a2:13:51:72:59:96:
         19:e8:19:b9:fb:7b:c0:02:97:1b:9d:49:bd:c9:05:9e:28:81:
         8c:3c:8b:d5:2e:e7:46:3d:7d:57:1c:be:a6:3f:62:82:d9:4e:
         66:5e:52:b9:b3:37:3d:48:73:b8:9d:8b:65:af:6f:0c:49:77:
         4c:48:ea:a0:9f:ab:ab:4d:41:db:27:85:ed:b2:1a:ec:ca:9c:
         13:0d:c3:25:8d:0a:dd:28:ad:ef:6e:60:59:72:b2:d3:e9:6c:
         6d:16:d7:c9:20:94:e3:28:dc:a6:0e:3a:d0:e9:99:e5:b0:2d:
         d4:ee:e5:d5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3se0ml5tP9TDkUIUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjkyYzVhNGUtODAwMi00YjFkLWEwZTgtZmM0YjU1YTVj
YjZhMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk
YWEzY2ExOWYtNTNiNC00MGMyLThmMjUtMDk4N2Q3NTk1MzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYpCOehgNXefMqXXj3a/62yWyBP6lUdwD0Mb
LIsT2Sj/NvW4+EBcEvYR3hpcazdZ3JlmS7TPfbUSn7gchw+G3q3mkjkVflhS5iEh
vbzYb0oopbPFhHI7/dnjs/wqhsYa8sNwhAFE6K4jA5HNcrZOpTtTiB5KzCt0eoOh
HCtwXSeuZHHKOp9hJXNvWFSk3U3GeQULBiUTjfBSi0gCpZzob5aVCV3mg7C12Rq5
YPJ3Bg3NN9jZSsz6zUp2yKdzapjqpZlWMfqA9wKlNAwQiF3iUJlqmf9eJbdB3r2m
s8CxaYN60DX+R90pyaqymcT0hTwzLTjHp0qBg/DjxGyS0YL8ZQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPXXcElvN5D1vmaJEj9fjhXz8Y2yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yOTJj
NWE0ZS04MDAyLTRiMWQtYTBlOC1mYzRiNTVhNWNiNmEvNzQ0ODZiNjUtYjViYi0z
OTBmLTg4MmQtOWMwM2JlNmRiY2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjkyYzVhNGUtODAwMi00YjFkLWEw
ZTgtZmM0YjU1YTVjYjZhLzI5MmM1YTRlLTgwMDItNGIxZC1hMGU4LWZjNGI1NWE1
Y2I2YS5jcmwwHwYDVR0jBBgwFoAUT2t7MEYnRWEOX5A7ySXaW1R2++kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yOTJjNWE0ZS04MDAyLTRiMWQtYTBlOC1mYzRi
NTVhNWNiNmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/qQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAwYKQJNXdosOuQUuXUps76i82eJq7/ivV4HMjKvIRYhJkjrTSMCVC
dtwliYauampLA9eyCPWs9f6t1YNFcUAwWN38eI+Kfs3m8nqAW3s8F5nmtvcqPecv
T/+jVynJjIfGKdDRy5OGGnSe4PggK+95bzjPz7vYWjuHxYTJhciPms3Kqxs22ndb
VWvXohNRclmWGegZuft7wAKXG51JvckFniiBjDyL1S7nRj19Vxy+pj9igtlOZl5S
ubM3PUhzuJ2LZa9vDEl3TEjqoJ+rq01B2yeF7bIa7MqcEw3DJY0K3Sit725gWXKy
0+lsbRbXySCU4yjcpg460OmZ5bAt1O7l1Q==
-----END CERTIFICATE-----
Generated at Fri Jun 5 21:16:51 2026 by rpki-client