Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/9a3cf8fa-a37a-32f7-bf37-143346e3e0be.roa
File:                     9a3cf8fa-a37a-32f7-bf37-143346e3e0be.roa (raw, json)
Hash identifier:          yw2I4CA+ntwRlEJWxg0qq23ul13K6S2r7DpIO+Wpgqs=
Subject key identifier:   F8:03:DB:AF:9C:00:D9:23:71:CB:63:FE:81:4C:01:C7:FE:CD:2D:E0
Certificate issuer:       /CN=4241fd4f-7ca1-4822-8ae9-684d75b05110
Certificate serial:       010D0C9F4328584D7F9AA2A4C854210A6D268640
Authority key identifier: B9:E3:F7:30:C7:2B:E0:44:26:25:D5:9F:CD:4B:BB:D8:0F:03:E8:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/9a3cf8fa-a37a-32f7-bf37-143346e3e0be.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     398206
IP address blocks:        2602:fcab::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/4241fd4f-7ca1-4822-8ae9-684d75b05110.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/4241fd4f-7ca1-4822-8ae9-684d75b05110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:a2:a4:c8:54:21:0a:6d:26:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4241fd4f-7ca1-4822-8ae9-684d75b05110
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=ed14dd6c-3a0c-43d7-aea7-55d2cbdb267a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:57:45:5b:d7:88:2c:19:f8:b7:0e:6b:cd:
                    dc:65:f3:2c:08:9e:e8:39:08:24:35:b1:95:e9:ce:
                    2e:2d:9b:26:23:25:e2:76:b6:04:98:6f:d1:d7:22:
                    cd:63:4c:cd:34:80:37:6b:d3:53:2a:8a:09:47:06:
                    a1:87:51:50:41:8f:c7:3a:a9:73:dd:82:ff:49:4e:
                    71:79:0c:cb:88:25:10:31:8d:eb:76:0e:57:4d:a3:
                    ac:1b:e7:bc:80:b0:e3:3a:8a:35:6d:cc:3b:a9:fb:
                    eb:7e:ec:1f:6e:a7:48:ed:ee:29:e5:01:33:c9:1a:
                    57:59:b2:dd:ea:38:67:40:b9:d9:2d:aa:57:af:27:
                    fa:5f:1b:ad:e0:dc:db:e8:6a:1f:c9:9f:18:26:3a:
                    80:87:51:88:99:81:fe:86:72:89:8c:88:6a:c5:47:
                    a8:eb:81:57:73:ed:6a:eb:9e:48:ce:fd:5a:72:35:
                    9e:12:0f:70:d0:5f:04:85:d8:a5:cf:e7:86:ca:c2:
                    e6:12:11:78:39:29:e3:88:9e:4e:79:d7:ca:16:2e:
                    fe:0c:a3:21:90:4f:fb:dc:28:17:1a:7b:f7:66:6d:
                    44:ff:33:fa:89:34:77:ea:46:9e:63:4b:52:68:37:
                    15:d5:9d:cf:72:b0:8f:45:40:7c:69:64:4e:d3:ec:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:03:DB:AF:9C:00:D9:23:71:CB:63:FE:81:4C:01:C7:FE:CD:2D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/9a3cf8fa-a37a-32f7-bf37-143346e3e0be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/4241fd4f-7ca1-4822-8ae9-684d75b05110.crl

            X509v3 Authority Key Identifier:
                keyid:B9:E3:F7:30:C7:2B:E0:44:26:25:D5:9F:CD:4B:BB:D8:0F:03:E8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcab::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:37:37:bc:e6:fb:26:cc:b5:ca:9d:14:99:02:02:fb:3f:1e:
         9e:62:dd:d8:59:20:5c:4c:6f:a1:e5:c0:36:46:8e:06:f2:7f:
         9d:76:37:8f:21:2f:23:45:81:f1:02:45:df:4c:c8:6f:ae:ad:
         a5:5d:31:b8:ba:f9:4f:39:15:6e:6e:bf:84:6b:dc:ff:26:8e:
         5f:8d:b4:32:30:8d:38:ce:87:e0:9b:bb:96:fc:19:5a:65:91:
         00:25:47:a6:da:12:34:55:5c:ab:05:a2:59:db:84:77:b2:82:
         02:22:bd:fc:35:de:a4:c4:c2:f4:ed:45:34:eb:83:af:b1:ad:
         66:b0:10:56:62:d6:cc:a3:0d:29:2c:42:c7:64:4e:b3:08:3c:
         78:7a:69:e6:5c:e4:ad:a0:7c:03:e8:f0:60:d7:87:0b:b4:57:
         47:2d:0e:71:66:41:9c:2e:7d:34:80:a5:08:f7:1f:f6:0f:84:
         9f:fb:a8:fa:4c:37:0d:49:23:53:6c:52:90:53:45:91:23:6b:
         b4:c9:69:5a:76:16:39:e6:06:78:af:c0:0b:7f:db:05:77:22:
         f6:ee:4b:f5:6a:cc:3a:a5:3f:b7:e0:98:d0:85:7c:e5:86:ea:
         17:57:3f:32:d6:36:00:bb:e6:3d:a9:83:fb:2f:9b:f0:52:29:
         ea:18:5d:11
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1/mqKkyFQhCm0mhkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDI0MWZkNGYtN2NhMS00ODIyLThhZTktNjg0ZDc1YjA1
MTEwMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk
ZWQxNGRkNmMtM2EwYy00M2Q3LWFlYTctNTVkMmNiZGIyNjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtxXRVvXiCwZ+LcOa83cZfMsCJ7oOQgkNbGV
6c4uLZsmIyXidrYEmG/R1yLNY0zNNIA3a9NTKooJRwahh1FQQY/HOqlz3YL/SU5x
eQzLiCUQMY3rdg5XTaOsG+e8gLDjOoo1bcw7qfvrfuwfbqdI7e4p5QEzyRpXWbLd
6jhnQLnZLapXryf6Xxut4Nzb6GofyZ8YJjqAh1GImYH+hnKJjIhqxUeo64FXc+1q
655Izv1acjWeEg9w0F8Ehdilz+eGysLmEhF4OSnjiJ5OedfKFi7+DKMhkE/73CgX
Gnv3Zm1E/zP6iTR36kaeY0tSaDcV1Z3PcrCPRUB8aWRO0+xqqwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPgD26+cANkjcctj/oFMAcf+zS3gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80MjQx
ZmQ0Zi03Y2ExLTQ4MjItOGFlOS02ODRkNzViMDUxMTAvOWEzY2Y4ZmEtYTM3YS0z
MmY3LWJmMzctMTQzMzQ2ZTNlMGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDI0MWZkNGYtN2NhMS00ODIyLThh
ZTktNjg0ZDc1YjA1MTEwLzQyNDFmZDRmLTdjYTEtNDgyMi04YWU5LTY4NGQ3NWIw
NTExMC5jcmwwHwYDVR0jBBgwFoAUueP3MMcr4EQmJdWfzUu72A8D6BgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS80MjQxZmQ0Zi03Y2ExLTQ4MjItOGFlOS02ODRk
NzViMDUxMTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL8qwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQjc3vOb7Jsy1yp0UmQIC+z8enmLd2FkgXExvoeXANkaOBvJ/nXY3
jyEvI0WB8QJF30zIb66tpV0xuLr5TzkVbm6/hGvc/yaOX420MjCNOM6H4Ju7lvwZ
WmWRACVHptoSNFVcqwWiWduEd7KCAiK9/DXepMTC9O1FNOuDr7GtZrAQVmLWzKMN
KSxCx2ROswg8eHpp5lzkraB8A+jwYNeHC7RXRy0OcWZBnC59NIClCPcf9g+En/uo
+kw3DUkjU2xSkFNFkSNrtMlpWnYWOeYGeK/AC3/bBXci9u5L9WrMOqU/t+CY0IV8
5YbqF1c/MtY2ALvmPamD+y+b8FIp6hhdEQ==
-----END CERTIFICATE-----
Generated at Tue Apr 14 15:51:52 2026 by rpki-client