Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0c811ec7-f1c5-3b86-9972-66b65965ab83.roa
File:                     0c811ec7-f1c5-3b86-9972-66b65965ab83.roa (raw, json)
Hash identifier:          NzP+GaG5cY+S3X14f2LptPxMRJnEJQtKcoDftR+ryFE=
Subject key identifier:   22:D6:92:C1:F2:E6:74:F9:5B:44:4C:F9:DB:61:B1:3F:90:DB:99:F2
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584F4973ABF93DB68F3B0A5F0200
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0c811ec7-f1c5-3b86-9972-66b65965ab83.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     5769
IP address blocks:        2607:fa4d::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ab:f9:3d:b6:8f:3b:0a:5f:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0bf7cccf-dac8-4bcc-a15e-87bc8e42fed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7b:a4:f9:b8:fb:02:63:12:c9:ca:46:a9:47:
                    14:43:7e:c2:35:69:28:7b:dc:52:af:07:15:96:8a:
                    a7:12:6b:3b:59:7e:6c:5b:45:c4:1d:a5:27:89:ca:
                    a0:fd:3b:84:6e:11:80:b2:63:ed:cc:6a:6d:7d:f8:
                    f1:86:8c:9a:e1:16:67:e9:0c:07:22:e6:bf:f5:e0:
                    34:23:1a:98:49:ca:f8:89:d4:11:56:61:cd:63:17:
                    ed:19:94:3e:b0:a7:ad:c7:aa:35:41:24:e1:2e:f7:
                    b6:10:87:31:df:4c:98:4b:87:51:4a:c6:de:34:27:
                    92:8c:42:5d:17:86:2a:03:71:aa:a1:85:f0:1b:ed:
                    fc:6d:e5:cf:ac:86:50:ee:47:3d:43:05:9d:25:06:
                    4c:e2:6c:18:a8:de:fd:5d:0d:2a:9a:5e:78:26:3c:
                    b6:6d:89:c5:77:52:64:f8:3e:b7:15:ad:f2:23:15:
                    f4:78:5a:c6:e3:1b:20:25:b4:93:e3:43:0c:cc:84:
                    89:8b:1b:0a:27:65:c9:f4:9e:6f:95:2c:9a:1f:f3:
                    e8:8d:af:30:08:fe:03:0e:4a:bf:62:e5:f0:88:b1:
                    08:d8:50:48:96:36:4c:fa:3a:09:79:4a:34:04:bf:
                    f8:5e:ae:13:cf:0a:bd:ad:7c:ce:19:cf:e5:a6:00:
                    ca:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D6:92:C1:F2:E6:74:F9:5B:44:4C:F9:DB:61:B1:3F:90:DB:99:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0c811ec7-f1c5-3b86-9972-66b65965ab83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa4d::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:1d:d5:99:b1:3c:97:c8:dc:65:df:fc:82:69:a0:08:d3:f0:
         c5:71:79:8b:03:92:c8:76:e0:0f:31:45:fc:87:34:b0:b3:90:
         6b:59:29:cf:8a:71:08:2e:56:db:8b:a4:4c:c5:2e:d5:e7:71:
         ae:02:ee:34:f6:1c:12:d5:c0:83:0f:a1:4e:9f:cd:dc:8a:cb:
         bc:c1:b7:43:cd:bd:7e:84:28:46:06:b8:96:85:db:76:d6:ac:
         81:e6:0d:0e:24:24:83:e3:9a:9b:cc:7f:43:0a:89:20:51:3d:
         9f:26:c5:ff:3c:b8:e7:7d:6d:7c:e5:19:95:8a:23:2f:91:69:
         2a:56:03:d1:83:d3:be:76:e2:1c:d5:02:36:01:f8:44:42:3b:
         af:8e:03:20:47:e9:8d:12:66:9c:e5:39:46:2b:bb:86:8b:32:
         0a:65:2c:8d:ce:f5:62:13:92:92:34:9f:7e:87:96:50:0a:87:
         a7:c2:f1:20:d9:3e:bb:ab:b9:cf:ad:97:68:91:99:42:f3:9d:
         ed:2b:c5:52:80:d6:c5:b7:de:5b:72:39:11:8c:bf:dc:df:38:
         25:e2:0d:92:cf:b4:88:53:7f:7f:6b:05:dd:7e:a3:02:9a:a5:
         c3:fb:bd:f1:6e:5a:71:8b:8e:b3:99:f2:ce:dc:3c:a2:84:c5:
         33:07:d8:27
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc6v5PbaPOwpfAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MGJmN2NjY2YtZGFjOC00YmNjLWExNWUtODdiYzhlNDJmZWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHuk+bj7AmMSycpGqUcUQ37CNWkoe9xSrwcV
loqnEms7WX5sW0XEHaUnicqg/TuEbhGAsmPtzGptffjxhoya4RZn6QwHIua/9eA0
IxqYScr4idQRVmHNYxftGZQ+sKetx6o1QSThLve2EIcx30yYS4dRSsbeNCeSjEJd
F4YqA3GqoYXwG+38beXPrIZQ7kc9QwWdJQZM4mwYqN79XQ0qml54Jjy2bYnFd1Jk
+D63Fa3yIxX0eFrG4xsgJbST40MMzISJixsKJ2XJ9J5vlSyaH/Poja8wCP4DDkq/
YuXwiLEI2FBIljZM+joJeUo0BL/4Xq4Tzwq9rXzOGc/lpgDK0QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCLWksHy5nT5W0RM+dthsT+Q25nyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMGM4MTFlYzctZjFjNS0z
Yjg2LTk5NzItNjZiNjU5NjVhYjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6TTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAWHdWZsTyXyNxl3/yCaaAI0/DFcXmLA5LIduAPMUX8hzSws5BrWSnP
inEILlbbi6RMxS7V53GuAu409hwS1cCDD6FOn83cisu8wbdDzb1+hChGBriWhdt2
1qyB5g0OJCSD45qbzH9DCokgUT2fJsX/PLjnfW185RmViiMvkWkqVgPRg9O+duIc
1QI2AfhEQjuvjgMgR+mNEmac5TlGK7uGizIKZSyNzvViE5KSNJ9+h5ZQCoenwvEg
2T67q7nPrZdokZlC853tK8VSgNbFt95bcjkRjL/c3zgl4g2Sz7SIU39/awXdfqMC
mqXD+73xblpxi46zmfLO3DyihMUzB9gn
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:12:38 2026 by rpki-client