Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa
File:                     c8b738ed-fedf-3c78-8f42-d6417729ca05.roa (raw, json)
Hash identifier:          Dqih2m6RM5EmPPA6q+vejHZbRjCmu+AksXld1EKYBOA=
Subject key identifier:   0A:8D:70:9D:60:46:B9:F6:AE:3B:EC:B2:B3:E0:C6:8A:D5:FD:C0:7C
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584F549D549A8FD9E0CA90291280
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     206216
IP address blocks:        2602:fb54::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:54:9a:8f:d9:e0:ca:90:29:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=28b89d36-6ba7-4e41-974c-dfd54a9d9799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c3:77:fd:7a:b3:cc:2d:7f:71:64:d8:60:58:
                    f0:7c:de:8c:64:6e:f7:f9:d9:e7:d3:75:eb:ef:35:
                    86:52:32:b8:42:fa:80:00:08:0a:0f:25:ff:48:e9:
                    bf:ad:04:ba:81:88:be:d3:7d:84:9b:a4:5c:a4:24:
                    40:f0:05:e4:ca:b3:05:17:9c:90:3e:0a:22:68:d2:
                    d4:3c:d5:39:02:80:61:b6:c9:cf:a3:b8:d6:3a:98:
                    cb:e5:d3:31:13:31:d8:0f:65:bb:c5:a5:f9:74:fc:
                    2a:0a:89:74:6a:41:31:7b:ff:09:e0:e9:64:85:9c:
                    c2:ce:09:4e:2e:18:a7:50:16:58:4a:79:e8:a8:ed:
                    d4:04:49:1c:09:95:75:2d:e3:b8:9b:cb:f0:2b:18:
                    47:51:46:86:7c:9d:d6:96:21:0c:2c:87:5b:2c:ab:
                    f1:ed:b4:a3:38:30:f9:7f:22:fa:44:44:98:68:50:
                    6d:4c:2f:45:c6:c5:87:93:77:22:80:32:33:8b:20:
                    69:a8:81:f6:15:fc:f0:dc:72:7c:9f:3a:24:5a:f1:
                    ba:e1:ec:f5:dd:7f:08:55:ef:d3:46:06:31:57:43:
                    5c:63:70:80:ed:2b:7e:1f:b6:98:ea:da:e3:0f:21:
                    a3:54:96:61:1b:88:f0:64:6e:98:85:c1:c3:8e:41:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8D:70:9D:60:46:B9:F6:AE:3B:EC:B2:B3:E0:C6:8A:D5:FD:C0:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:28:82:23:86:bf:16:19:c4:68:bb:25:ce:60:32:bf:07:a0:
         01:6b:ec:9b:57:13:e8:22:08:27:cd:87:e5:af:23:d4:9f:25:
         17:dc:c1:47:f3:b0:bc:dd:74:82:11:b3:16:f5:14:22:a6:ac:
         75:fb:cb:24:52:5a:95:ab:e1:ca:b3:d3:af:bf:36:dd:af:e3:
         1a:c5:82:54:ab:4a:d6:34:9c:ed:60:04:a1:65:17:03:fb:a4:
         53:4b:40:e6:00:6f:a8:2d:c1:7a:a1:f1:fd:a8:78:90:21:05:
         de:d4:95:51:70:09:8f:d8:5e:aa:52:24:69:6e:a2:bd:04:20:
         aa:56:a5:22:51:57:a1:69:3e:08:88:12:af:c0:85:dc:0b:44:
         05:19:8a:47:90:0c:f6:9f:36:b1:30:e2:72:97:63:47:6a:61:
         b9:bf:9c:0c:36:ee:1f:c4:42:54:9d:bc:53:9e:86:35:01:88:
         04:95:28:5d:91:33:a6:fa:97:f1:f5:2c:c1:09:ff:cf:9a:5a:
         25:6d:0d:96:50:02:2a:2b:06:1a:97:13:bc:d9:89:5f:d3:ce:
         f3:89:ca:22:1f:04:23:00:cf:84:a2:c8:cf:db:95:35:9c:58:
         06:3a:3b:2a:ea:3e:33:67:9f:ca:fd:fe:0f:da:05:0b:45:53:
         68:5c:7a:03
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9UnVSaj9ngypApEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc3OThhYmItNzExZC00ZjEwLWJjNDYtYmNlZWQwNTVl
MWZhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
MjhiODlkMzYtNmJhNy00ZTQxLTk3NGMtZGZkNTRhOWQ5Nzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsN3/XqzzC1/cWTYYFjwfN6MZG73+dnn03Xr
7zWGUjK4QvqAAAgKDyX/SOm/rQS6gYi+032Em6RcpCRA8AXkyrMFF5yQPgoiaNLU
PNU5AoBhtsnPo7jWOpjL5dMxEzHYD2W7xaX5dPwqCol0akExe/8J4OlkhZzCzglO
LhinUBZYSnnoqO3UBEkcCZV1LeO4m8vwKxhHUUaGfJ3WliEMLIdbLKvx7bSjODD5
fyL6RESYaFBtTC9FxsWHk3cigDIziyBpqIH2Ffzw3HJ8nzokWvG64ez13X8IVe/T
RgYxV0NcY3CA7St+H7aY6trjDyGjVJZhG4jwZG6YhcHDjkEn0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAqNcJ1gRrn2rjvssrPgxorV/cB8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5
OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2VlZDA1NWUxZmEvYzhiNzM4ZWQtZmVkZi0z
Yzc4LThmNDItZDY0MTc3MjljYTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc3OThhYmItNzExZC00ZjEwLWJj
NDYtYmNlZWQwNTVlMWZhL2Y3Nzk4YWJiLTcxMWQtNGYxMC1iYzQ2LWJjZWVkMDU1
ZTFmYS5jcmwwHwYDVR0jBBgwFoAUzJA916o5BeznNQisy0X0bmW8HeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2Vl
ZDA1NWUxZmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7VAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACIogiOGvxYZxGi7Jc5gMr8HoAFr7JtXE+giCCfNh+WvI9SfJRfc
wUfzsLzddIIRsxb1FCKmrHX7yyRSWpWr4cqz06+/Nt2v4xrFglSrStY0nO1gBKFl
FwP7pFNLQOYAb6gtwXqh8f2oeJAhBd7UlVFwCY/YXqpSJGluor0EIKpWpSJRV6Fp
PgiIEq/AhdwLRAUZikeQDPafNrEw4nKXY0dqYbm/nAw27h/EQlSdvFOehjUBiASV
KF2RM6b6l/H1LMEJ/8+aWiVtDZZQAiorBhqXE7zZiV/TzvOJyiIfBCMAz4SiyM/b
lTWcWAY6OyrqPjNnn8r9/g/aBQtFU2hcegM=
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:52:54 2026 by rpki-client