Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/14f6025f-2fdf-4f56-b6e3-6bd1ac2e4258/ed2c8be6-e79b-3fe2-a948-564f5e056144.roa
File:                     ed2c8be6-e79b-3fe2-a948-564f5e056144.roa (raw, json)
Hash identifier:          hZonk/Ztw5ml5fhEpVxJruO6HvGtVlxNO6ZAOyiYX44=
Subject key identifier:   D9:EE:84:29:51:DD:C2:0F:4F:54:C2:E7:2D:2D:90:05:F1:D6:07:12
Certificate issuer:       /CN=14f6025f-2fdf-4f56-b6e3-6bd1ac2e4258
Certificate serial:       010D0C9F4328584F833D3FA535AD307AF96210C0
Authority key identifier: 3A:65:E5:5C:50:22:76:94:4E:11:86:C6:BD:D8:8A:95:A7:F2:3C:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/14f6025f-2fdf-4f56-b6e3-6bd1ac2e4258.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/14f6025f-2fdf-4f56-b6e3-6bd1ac2e4258/ed2c8be6-e79b-3fe2-a948-564f5e056144.roa
Signing time:             Thu 15 Oct 2026 17:49:45 +0000
ROA not before:           Thu 15 Oct 2026 17:49:45 +0000
ROA not after:            Wed 13 Jan 2027 18:49:45 +0000
asID:                     399670
IP address blocks:        2602:f2e5:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/14f6025f-2fdf-4f56-b6e3-6bd1ac2e4258/14f6025f-2fdf-4f56-b6e3-6bd1ac2e4258.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/14f6025f-2fdf-4f56-b6e3-6bd1ac2e4258/14f6025f-2fdf-4f56-b6e3-6bd1ac2e4258.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/14f6025f-2fdf-4f56-b6e3-6bd1ac2e4258.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:83:3d:3f:a5:35:ad:30:7a:f9:62:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14f6025f-2fdf-4f56-b6e3-6bd1ac2e4258
        Validity
            Not Before: Oct 15 17:49:45 2026 GMT
            Not After : Jan 13 18:49:45 2027 GMT
        Subject: CN=372227ff-557c-40c4-8b2e-41cb8cd969ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:a4:57:b9:39:b1:67:dd:0a:e4:db:90:9b:
                    7f:1f:df:25:f6:14:30:70:80:6d:f8:d9:fc:74:da:
                    66:5a:b9:49:72:cc:1e:bf:8f:d6:91:ec:13:72:d2:
                    4f:45:11:ae:b1:ac:be:bd:16:d5:b1:68:a9:ae:46:
                    4b:23:d5:b5:31:27:bd:d3:6d:49:60:55:8a:ff:b4:
                    b0:92:cd:c1:24:0e:31:51:53:15:b0:56:fc:ac:a0:
                    09:b6:ba:a2:d8:53:87:dd:a5:be:a6:44:e6:f6:80:
                    57:bd:e4:4a:5e:3c:7a:b1:96:6d:61:20:97:5a:a8:
                    3c:3e:be:e2:fd:2c:c2:d8:ff:d4:37:86:9f:09:ae:
                    95:5f:c5:f5:a3:54:f3:83:20:43:1f:7c:34:83:a0:
                    b6:29:18:5d:06:0a:1b:43:ce:c4:15:dc:0b:cf:9c:
                    89:ec:93:aa:b0:0c:bf:fb:42:dd:ca:1a:82:67:da:
                    9a:54:4f:9c:1a:d3:67:54:8a:7a:86:e7:49:04:89:
                    84:cd:2d:0a:47:31:fe:cf:66:ea:36:10:c6:41:52:
                    ab:b7:e8:52:63:e1:72:a9:77:0b:3b:69:5b:8f:d8:
                    39:f7:3b:d1:e7:2d:7d:ad:5b:74:b0:a4:37:77:eb:
                    27:44:0d:ff:3e:c8:47:6e:d9:ff:d0:c4:24:2e:1e:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EE:84:29:51:DD:C2:0F:4F:54:C2:E7:2D:2D:90:05:F1:D6:07:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/14f6025f-2fdf-4f56-b6e3-6bd1ac2e4258/ed2c8be6-e79b-3fe2-a948-564f5e056144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/14f6025f-2fdf-4f56-b6e3-6bd1ac2e4258/14f6025f-2fdf-4f56-b6e3-6bd1ac2e4258.crl

            X509v3 Authority Key Identifier:
                keyid:3A:65:E5:5C:50:22:76:94:4E:11:86:C6:BD:D8:8A:95:A7:F2:3C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/14f6025f-2fdf-4f56-b6e3-6bd1ac2e4258.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2e5:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:99:68:70:05:8d:7c:de:b5:f7:b9:69:b9:34:f5:fc:40:71:
         44:58:72:bb:25:0e:ed:d2:f5:62:4f:8d:7e:11:ae:51:7b:23:
         e8:39:21:17:dd:71:6b:8f:2b:03:30:c4:8f:4a:65:4e:37:2b:
         57:3c:99:cf:55:4f:8b:06:5c:74:8e:67:70:f7:ed:f6:11:78:
         e9:08:26:af:57:da:61:bb:de:34:aa:26:85:f9:b1:99:51:38:
         9d:8c:da:64:ef:b6:34:99:9d:f3:33:ea:8f:11:87:a1:2c:c7:
         1d:eb:73:56:93:31:14:19:03:35:02:19:d6:be:2c:dd:5c:a5:
         11:e3:5b:f4:2c:f0:d7:dd:0a:b3:69:09:f8:98:69:54:62:29:
         e7:f7:77:72:5b:df:1d:34:58:27:c3:2a:4c:41:38:0c:77:ea:
         7e:40:5a:b9:5a:99:38:e3:00:e9:c3:b9:7b:5c:d0:2f:f4:7d:
         a3:9d:08:24:54:d3:7b:99:72:af:f8:b0:17:37:fe:d5:17:d6:
         42:f2:a2:a0:3b:55:6e:d8:ec:e0:8c:53:c7:ca:fc:bd:f5:b9:
         c7:d3:3a:7c:12:b7:1e:2b:cd:d4:cd:53:92:34:f8:54:81:66:
         32:56:1e:4e:bf:49:5b:ab:02:67:35:24:8e:ef:1b:0e:f9:57:
         d6:7a:4a:6e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+DPT+lNa0wevliEMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTRmNjAyNWYtMmZkZi00ZjU2LWI2ZTMtNmJkMWFjMmU0
MjU4MB4XDTI2MTAxNTE3NDk0NVoXDTI3MDExMzE4NDk0NVowLzEtMCsGA1UEAxMk
MzcyMjI3ZmYtNTU3Yy00MGM0LThiMmUtNDFjYjhjZDk2OWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyykV7k5sWfdCuTbkJt/H98l9hQwcIBt+Nn8
dNpmWrlJcswev4/WkewTctJPRRGusay+vRbVsWiprkZLI9W1MSe9021JYFWK/7Sw
ks3BJA4xUVMVsFb8rKAJtrqi2FOH3aW+pkTm9oBXveRKXjx6sZZtYSCXWqg8Pr7i
/SzC2P/UN4afCa6VX8X1o1TzgyBDH3w0g6C2KRhdBgobQ87EFdwLz5yJ7JOqsAy/
+0LdyhqCZ9qaVE+cGtNnVIp6hudJBImEzS0KRzH+z2bqNhDGQVKrt+hSY+FyqXcL
O2lbj9g59zvR5y19rVt0sKQ3d+snRA3/PshHbtn/0MQkLh48XwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNnuhClR3cIPT1TC5y0tkAXx1gcSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xNGY2
MDI1Zi0yZmRmLTRmNTYtYjZlMy02YmQxYWMyZTQyNTgvZWQyYzhiZTYtZTc5Yi0z
ZmUyLWE5NDgtNTY0ZjVlMDU2MTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMTRmNjAyNWYtMmZkZi00ZjU2LWI2
ZTMtNmJkMWFjMmU0MjU4LzE0ZjYwMjVmLTJmZGYtNGY1Ni1iNmUzLTZiZDFhYzJl
NDI1OC5jcmwwHwYDVR0jBBgwFoAUOmXlXFAidpROEYbGvdiKlafyPKMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS8xNGY2MDI1Zi0yZmRmLTRmNTYtYjZlMy02YmQx
YWMyZTQyNTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgLy5Q8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAM5locAWNfN6197lpuTT1/EBxRFhyuyUO7dL1Yk+NfhGuUXsj6Dkh
F91xa48rAzDEj0plTjcrVzyZz1VPiwZcdI5ncPft9hF46Qgmr1faYbveNKomhfmx
mVE4nYzaZO+2NJmd8zPqjxGHoSzHHetzVpMxFBkDNQIZ1r4s3VylEeNb9Czw190K
s2kJ+JhpVGIp5/d3clvfHTRYJ8MqTEE4DHfqfkBauVqZOOMA6cO5e1zQL/R9o50I
JFTTe5lyr/iwFzf+1RfWQvKioDtVbtjs4IxTx8r8vfW5x9M6fBK3HivN1M1TkjT4
VIFmMlYeTr9JW6sCZzUkju8bDvlX1npKbg==
-----END CERTIFICATE-----
Generated at Wed Nov 4 11:12:14 2026 by rpki-client