Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/9c13a7fc-c12d-3d84-bb5e-3f031ed6f88d.roa
File:                     9c13a7fc-c12d-3d84-bb5e-3f031ed6f88d.roa (raw, json)
Hash identifier:          d18BYOgs92Uu5Jfhj9GqwFth9oQiMMqcGAZDHUfZnMo=
Subject key identifier:   3B:E8:2E:0C:BB:45:25:7E:AF:BA:82:B8:41:78:E4:36:9E:8F:98:33
Certificate issuer:       /CN=21880881-3fac-44ff-9432-16f3262c2c4f
Certificate serial:       010D0C9F4328584F7B18110091F7F3CF4DEE8E00
Authority key identifier: 59:9A:79:9A:21:CC:38:DE:D3:53:D6:31:44:27:F1:3B:B5:BA:5E:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/9c13a7fc-c12d-3d84-bb5e-3f031ed6f88d.roa
Signing time:             Mon 12 Oct 2026 19:48:22 +0000
ROA not before:           Mon 12 Oct 2026 19:48:22 +0000
ROA not after:            Sun 10 Jan 2027 20:48:22 +0000
asID:                     403065
IP address blocks:        2602:f2b5::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/21880881-3fac-44ff-9432-16f3262c2c4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/21880881-3fac-44ff-9432-16f3262c2c4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:18:11:00:91:f7:f3:cf:4d:ee:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21880881-3fac-44ff-9432-16f3262c2c4f
        Validity
            Not Before: Oct 12 19:48:22 2026 GMT
            Not After : Jan 10 20:48:22 2027 GMT
        Subject: CN=e4018846-c399-4868-aec6-996c9bacd194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3d:3d:8f:d6:e6:f8:b9:cd:84:03:56:6a:de:
                    68:36:88:e8:f5:45:1a:18:58:19:f2:b4:49:9d:48:
                    d2:a1:4b:4e:67:02:51:99:32:7a:88:9b:30:60:dd:
                    a4:f6:df:06:7f:9c:7e:80:5a:41:90:96:d7:76:b1:
                    14:c7:1d:08:70:fb:d0:01:58:32:4d:0f:17:b2:48:
                    64:98:df:04:bb:da:7d:af:74:83:10:16:35:ca:26:
                    be:d8:5b:84:8c:40:87:d3:a6:db:a4:57:bd:1f:87:
                    e3:a4:30:d2:38:41:01:c8:46:dd:89:dc:5d:8b:48:
                    57:6f:24:c2:5d:a4:1c:6b:f6:d9:7c:f7:8b:94:ff:
                    00:78:43:3f:9a:99:7d:ea:8f:07:b2:23:9f:b4:db:
                    58:42:bf:3c:6d:5f:15:c7:b8:f6:44:57:42:67:37:
                    f8:ea:dc:3d:91:b3:ea:b4:bf:c8:c6:9d:17:0e:75:
                    e7:4f:e3:ae:92:d9:c4:68:70:9a:de:a4:4c:99:8c:
                    38:ad:12:6c:fe:f9:bd:4d:ae:9a:01:e0:1a:be:77:
                    37:12:a3:65:0a:c7:8f:2f:d9:65:c2:8d:16:d1:38:
                    4c:dd:fd:4d:4e:81:34:ea:24:a0:ab:e1:38:07:6e:
                    00:a1:24:15:64:9b:95:59:41:90:ee:41:06:f8:88:
                    dc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E8:2E:0C:BB:45:25:7E:AF:BA:82:B8:41:78:E4:36:9E:8F:98:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/9c13a7fc-c12d-3d84-bb5e-3f031ed6f88d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/21880881-3fac-44ff-9432-16f3262c2c4f.crl

            X509v3 Authority Key Identifier:
                keyid:59:9A:79:9A:21:CC:38:DE:D3:53:D6:31:44:27:F1:3B:B5:BA:5E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2b5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:13:e4:0a:86:9e:cf:9b:20:5a:c4:b0:50:1f:b5:d8:28:43:
         5f:a9:29:e1:30:b4:83:f3:f9:7a:2a:bd:93:34:20:70:e3:51:
         f7:de:6f:65:11:a5:24:d7:8b:c8:a9:15:0e:23:f3:f5:ca:0d:
         9d:43:c1:d5:7b:4f:27:92:03:e8:49:44:29:fb:26:c4:5f:26:
         7f:a3:d5:8a:ed:c0:02:f4:55:2e:cc:6b:eb:08:b3:fd:ee:f1:
         2b:74:67:af:6d:fd:59:8f:55:de:2b:a3:ef:13:6a:3b:99:ac:
         d8:3a:3b:26:74:1b:f7:f6:71:64:69:0c:3a:20:18:b4:be:23:
         b3:90:6b:52:3d:1a:53:35:e1:0f:59:0e:86:f4:ec:ff:25:94:
         db:e4:8e:52:a5:87:34:2d:64:1f:6e:d1:e5:48:67:d3:2a:f5:
         99:94:33:9d:ed:11:46:2c:4c:54:1b:95:fd:e2:3c:d8:d1:2c:
         86:a5:c6:72:ec:65:3e:cc:ed:09:34:4b:c2:77:8a:58:0f:18:
         6a:fd:8c:e3:3b:54:12:d5:58:06:a0:b7:6d:8e:fa:0d:ae:1e:
         1f:97:26:ef:02:b8:54:92:4e:e2:d5:06:e8:47:0b:7b:fc:e3:
         25:19:2b:f0:bf:44:eb:40:75:e8:83:59:5c:05:d3:ac:c9:42:
         23:49:1a:21
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE97GBEAkffzz03ujgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjE4ODA4ODEtM2ZhYy00NGZmLTk0MzItMTZmMzI2MmMy
YzRmMB4XDTI2MTAxMjE5NDgyMloXDTI3MDExMDIwNDgyMlowLzEtMCsGA1UEAxMk
ZTQwMTg4NDYtYzM5OS00ODY4LWFlYzYtOTk2YzliYWNkMTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz09j9bm+LnNhANWat5oNojo9UUaGFgZ8rRJ
nUjSoUtOZwJRmTJ6iJswYN2k9t8Gf5x+gFpBkJbXdrEUxx0IcPvQAVgyTQ8Xskhk
mN8Eu9p9r3SDEBY1yia+2FuEjECH06bbpFe9H4fjpDDSOEEByEbdidxdi0hXbyTC
XaQca/bZfPeLlP8AeEM/mpl96o8HsiOftNtYQr88bV8Vx7j2RFdCZzf46tw9kbPq
tL/Ixp0XDnXnT+OuktnEaHCa3qRMmYw4rRJs/vm9Ta6aAeAavnc3EqNlCsePL9ll
wo0W0ThM3f1NToE06iSgq+E4B24AoSQVZJuVWUGQ7kEG+IjcdwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDvoLgy7RSV+r7qCuEF45Daej5gzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8yMTg4
MDg4MS0zZmFjLTQ0ZmYtOTQzMi0xNmYzMjYyYzJjNGYvOWMxM2E3ZmMtYzEyZC0z
ZDg0LWJiNWUtM2YwMzFlZDZmODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMjE4ODA4ODEtM2ZhYy00NGZmLTk0
MzItMTZmMzI2MmMyYzRmLzIxODgwODgxLTNmYWMtNDRmZi05NDMyLTE2ZjMyNjJj
MmM0Zi5jcmwwHwYDVR0jBBgwFoAUWZp5miHMON7TU9YxRCfxO7W6XrwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS8yMTg4MDg4MS0zZmFjLTQ0ZmYtOTQzMi0xNmYz
MjYyYzJjNGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgLytQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOBPkCoaez5sgWsSwUB+12ChDX6kp4TC0g/P5eiq9kzQgcONR995v
ZRGlJNeLyKkVDiPz9coNnUPB1XtPJ5ID6ElEKfsmxF8mf6PViu3AAvRVLsxr6wiz
/e7xK3Rnr239WY9V3iuj7xNqO5ms2Do7JnQb9/ZxZGkMOiAYtL4js5BrUj0aUzXh
D1kOhvTs/yWU2+SOUqWHNC1kH27R5Uhn0yr1mZQzne0RRixMVBuV/eI82NEshqXG
cuxlPsztCTRLwneKWA8Yav2M4ztUEtVYBqC3bY76Da4eH5cm7wK4VJJO4tUG6EcL
e/zjJRkr8L9E60B16INZXAXTrMlCI0kaIQ==
-----END CERTIFICATE-----
Generated at Sun Nov 1 17:32:17 2026 by rpki-client