Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ad930943-9046-3b79-85f4-d46214bcc2a1.roa
File:                     ad930943-9046-3b79-85f4-d46214bcc2a1.roa (raw, json)
Hash identifier:          UvveujhEUp0qhwmId8Lim3NTKIf3aUvUPXAJ+oKLdgU=
Subject key identifier:   3B:E7:F5:B4:30:4F:CE:5D:6A:C7:4B:29:51:45:78:0D:96:73:38:71
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584F5E62C44A4A30F573B4B414F0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ad930943-9046-3b79-85f4-d46214bcc2a1.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     11537
IP address blocks:        2001:468:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:c4:4a:4a:30:f5:73:b4:b4:14:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=a9c86b8a-33e4-411c-b27c-75fda4009cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:b8:32:c0:92:33:cf:ce:dd:99:e3:ac:9e:
                    11:c0:b1:19:55:e3:62:1c:53:1f:39:d6:59:bf:2e:
                    d0:af:79:5c:d8:73:6d:bf:8a:dc:8f:27:d6:85:4d:
                    ff:6d:c5:51:19:37:a7:60:4d:f9:7c:33:6b:bf:8f:
                    0b:f7:bf:d6:90:10:1d:c4:35:44:12:33:9e:93:83:
                    99:38:60:ff:bd:0e:21:6b:01:ca:67:f8:82:ff:31:
                    a9:d2:cd:32:ca:15:f6:7d:96:68:59:dc:5c:55:8f:
                    65:97:41:a4:72:55:7e:98:60:a0:9e:ef:ef:62:0a:
                    df:a5:e6:9a:cc:3d:ea:5c:60:3e:a6:b5:5a:11:5b:
                    96:6b:be:4f:18:49:f9:d7:6a:96:bd:90:6f:6c:22:
                    73:27:9d:17:30:69:39:ac:23:1d:49:36:7e:4f:29:
                    42:63:44:a8:39:ac:02:51:75:dc:b3:2f:ad:a6:f5:
                    c2:46:63:92:ee:38:c6:98:92:6d:9d:f6:e0:a7:9a:
                    8c:cf:73:5d:58:36:e9:d5:cd:bc:bd:67:c7:79:ff:
                    96:6f:49:ec:6f:79:6e:2a:88:5b:78:ed:97:1f:b1:
                    2d:b9:8d:a0:53:1d:dc:cd:46:58:d1:d5:7d:ff:22:
                    0a:b5:bd:df:6f:d9:e3:45:83:da:a8:5d:ee:49:75:
                    d6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E7:F5:B4:30:4F:CE:5D:6A:C7:4B:29:51:45:78:0D:96:73:38:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ad930943-9046-3b79-85f4-d46214bcc2a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:92:c3:8f:7b:07:a9:09:73:c6:5b:53:47:ed:1e:e1:bc:18:
         5a:47:83:fd:82:3d:ba:d9:e1:d3:b7:48:b3:c8:a6:35:c2:28:
         4d:a0:af:6d:44:b7:2e:32:b0:22:c6:ea:0a:13:aa:7f:91:24:
         20:60:6a:fd:71:49:70:e9:56:04:31:a2:29:b6:f1:d0:9c:5a:
         26:5e:0e:c8:28:cb:29:a6:47:13:cb:15:d9:08:91:16:1c:55:
         fe:c1:1f:7a:33:70:a4:10:6b:d1:2d:26:d5:1a:de:ed:24:8f:
         a9:21:00:06:a0:97:fa:6c:d0:ef:1c:ac:2a:71:c1:3d:b0:c0:
         d7:23:5b:5e:4f:30:fb:f4:e2:3f:bf:6b:4a:b8:06:01:49:1a:
         8c:f8:b7:4e:ab:6e:37:e0:dc:21:97:80:58:fe:53:dc:e5:8b:
         f7:f7:e5:e4:8c:15:e4:ce:10:57:d5:21:f9:0d:76:ca:3d:b8:
         3c:5f:50:18:c6:88:af:87:4e:9c:0d:ec:d8:39:27:c2:e5:94:
         a7:0f:74:a8:1d:31:76:18:2f:72:ad:ca:b4:27:88:b1:f8:de:
         88:d1:bb:6d:4d:ac:de:c0:aa:e5:8c:a3:80:9d:2d:a0:12:36:
         9a:a6:40:c2:b8:45:35:e6:6f:38:1b:f9:15:d2:93:80:50:a3:
         5d:c9:a9:19
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9eYsRKSjD1c7S0FPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
YTljODZiOGEtMzNlNC00MTFjLWIyN2MtNzVmZGE0MDA5Y2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AG4MsCSM8/O3ZnjrJ4RwLEZVeNiHFMfOdZZ
vy7Qr3lc2HNtv4rcjyfWhU3/bcVRGTenYE35fDNrv48L97/WkBAdxDVEEjOek4OZ
OGD/vQ4hawHKZ/iC/zGp0s0yyhX2fZZoWdxcVY9ll0GkclV+mGCgnu/vYgrfpeaa
zD3qXGA+prVaEVuWa75PGEn512qWvZBvbCJzJ50XMGk5rCMdSTZ+TylCY0SoOawC
UXXcsy+tpvXCRmOS7jjGmJJtnfbgp5qMz3NdWDbp1c28vWfHef+Wb0nsb3luKohb
eO2XH7EtuY2gUx3czUZY0dV9/yIKtb3fb9njRYPaqF3uSXXWSwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDvn9bQwT85dasdLKVFFeA2WczhxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYWQ5MzA5NDMtOTA0Ni0z
Yjc5LTg1ZjQtZDQ2MjE0YmNjMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEEaA8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAmpLDj3sHqQlzxltTR+0e4bwYWkeD/YI9utnh07dIs8imNcIoTaCv
bUS3LjKwIsbqChOqf5EkIGBq/XFJcOlWBDGiKbbx0JxaJl4OyCjLKaZHE8sV2QiR
FhxV/sEfejNwpBBr0S0m1Rre7SSPqSEABqCX+mzQ7xysKnHBPbDA1yNbXk8w+/Ti
P79rSrgGAUkajPi3TqtuN+DcIZeAWP5T3OWL9/fl5IwV5M4QV9Uh+Q12yj24PF9Q
GMaIr4dOnA3s2DknwuWUpw90qB0xdhgvcq3KtCeIsfjeiNG7bU2s3sCq5YyjgJ0t
oBI2mqZAwrhFNeZvOBv5FdKTgFCjXcmpGQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:50:21 2026 by rpki-client