Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/61983bb9-0584-3236-ad13-b1c76e185e20.roa
File:                     61983bb9-0584-3236-ad13-b1c76e185e20.roa (raw, json)
Hash identifier:          0awcWDXAnJrycYC/kjgxpnNESaP9tQchzrZSo3inq0M=
Subject key identifier:   F8:89:82:47:92:D3:86:B0:29:15:E7:63:93:DC:BB:B9:1D:76:0F:9A
Certificate issuer:       /CN=3057ebcb-33e6-4734-8aed-0486104b2865
Certificate serial:       010D0C9F4328584EF2E750882D7C61907F1CCF80
Authority key identifier: 83:B3:A8:7D:FF:77:85:F1:23:CF:48:8D:B9:DA:81:F6:A2:8A:0E:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/61983bb9-0584-3236-ad13-b1c76e185e20.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     401673
IP address blocks:        2602:f371::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/3057ebcb-33e6-4734-8aed-0486104b2865.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/3057ebcb-33e6-4734-8aed-0486104b2865.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:50:88:2d:7c:61:90:7f:1c:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3057ebcb-33e6-4734-8aed-0486104b2865
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=7bf3e782-9391-481f-a079-ef2c82eee6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4f:aa:bc:08:14:4d:53:80:59:b0:25:29:77:
                    02:3e:c9:e8:f8:59:cc:90:3a:a2:4a:8a:7f:08:42:
                    cf:d0:49:0e:39:61:65:44:e4:16:c6:97:10:96:14:
                    41:0b:30:a8:16:79:22:12:28:b5:0c:a3:dd:dd:1a:
                    d2:b8:c7:cd:1b:31:95:36:23:12:9c:eb:a7:bf:5c:
                    d4:83:6a:e1:af:80:6b:bf:44:89:6f:66:ec:84:18:
                    5a:fe:21:ed:ac:d0:ee:be:5a:d5:88:6b:36:39:4f:
                    5c:2c:38:97:a1:fe:51:05:19:08:4d:82:d7:31:06:
                    6e:9e:dd:82:b5:8c:f7:d3:59:8d:a8:36:00:7e:f5:
                    4e:87:4f:fb:82:75:c0:8c:dc:58:fd:19:2b:36:69:
                    92:70:5a:01:d1:81:9e:be:a4:e0:09:0e:2e:40:f6:
                    56:1b:a2:20:7b:d8:64:d3:46:ab:8a:1e:52:c5:bd:
                    4d:de:5e:6a:d4:a9:40:2e:f2:21:95:03:68:e1:4c:
                    87:db:fc:f4:12:6c:e1:ee:24:74:7e:18:dd:50:0e:
                    b4:61:f7:ac:69:4d:f7:9e:5f:5b:f1:a0:b9:b7:aa:
                    0b:36:b9:f6:36:d7:11:08:12:6b:ff:28:b7:65:06:
                    c5:00:34:49:d2:99:b7:68:24:9a:21:59:84:a4:09:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:89:82:47:92:D3:86:B0:29:15:E7:63:93:DC:BB:B9:1D:76:0F:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/61983bb9-0584-3236-ad13-b1c76e185e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/3057ebcb-33e6-4734-8aed-0486104b2865.crl

            X509v3 Authority Key Identifier:
                keyid:83:B3:A8:7D:FF:77:85:F1:23:CF:48:8D:B9:DA:81:F6:A2:8A:0E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f371::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:7b:3d:0e:80:de:b9:5a:be:d0:21:6b:d6:5b:b2:a1:2a:80:
         33:0c:26:88:ef:ac:62:cb:3f:ae:f3:54:ae:17:7b:1c:e0:50:
         04:29:97:cf:91:af:40:0c:43:73:5d:6a:e0:b2:51:d4:7c:50:
         c5:9c:a1:5a:c4:cd:d1:e2:44:ad:5e:e6:de:e6:c9:4b:05:e7:
         a4:23:d1:28:b5:d6:ae:77:80:cc:81:4e:3f:40:44:aa:1d:3d:
         dd:e0:b2:fd:23:e0:29:41:4c:fb:d7:b3:51:49:9a:1b:9a:83:
         90:be:41:97:62:f3:3a:ef:53:c1:09:79:a5:d7:ed:3f:ed:cd:
         49:8f:4b:03:d4:e7:6c:05:2b:97:ce:b6:b5:03:93:85:0f:76:
         75:fe:f6:45:6f:96:79:75:2a:b1:85:17:2b:82:fe:5c:36:69:
         6a:aa:0a:e6:f3:28:0a:bb:a4:4f:ed:8d:e7:43:65:85:10:ff:
         6d:04:c4:21:17:6e:4e:33:5b:61:16:09:74:ab:3a:27:00:14:
         e5:f2:84:35:17:95:ff:27:d9:d6:8a:18:27:ed:c4:f9:52:c8:
         c6:58:88:16:63:4c:f9:bb:93:4c:b5:77:08:de:b2:af:01:52:
         71:60:af:93:8b:33:5b:30:ce:c4:5c:ea:9f:20:f4:30:51:dc:
         f6:96:3e:f1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7y51CILXxhkH8cz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzA1N2ViY2ItMzNlNi00NzM0LThhZWQtMDQ4NjEwNGIy
ODY1MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk
N2JmM2U3ODItOTM5MS00ODFmLWEwNzktZWYyYzgyZWVlNmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE+qvAgUTVOAWbAlKXcCPsno+FnMkDqiSop/
CELP0EkOOWFlROQWxpcQlhRBCzCoFnkiEii1DKPd3RrSuMfNGzGVNiMSnOunv1zU
g2rhr4Brv0SJb2bshBha/iHtrNDuvlrViGs2OU9cLDiXof5RBRkITYLXMQZunt2C
tYz301mNqDYAfvVOh0/7gnXAjNxY/RkrNmmScFoB0YGevqTgCQ4uQPZWG6Ige9hk
00arih5Sxb1N3l5q1KlALvIhlQNo4UyH2/z0Emzh7iR0fhjdUA60YfesaU33nl9b
8aC5t6oLNrn2NtcRCBJr/yi3ZQbFADRJ0pm3aCSaIVmEpAmGwwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPiJgkeS04awKRXnY5Pcu7kddg+aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zMDU3
ZWJjYi0zM2U2LTQ3MzQtOGFlZC0wNDg2MTA0YjI4NjUvNjE5ODNiYjktMDU4NC0z
MjM2LWFkMTMtYjFjNzZlMTg1ZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzA1N2ViY2ItMzNlNi00NzM0LThh
ZWQtMDQ4NjEwNGIyODY1LzMwNTdlYmNiLTMzZTYtNDczNC04YWVkLTA0ODYxMDRi
Mjg2NS5jcmwwHwYDVR0jBBgwFoAUg7Ooff93hfEjz0iNudqB9qKKDrwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8zMDU3ZWJjYi0zM2U2LTQ3MzQtOGFlZC0wNDg2
MTA0YjI4NjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgLzcQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJns9DoDeuVq+0CFr1luyoSqAMwwmiO+sYss/rvNUrhd7HOBQBCmX
z5GvQAxDc11q4LJR1HxQxZyhWsTN0eJErV7m3ubJSwXnpCPRKLXWrneAzIFOP0BE
qh093eCy/SPgKUFM+9ezUUmaG5qDkL5Bl2LzOu9TwQl5pdftP+3NSY9LA9TnbAUr
l862tQOThQ92df72RW+WeXUqsYUXK4L+XDZpaqoK5vMoCrukT+2N50NlhRD/bQTE
IRduTjNbYRYJdKs6JwAU5fKENReV/yfZ1ooYJ+3E+VLIxliIFmNM+buTTLV3CN6y
rwFScWCvk4szWzDOxFzqnyD0MFHc9pY+8Q==
-----END CERTIFICATE-----
Generated at Wed Aug 26 05:50:27 2026 by rpki-client