Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/988d6b0f-543a-319b-ba3e-4b9a70c725a9.roa
File:                     988d6b0f-543a-319b-ba3e-4b9a70c725a9.roa (raw, json)
Hash identifier:          dDeCDzCLEA1VVUXZa5FRAYTNzNioS/olCEElQFJw5xk=
Subject key identifier:   82:60:7F:45:B9:B9:E0:24:73:89:A0:5C:3B:83:0F:D0:84:D8:E4:89
Certificate issuer:       /CN=f9962fb0-221d-459e-957d-b8a95fae9d35
Certificate serial:       010D0C9F4328584F82ADD17D38EE45C9DF49EB80
Authority key identifier: A1:00:92:F7:EF:2A:12:4C:3B:96:13:F8:F7:22:E4:6D:B6:6B:E2:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/988d6b0f-543a-319b-ba3e-4b9a70c725a9.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     402654
IP address blocks:        2602:f382:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:d1:7d:38:ee:45:c9:df:49:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9962fb0-221d-459e-957d-b8a95fae9d35
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=b2013066-19f5-4351-ba3a-3352b05a4c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:25:84:4a:14:25:21:91:c7:d4:05:5c:a7:
                    fd:e4:3c:59:fc:ed:3e:f8:ec:fe:f7:b9:a5:60:cc:
                    2e:ef:89:8d:51:55:5e:00:cc:59:73:00:a9:01:8f:
                    fe:51:65:0a:5a:14:36:57:a3:20:b3:15:b3:b7:6f:
                    34:70:60:f1:f3:1b:0d:fa:c3:b3:61:1d:c2:83:75:
                    e4:10:c6:1b:dd:b7:97:93:85:72:ab:8e:d9:75:f7:
                    53:23:7e:e9:88:c7:18:d7:17:2d:79:99:6c:47:40:
                    74:2f:7d:7f:2d:43:0c:0d:9e:85:ff:e5:db:4c:b8:
                    f0:4a:2c:02:51:2c:fd:af:70:d7:a1:cb:24:cc:1c:
                    9c:6a:ed:1d:2c:bf:9c:ce:29:32:37:b6:e2:56:87:
                    a9:15:2b:8a:58:16:ee:15:85:4f:a0:9c:8f:9c:6c:
                    5f:62:e4:50:2f:5d:ae:c3:09:e8:c9:dd:08:52:ba:
                    b2:eb:94:85:e1:ea:ff:81:89:a7:e7:27:6d:22:60:
                    ee:da:22:ac:48:5e:78:c9:dc:61:54:14:96:40:75:
                    3b:97:d4:7a:a8:4c:23:43:e1:1a:0e:7b:c3:f1:0e:
                    66:a4:ae:8c:b2:1f:da:17:1c:2c:8b:a5:bd:e6:7c:
                    88:01:32:20:d3:1b:d4:d6:82:6e:cc:46:17:77:fb:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:60:7F:45:B9:B9:E0:24:73:89:A0:5C:3B:83:0F:D0:84:D8:E4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/988d6b0f-543a-319b-ba3e-4b9a70c725a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.crl

            X509v3 Authority Key Identifier:
                keyid:A1:00:92:F7:EF:2A:12:4C:3B:96:13:F8:F7:22:E4:6D:B6:6B:E2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f382:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:88:de:b1:00:1f:a9:52:9f:3f:4b:e8:a0:91:81:be:5c:27:
         a4:08:d0:a2:70:97:36:d6:4a:1c:1f:56:94:7d:a6:ed:dd:68:
         87:fe:cc:4b:a0:2d:df:c0:db:1c:83:17:39:b9:c3:09:d8:85:
         81:46:09:85:bb:77:ee:0a:37:14:68:8e:38:75:f6:c8:e6:5b:
         35:5e:6a:fc:c0:62:e3:0c:aa:c0:3f:0a:4e:f3:2e:67:9e:fe:
         48:29:0f:a4:75:4a:52:5a:2f:53:fa:12:1a:ab:86:e2:72:8e:
         bd:9f:57:78:06:17:1f:f8:37:d5:5c:09:25:f8:34:80:ea:84:
         9e:2e:34:11:5b:99:85:f9:f4:66:bd:e3:f1:37:31:15:ee:69:
         1a:0d:43:83:1a:76:f5:77:18:23:ac:08:60:b7:e5:4d:76:d2:
         a0:c4:8c:b1:6a:c5:f4:ef:85:e8:b1:3a:0c:9c:3e:d9:a7:74:
         20:63:4d:9d:cf:09:7c:ff:d3:ab:1a:1f:23:4b:6d:f0:d6:02:
         0c:2a:1e:3d:e5:30:4f:ed:1d:d8:11:8b:14:6e:48:03:de:15:
         90:2b:2d:34:8c:f0:23:d4:c8:6d:a5:58:37:b2:bf:ab:e7:40:
         e3:83:d4:86:48:dd:07:3c:93:b4:6e:d2:65:f3:d2:aa:5e:72:
         58:44:90:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+CrdF9OO5Fyd9J64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk5NjJmYjAtMjIxZC00NTllLTk1N2QtYjhhOTVmYWU5
ZDM1MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk
YjIwMTMwNjYtMTlmNS00MzUxLWJhM2EtMzM1MmIwNWE0Yzg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunYlhEoUJSGRx9QFXKf95DxZ/O0++Oz+97ml
YMwu74mNUVVeAMxZcwCpAY/+UWUKWhQ2V6MgsxWzt280cGDx8xsN+sOzYR3Cg3Xk
EMYb3beXk4Vyq47ZdfdTI37piMcY1xcteZlsR0B0L31/LUMMDZ6F/+XbTLjwSiwC
USz9r3DXocskzBycau0dLL+czikyN7biVoepFSuKWBbuFYVPoJyPnGxfYuRQL12u
wwnoyd0IUrqy65SF4er/gYmn5ydtImDu2iKsSF54ydxhVBSWQHU7l9R6qEwjQ+Ea
DnvD8Q5mpK6Msh/aFxwsi6W95nyIATIg0xvU1oJuzEYXd/spDwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIJgf0W5ueAkc4mgXDuDD9CE2OSJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mOTk2
MmZiMC0yMjFkLTQ1OWUtOTU3ZC1iOGE5NWZhZTlkMzUvOTg4ZDZiMGYtNTQzYS0z
MTliLWJhM2UtNGI5YTcwYzcyNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjk5NjJmYjAtMjIxZC00NTllLTk1
N2QtYjhhOTVmYWU5ZDM1L2Y5OTYyZmIwLTIyMWQtNDU5ZS05NTdkLWI4YTk1ZmFl
OWQzNS5jcmwwHwYDVR0jBBgwFoAUoQCS9+8qEkw7lhP49yLkbbZr4vIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9mOTk2MmZiMC0yMjFkLTQ1OWUtOTU3ZC1iOGE5
NWZhZTlkMzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgLzggCA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKeI3rEAH6lSnz9L6KCRgb5cJ6QI0KJwlzbWShwfVpR9pu3daIf+
zEugLd/A2xyDFzm5wwnYhYFGCYW7d+4KNxRojjh19sjmWzVeavzAYuMMqsA/Ck7z
Lmee/kgpD6R1SlJaL1P6EhqrhuJyjr2fV3gGFx/4N9VcCSX4NIDqhJ4uNBFbmYX5
9Ga94/E3MRXuaRoNQ4MadvV3GCOsCGC35U120qDEjLFqxfTvheixOgycPtmndCBj
TZ3PCXz/06saHyNLbfDWAgwqHj3lME/tHdgRixRuSAPeFZArLTSM8CPUyG2lWDey
v6vnQOOD1IZI3Qc8k7Ru0mXz0qpeclhEkNs=
-----END CERTIFICATE-----
Generated at Mon Oct 26 01:53:55 2026 by rpki-client