Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/3c588e6c-459c-3c29-8c95-e39ac3e14d2b.roa
File:                     3c588e6c-459c-3c29-8c95-e39ac3e14d2b.roa (raw, json)
Hash identifier:          sgir4DyoD9E+edC/bBG2b3SjreN1z70KR6MRBihk2Uo=
Subject key identifier:   8D:35:C9:7C:1D:92:93:A6:B5:57:64:EF:CD:75:7F:AE:32:0C:D3:69
Certificate issuer:       /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
Certificate serial:       010D0C9F4328584F480D2FCB89A33E14EF3C3F80
Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/3c588e6c-459c-3c29-8c95-e39ac3e14d2b.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     32002
IP address blocks:        2602:f964:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:2f:cb:89:a3:3e:14:ef:3c:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=dcec52a4-cc43-4486-a8fe-b200fc10b34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:41:1c:20:a5:28:3d:cb:60:25:1c:8b:15:
                    54:e2:12:91:85:58:7a:cc:a3:48:f3:1b:d2:5c:7f:
                    d2:8e:d8:d5:5c:00:b9:91:4c:44:be:08:8d:0b:2e:
                    09:11:ab:2a:ec:cd:a2:8a:40:1f:5a:85:4d:01:a3:
                    05:0a:db:1d:24:6e:20:e2:44:41:bd:9d:b1:94:92:
                    47:0a:65:ba:df:a6:cb:b9:f0:c9:09:02:91:dc:a4:
                    9d:34:e3:7b:df:0b:68:b2:aa:fc:be:db:2b:1f:73:
                    c7:03:99:57:80:e8:78:89:02:0b:ef:49:3f:2c:2e:
                    44:66:a3:74:27:5d:b7:4b:36:70:ec:2a:f3:eb:fb:
                    cd:86:86:6f:e3:0e:12:89:54:47:b7:c7:69:e4:38:
                    27:c0:10:33:f4:20:b6:5c:fa:b7:e1:5b:6c:34:a0:
                    e8:68:69:5a:06:89:ea:ce:c9:1f:ed:18:81:ed:51:
                    90:79:8e:21:84:28:22:99:2f:e7:91:a6:c6:9b:cd:
                    0d:8a:e6:03:30:a4:ef:7c:42:56:90:22:7d:1b:67:
                    6e:a1:d7:a6:aa:02:5f:b6:31:28:96:b7:b9:b6:51:
                    d6:09:42:23:74:80:75:3b:ab:4b:bb:3e:c8:2b:a4:
                    6b:78:bc:90:da:f6:3f:4c:0c:29:8f:a4:c4:e3:0a:
                    00:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:35:C9:7C:1D:92:93:A6:B5:57:64:EF:CD:75:7F:AE:32:0C:D3:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/3c588e6c-459c-3c29-8c95-e39ac3e14d2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl

            X509v3 Authority Key Identifier:
                keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f964:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:25:63:72:9d:84:86:75:8f:4a:cf:50:9d:6e:a8:ec:64:f3:
         12:9e:67:4d:c9:b2:46:c8:c4:7e:c4:9b:e5:d8:fb:5a:20:aa:
         7a:ce:58:0b:f4:b6:61:1c:2c:ee:97:1c:96:9d:cc:87:df:c4:
         0f:66:57:5e:e4:8f:08:0f:49:c8:32:76:60:a5:b0:9d:e6:aa:
         67:28:b6:73:62:31:76:e4:06:7c:2b:c6:10:23:7d:a0:02:50:
         18:14:d6:7d:1d:1e:e3:b5:52:7a:db:ce:7a:5c:7a:25:40:19:
         d5:77:18:af:c0:e6:61:0a:6c:dd:c5:99:dc:4e:24:bf:ef:8f:
         7d:7f:b9:34:c7:fe:ac:1d:31:13:94:0d:68:ea:dc:4e:09:da:
         e9:af:97:a6:64:1b:79:45:05:a5:85:99:cd:96:05:48:bd:96:
         4c:5f:02:a4:4b:38:4b:1f:85:9f:91:a8:92:9d:5e:d9:6d:d0:
         77:5b:eb:68:fd:9c:18:0e:4b:1f:c4:b4:5f:a2:e9:11:32:aa:
         e4:4b:4c:b5:19:13:ea:af:17:d3:d7:42:55:85:6c:1c:07:81:
         ab:29:44:fc:ea:29:b6:d1:93:04:57:0f:4e:97:f5:34:b0:d4:
         6c:eb:d2:70:01:26:6d:17:da:4b:31:5d:4a:b1:ff:a1:59:6f:
         65:fb:57:51
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9IDS/LiaM+FO88P4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYThiODRlMmItYWZiZS00YjM1LWIwMDUtZTBkZmNhMmUy
M2Q4MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk
ZGNlYzUyYTQtY2M0My00NDg2LWE4ZmUtYjIwMGZjMTBiMzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGVBHCClKD3LYCUcixVU4hKRhVh6zKNI8xvS
XH/SjtjVXAC5kUxEvgiNCy4JEasq7M2iikAfWoVNAaMFCtsdJG4g4kRBvZ2xlJJH
CmW636bLufDJCQKR3KSdNON73wtosqr8vtsrH3PHA5lXgOh4iQIL70k/LC5EZqN0
J123SzZw7Crz6/vNhoZv4w4SiVRHt8dp5DgnwBAz9CC2XPq34VtsNKDoaGlaBonq
zskf7RiB7VGQeY4hhCgimS/nkabGm80NiuYDMKTvfEJWkCJ9G2duodemqgJftjEo
lre5tlHWCUIjdIB1O6tLuz7IK6RreLyQ2vY/TAwpj6TE4woA6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI01yXwdkpOmtVdk7811f64yDNNpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hOGI4
NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRmY2EyZTIzZDgvM2M1ODhlNmMtNDU5Yy0z
YzI5LThjOTUtZTM5YWMzZTE0ZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYThiODRlMmItYWZiZS00YjM1LWIw
MDUtZTBkZmNhMmUyM2Q4L2E4Yjg0ZTJiLWFmYmUtNGIzNS1iMDA1LWUwZGZjYTJl
MjNkOC5jcmwwHwYDVR0jBBgwFoAUJyaHnCMjdlLoJfSaxiQ6/6bmTi8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hOGI4NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRm
Y2EyZTIzZDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ZAAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG4lY3KdhIZ1j0rPUJ1uqOxk8xKeZ03JskbIxH7Em+XY+1ogqnrO
WAv0tmEcLO6XHJadzIffxA9mV17kjwgPScgydmClsJ3mqmcotnNiMXbkBnwrxhAj
faACUBgU1n0dHuO1UnrbznpceiVAGdV3GK/A5mEKbN3FmdxOJL/vj31/uTTH/qwd
MROUDWjq3E4J2umvl6ZkG3lFBaWFmc2WBUi9lkxfAqRLOEsfhZ+RqJKdXtlt0Hdb
62j9nBgOSx/EtF+i6REyquRLTLUZE+qvF9PXQlWFbBwHgaspRPzqKbbRkwRXD06X
9TSw1Gzr0nABJm0X2ksxXUqx/6FZb2X7V1E=
-----END CERTIFICATE-----
Generated at Sat Oct 3 06:36:19 2026 by rpki-client