Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/8e2ec633-d365-3a79-bbc5-1dc605fe687b.roa
File:                     8e2ec633-d365-3a79-bbc5-1dc605fe687b.roa (raw, json)
Hash identifier:          CJm0kN3PVcZl8YBnHOq7+0IFWrESaQfRv0foU/qt63U=
Subject key identifier:   DD:84:BA:4C:75:FB:02:C1:50:6D:EB:E5:6A:35:23:A2:36:36:0B:1B
Certificate issuer:       /CN=0c3cf342-4337-44bf-ac45-d0772ad75854
Certificate serial:       010D0C9F4328584F4F07FDE2BDB94EA4433128E0
Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/8e2ec633-d365-3a79-bbc5-1dc605fe687b.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     49791
IP address blocks:        2606:2040:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:fd:e2:bd:b9:4e:a4:43:31:28:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=5b39dc6c-9cf9-4377-86bb-8afa823a52a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:bf:20:eb:0c:db:ee:8c:82:9d:ff:e2:82:
                    32:20:57:27:56:ba:64:ed:2b:d8:ef:b6:7b:e7:3f:
                    63:da:99:d2:83:54:eb:ac:26:b1:fe:70:7f:36:29:
                    14:48:d5:90:98:89:0d:14:d4:24:ba:97:86:36:e6:
                    23:3b:23:59:e4:84:0a:04:66:0d:c7:a0:18:ec:d5:
                    d4:dd:b1:79:58:fc:19:d7:b3:97:c0:0e:05:7f:7d:
                    d3:85:da:83:dc:37:d6:06:ff:8f:3c:70:a1:6f:54:
                    90:06:93:4f:05:24:8d:a0:bc:31:4f:f4:c7:38:b2:
                    c8:7d:63:04:36:d1:b8:dc:55:54:05:15:cf:24:98:
                    14:20:2a:84:8f:89:3f:a2:90:93:70:cd:30:7a:42:
                    ae:6e:3e:08:a5:18:cc:46:a6:6e:85:dd:f5:ec:a8:
                    0e:cf:10:d7:45:5c:72:ae:97:81:55:d5:0e:c7:2f:
                    04:4e:bc:67:ff:f6:50:f0:e3:e3:c9:3e:de:ab:95:
                    80:3a:b2:83:e5:15:dc:2f:71:74:86:3a:82:87:a5:
                    16:a0:c5:cb:7e:ec:ba:07:d6:cc:d1:09:d5:72:9a:
                    50:17:94:4d:34:5a:10:58:3c:f0:04:75:82:41:9d:
                    20:18:66:fd:f7:d0:6b:13:18:ab:98:54:51:6d:38:
                    44:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:84:BA:4C:75:FB:02:C1:50:6D:EB:E5:6A:35:23:A2:36:36:0B:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/8e2ec633-d365-3a79-bbc5-1dc605fe687b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl

            X509v3 Authority Key Identifier:
                keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2040:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:4b:b2:3b:fe:8f:c8:bf:e0:a2:7a:58:4f:08:f4:26:f5:9c:
         f7:53:d7:95:d3:69:64:fd:60:73:1d:49:25:ee:df:c9:ef:0d:
         ca:8f:d1:57:c9:da:af:0f:d0:30:fc:68:14:96:a0:47:87:6f:
         de:c7:72:5b:75:b2:0d:22:78:18:dd:01:96:95:3e:fa:19:17:
         16:5c:d4:c8:3a:bd:87:ba:09:05:06:cf:77:22:88:14:17:4e:
         90:28:c2:d8:6d:dd:be:58:95:7a:e5:10:91:c9:2f:10:69:1d:
         8b:1d:99:c5:4f:7a:ab:28:cb:ec:57:f2:0b:89:92:84:b5:ff:
         3f:52:d7:83:8d:0e:a5:5a:18:84:ca:82:07:d2:d5:3d:a0:cc:
         28:bd:c0:04:22:21:90:49:8d:1c:04:d4:9e:69:36:b4:18:23:
         70:7d:14:ea:41:6e:5a:87:93:c6:ae:5f:f5:36:f0:18:dc:cf:
         0e:d4:80:18:61:a2:f2:c6:16:52:b8:c7:75:87:ff:75:57:94:
         77:d6:9f:f8:f3:2f:bd:c5:aa:df:98:e9:f8:fc:0b:b3:ed:65:
         87:2e:05:c8:56:b1:5e:d8:38:38:79:de:75:62:de:8d:bb:aa:
         b3:f8:5a:8f:02:6b:e6:e4:b3:6e:f8:d4:2e:cc:05:40:91:32:
         af:5e:70:98
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9PB/3ivblOpEMxKOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMzY2YzNDItNDMzNy00NGJmLWFjNDUtZDA3NzJhZDc1
ODU0MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
NWIzOWRjNmMtOWNmOS00Mzc3LTg2YmItOGFmYTgyM2E1MmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYW/IOsM2+6Mgp3/4oIyIFcnVrpk7SvY77Z7
5z9j2pnSg1TrrCax/nB/NikUSNWQmIkNFNQkupeGNuYjOyNZ5IQKBGYNx6AY7NXU
3bF5WPwZ17OXwA4Ff33ThdqD3DfWBv+PPHChb1SQBpNPBSSNoLwxT/THOLLIfWME
NtG43FVUBRXPJJgUICqEj4k/opCTcM0wekKubj4IpRjMRqZuhd317KgOzxDXRVxy
rpeBVdUOxy8ETrxn//ZQ8OPjyT7eq5WAOrKD5RXcL3F0hjqCh6UWoMXLfuy6B9bM
0QnVcppQF5RNNFoQWDzwBHWCQZ0gGGb999BrExirmFRRbThENQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFN2Eukx1+wLBUG3r5Wo1I6I2NgsbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNj
ZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFkNzU4NTQvOGUyZWM2MzMtZDM2NS0z
YTc5LWJiYzUtMWRjNjA1ZmU2ODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGMzY2YzNDItNDMzNy00NGJmLWFj
NDUtZDA3NzJhZDc1ODU0LzBjM2NmMzQyLTQzMzctNDRiZi1hYzQ1LWQwNzcyYWQ3
NTg1NC5jcmwwHwYDVR0jBBgwFoAUM+Vte7hq+1lyLTX3lZ0qh5UflWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3
MmFkNzU4NTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgYgQEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABEuyO/6PyL/gonpYTwj0JvWc91PXldNpZP1gcx1JJe7fye8Nyo/R
V8narw/QMPxoFJagR4dv3sdyW3WyDSJ4GN0BlpU++hkXFlzUyDq9h7oJBQbPdyKI
FBdOkCjC2G3dvliVeuUQkckvEGkdix2ZxU96qyjL7FfyC4mShLX/P1LXg40OpVoY
hMqCB9LVPaDMKL3ABCIhkEmNHATUnmk2tBgjcH0U6kFuWoeTxq5f9TbwGNzPDtSA
GGGi8sYWUrjHdYf/dVeUd9af+PMvvcWq35jp+PwLs+1lhy4FyFaxXtg4OHnedWLe
jbuqs/hajwJr5uSzbvjULswFQJEyr15wmA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:56:49 2026 by rpki-client