Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa
File:                     4e136740-8a5c-3866-bc51-aa216174bac7.roa (raw, json)
Hash identifier:          H7+nq+Vn98H2z4qYxnV9B5M08q01K8CniPKgfDdIgeY=
Subject key identifier:   3D:44:B5:50:71:CC:47:1B:B1:C4:27:34:99:D0:E3:7D:94:BD:B9:29
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F4328584F49752177EDB517C0A0EC2300
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     57974
IP address blocks:        2602:2d4:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:21:77:ed:b5:17:c0:a0:ec:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f9fbfdf7-885a-4ab6-87ff-2a22a4251d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:bf:24:31:d2:61:4f:c4:04:d4:cc:81:6c:
                    06:ce:93:1e:ce:ee:ec:17:9b:69:78:b5:e9:e0:43:
                    a3:65:0d:33:4f:ac:6b:78:47:cc:9a:5b:37:f3:76:
                    43:9f:62:15:ad:2d:0a:1b:a2:8d:a2:d1:0f:00:90:
                    1f:c4:58:ee:34:c0:82:54:f3:bb:ca:ae:da:05:1b:
                    41:e1:8c:6f:fe:9e:0a:55:54:0f:8f:23:0a:b2:ab:
                    32:18:9f:85:1d:4f:87:1a:e1:27:ce:b5:b1:5f:28:
                    81:f6:df:9d:24:cc:ed:9c:18:0d:7b:d0:43:9a:be:
                    ab:88:85:6e:cf:5a:e4:a2:11:a6:38:2e:51:36:18:
                    59:dd:5b:f4:7c:e2:da:2d:21:d5:01:f6:ae:e7:1e:
                    13:93:5b:30:78:06:f6:45:aa:8b:e5:6c:27:98:b8:
                    1c:20:d2:3f:a3:8f:fa:e0:0d:99:38:5c:53:07:1b:
                    da:ab:c1:b8:eb:0b:c5:fa:6c:b7:29:08:e6:95:53:
                    50:42:f3:fd:a0:2b:7e:fe:30:72:73:42:ce:74:3d:
                    f6:5a:2d:f5:54:fc:ad:ad:73:e6:2a:68:0a:ba:0e:
                    41:97:5f:f6:39:f7:3b:b3:8f:b6:c2:a3:e3:14:d7:
                    20:7f:42:b0:cd:30:8c:b4:b3:20:99:4e:45:18:68:
                    da:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:44:B5:50:71:CC:47:1B:B1:C4:27:34:99:D0:E3:7D:94:BD:B9:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:90:e1:63:64:af:58:b9:38:69:09:c9:ec:40:af:f1:a6:96:
         9b:58:f5:aa:1f:ea:d9:42:0f:21:8b:e8:66:fc:88:3f:09:3b:
         fc:c8:a8:c5:e7:50:b4:93:f1:33:c4:f1:4b:ee:e9:22:26:51:
         36:d2:c8:2b:20:85:3b:8c:70:bc:30:d5:01:eb:d8:f4:59:16:
         f0:c4:7e:4a:a2:24:1d:1e:33:b2:20:63:44:a9:23:bd:30:bb:
         e2:8f:70:7e:92:3b:9e:aa:1b:27:49:a0:6f:e6:6f:6c:f1:af:
         c2:cb:ac:46:8d:6e:16:b0:18:ab:b9:bf:4e:85:25:0a:92:d1:
         e9:97:fa:31:e1:b5:3d:44:d0:84:e5:9c:04:c0:77:8f:38:45:
         51:cf:3c:2f:59:64:09:98:8d:b4:f9:f9:13:10:09:3b:ce:00:
         aa:66:34:50:7a:82:fd:fb:ef:a9:b5:1e:8c:15:bf:4a:ff:a5:
         18:1d:88:e4:7c:cc:d3:5a:27:1d:00:1d:ec:4c:0e:66:89:1a:
         1c:ba:46:68:11:15:df:dc:b1:47:13:ee:f6:73:a2:cb:b1:67:
         0e:7c:ac:44:62:66:c0:26:25:3e:04:b4:26:3a:cc:93:9f:e0:
         fb:7d:fa:d9:bf:8b:30:4e:1a:d0:66:e3:71:9e:ab:62:e8:df:
         b8:9b:44:c7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdSF37bUXwKDsIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5
NzA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjlmYmZkZjctODg1YS00YWI2LTg3ZmYtMmEyMmE0MjUxZDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5u/JDHSYU/EBNTMgWwGzpMezu7sF5tpeLXp
4EOjZQ0zT6xreEfMmls383ZDn2IVrS0KG6KNotEPAJAfxFjuNMCCVPO7yq7aBRtB
4Yxv/p4KVVQPjyMKsqsyGJ+FHU+HGuEnzrWxXyiB9t+dJMztnBgNe9BDmr6riIVu
z1rkohGmOC5RNhhZ3Vv0fOLaLSHVAfau5x4Tk1sweAb2RaqL5WwnmLgcINI/o4/6
4A2ZOFxTBxvaq8G46wvF+my3KQjmlVNQQvP9oCt+/jByc0LOdD32Wi31VPytrXPm
KmgKug5Bl1/2Ofc7s4+2wqPjFNcgf0KwzTCMtLMgmU5FGGjaRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD1EtVBxzEcbscQnNJnQ432UvbkpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm
Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvNGUxMzY3NDAtOGE1Yy0z
ODY2LWJjNTEtYWEyMTYxNzRiYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz
OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi
OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji
ZWFjYjk3MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIC1AEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAGQ4WNkr1i5OGkJyexAr/GmlptY9aof6tlCDyGL6Gb8iD8JO/zI
qMXnULST8TPE8Uvu6SImUTbSyCsghTuMcLww1QHr2PRZFvDEfkqiJB0eM7IgY0Sp
I70wu+KPcH6SO56qGydJoG/mb2zxr8LLrEaNbhawGKu5v06FJQqS0emX+jHhtT1E
0ITlnATAd484RVHPPC9ZZAmYjbT5+RMQCTvOAKpmNFB6gv3776m1HowVv0r/pRgd
iOR8zNNaJx0AHexMDmaJGhy6RmgRFd/csUcT7vZzosuxZw58rERiZsAmJT4EtCY6
zJOf4Pt9+tm/izBOGtBm43Geq2Lo37ibRMc=
-----END CERTIFICATE-----
Generated at Fri Oct 9 04:53:58 2026 by rpki-client