Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/97c027da-6d39-3b13-a764-2759d5652401.roa
File:                     97c027da-6d39-3b13-a764-2759d5652401.roa (raw, json)
Hash identifier:          IFndCL0GKFGQpeZBLKgpGQlMkaJQSWHCtWXcukI6n1Y=
Subject key identifier:   B7:F5:F9:56:79:9A:87:57:F0:52:E2:D6:68:78:E8:1B:B9:66:4E:15
Certificate issuer:       /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial:       010D0C9F4328584F225D212D43C261518E21E100
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/97c027da-6d39-3b13-a764-2759d5652401.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     62553
IP address blocks:        2602:f71e:41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:21:2d:43:c2:61:51:8e:21:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=3eaae7b9-7e67-4964-b1c9-f967e6cbb75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2f:9a:7f:28:ff:33:e3:92:29:a8:7b:13:ae:
                    aa:90:07:b1:e7:34:9f:d7:11:1b:56:5d:ed:04:cb:
                    cc:48:40:7e:bb:8f:37:64:ab:25:df:54:1d:86:be:
                    55:ac:6f:a5:bc:60:4a:02:f0:1d:a4:41:dd:5e:50:
                    01:1c:5d:4c:15:f9:52:39:2e:dc:ca:9b:3e:5a:30:
                    66:a6:bc:c2:bd:e4:84:8b:98:c5:36:aa:3f:19:36:
                    40:27:74:b9:5a:61:36:ea:ae:ab:a7:3e:bf:ac:7a:
                    be:1a:27:a5:0c:5d:76:56:50:87:74:b6:3d:d2:95:
                    93:eb:08:a2:f2:9e:49:1d:d2:5a:fc:9f:d6:85:e3:
                    b8:dd:95:da:16:ec:cc:5c:f3:a2:e5:9f:77:62:f5:
                    55:2d:cf:96:9f:6c:c2:a5:fb:ff:80:4f:ac:59:bc:
                    ad:c8:06:60:ae:cc:52:0e:bc:e7:86:01:77:db:72:
                    26:75:da:55:dc:f1:95:97:da:24:14:cd:e3:9c:5d:
                    dc:a7:f8:ae:b6:86:f4:9a:66:f3:3b:a6:28:43:77:
                    6e:6d:97:94:b0:8b:f2:b6:07:41:ac:48:f0:93:52:
                    9f:96:dc:55:ff:cb:77:d2:94:e4:2c:23:ad:57:13:
                    90:36:48:b1:13:c8:af:65:f3:5c:fe:72:dc:22:cd:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F5:F9:56:79:9A:87:57:F0:52:E2:D6:68:78:E8:1B:B9:66:4E:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/97c027da-6d39-3b13-a764-2759d5652401.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f71e:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:fb:d3:c7:44:34:f8:c2:da:09:f9:3e:8a:ec:d4:6f:c4:41:
         57:06:2d:e1:81:75:d8:b3:be:56:13:5b:5f:5a:5d:6e:ea:e3:
         11:06:43:48:93:36:e6:70:8f:15:e9:0f:34:ac:5b:e5:a5:14:
         00:74:54:90:61:b6:61:49:35:75:f5:f0:54:b2:4b:4f:8a:8c:
         a8:3a:3a:14:2c:d5:f1:b6:b6:7e:61:04:2b:ba:44:54:cf:48:
         ce:ce:21:e2:01:5b:0d:e1:c6:fa:bd:71:79:e8:53:46:28:39:
         ab:85:2f:79:78:03:69:ce:34:d8:39:09:58:a4:ec:bd:29:89:
         62:f8:ca:ec:03:bd:76:8d:da:db:a9:36:e3:18:01:21:94:38:
         aa:7d:86:a7:1c:32:f0:38:9e:69:2a:6d:76:6b:2e:34:5e:7d:
         f6:36:17:47:db:ab:c8:75:92:a1:34:16:52:de:5b:7c:58:52:
         6b:27:37:16:7b:99:6b:02:44:8b:c2:9e:66:e7:06:5c:51:f3:
         0a:97:c4:8d:26:a9:e5:6c:c6:3b:c2:1a:de:f2:f5:26:9b:8d:
         56:87:96:60:c3:3b:00:41:83:ab:8f:6f:80:c4:b3:2f:7f:22:
         2d:86:07:e8:d3:df:29:de:13:b8:9d:f1:8b:55:fc:f0:ec:ea:
         be:44:38:0a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8iXSEtQ8JhUY4h4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4
ZTljMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
M2VhYWU3YjktN2U2Ny00OTY0LWIxYzktZjk2N2U2Y2JiNzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC+afyj/M+OSKah7E66qkAex5zSf1xEbVl3t
BMvMSEB+u483ZKsl31Qdhr5VrG+lvGBKAvAdpEHdXlABHF1MFflSOS7cyps+WjBm
przCveSEi5jFNqo/GTZAJ3S5WmE26q6rpz6/rHq+GielDF12VlCHdLY90pWT6wii
8p5JHdJa/J/WheO43ZXaFuzMXPOi5Z93YvVVLc+Wn2zCpfv/gE+sWbytyAZgrsxS
DrznhgF323ImddpV3PGVl9okFM3jnF3cp/iutob0mmbzO6YoQ3dubZeUsIvytgdB
rEjwk1KfltxV/8t30pTkLCOtVxOQNkixE8ivZfNc/nLcIs0pjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLf1+VZ5modX8FLi1mh46Bu5Zk4VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3
ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvOTdjMDI3ZGEtNmQzOS0z
YjEzLWE3NjQtMjc1OWQ1NjUyNDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4
YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw
OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1
YzZmMDhlOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3HgBB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMf708dENPjC2gn5Pors1G/EQVcGLeGBddizvlYTW19aXW7q4xEG
Q0iTNuZwjxXpDzSsW+WlFAB0VJBhtmFJNXX18FSyS0+KjKg6OhQs1fG2tn5hBCu6
RFTPSM7OIeIBWw3hxvq9cXnoU0YoOauFL3l4A2nONNg5CVik7L0piWL4yuwDvXaN
2tupNuMYASGUOKp9hqccMvA4nmkqbXZrLjReffY2F0fbq8h1kqE0FlLeW3xYUmsn
NxZ7mWsCRIvCnmbnBlxR8wqXxI0mqeVsxjvCGt7y9SabjVaHlmDDOwBBg6uPb4DE
sy9/Ii2GB+jT3yneE7id8YtV/PDs6r5EOAo=
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:25:02 2026 by rpki-client