Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/e1cbbdf1-1a5c-3465-9779-6faf0e061be0.roa
File:                     e1cbbdf1-1a5c-3465-9779-6faf0e061be0.roa (raw, json)
Hash identifier:          A/oc82EhhAi51yArAEnExGT5hC9AzSeZVM7Tj1vC2bw=
Subject key identifier:   2E:F2:B4:C5:33:F8:2B:EC:38:6E:A2:42:58:14:B6:50:71:E2:0A:EE
Certificate issuer:       /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial:       010D0C9F4328584EBC770143448B10540AA5A5C0
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/e1cbbdf1-1a5c-3465-9779-6faf0e061be0.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     62553
IP address blocks:        2602:f71e:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:01:43:44:8b:10:54:0a:a5:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=1fcb740f-4839-4e52-97a6-fc5bcd7f5a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:63:62:48:43:bb:84:50:d4:2b:ba:92:46:16:
                    06:94:46:d2:c2:64:81:4e:88:43:61:7a:d5:4c:db:
                    6e:71:1e:76:8f:c9:4a:78:32:b5:cc:4b:19:b0:8b:
                    a4:94:51:c5:84:4d:3e:a5:32:9d:24:55:09:17:30:
                    8c:1c:a2:96:77:47:f4:ad:94:96:74:81:48:c3:37:
                    af:bb:5d:00:82:bf:01:24:c6:e3:56:84:0c:94:86:
                    dc:c3:93:f4:6f:fd:69:5a:4f:34:9a:8c:59:3f:4b:
                    a8:63:6e:0d:93:98:ab:c6:d2:86:c9:0f:4d:d5:07:
                    59:b4:26:72:f8:b7:e2:96:9b:14:11:96:f5:26:5d:
                    76:79:0d:48:2e:e1:ba:71:e7:ae:37:6e:be:68:0f:
                    d1:52:e9:33:95:57:df:e3:2e:a8:f4:e7:db:97:5a:
                    15:a1:8a:1d:cb:33:c4:cf:c9:f9:1d:aa:27:a0:4e:
                    df:94:ea:70:a1:ef:f7:20:2b:c2:af:5e:eb:cf:13:
                    56:79:b4:e4:5c:3f:a4:d2:91:53:ba:ef:c9:8b:2e:
                    c7:03:fd:62:85:5a:ef:d8:64:5b:a4:92:4b:0d:e1:
                    35:34:12:e4:0e:b7:74:c6:2c:34:bc:9e:51:4b:1a:
                    a5:bb:bc:eb:47:10:59:e1:42:00:af:eb:05:6f:8c:
                    f7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F2:B4:C5:33:F8:2B:EC:38:6E:A2:42:58:14:B6:50:71:E2:0A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/e1cbbdf1-1a5c-3465-9779-6faf0e061be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f71e:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f6:95:de:6c:00:aa:f5:31:c6:ae:9f:7e:12:a5:9d:a4:29:
         a1:61:69:58:f1:e4:8d:71:a5:ba:ae:3c:46:57:1e:cf:c6:ac:
         b9:86:04:9a:e0:c1:71:88:b1:3e:57:45:cb:dc:7e:8c:5e:78:
         30:66:6e:1d:21:50:b5:c9:13:29:79:a8:35:44:80:e7:bb:6e:
         1c:40:7b:b5:32:13:ec:05:ab:83:6e:c2:70:44:bb:aa:7a:99:
         2f:a8:59:06:34:df:2c:ab:63:fe:2f:6e:92:82:12:b9:fa:b4:
         56:ba:5b:f9:29:35:cf:a2:2f:25:bd:e8:ef:28:c8:c3:f8:13:
         f9:c0:0c:6b:db:32:6c:b6:58:7e:2b:a8:48:c9:20:9f:f1:f7:
         0b:d1:3f:3a:42:2e:ef:69:3d:80:cd:17:5f:ec:27:88:a4:bc:
         a8:bd:be:a6:0c:61:a9:3c:21:1f:67:89:e6:17:c0:d4:a4:ab:
         8c:f6:62:d1:ad:22:32:34:fc:99:25:6b:87:c3:39:d2:ee:b3:
         83:ae:74:ea:e1:69:7c:f5:16:32:40:ba:f3:50:47:11:2d:37:
         fc:7d:e7:26:ed:68:3a:76:cc:3c:3d:12:c9:30:f5:eb:99:26:
         99:ce:70:d1:64:5a:56:cb:d0:84:24:fc:dc:07:81:46:49:87:
         07:c8:30:c5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE68dwFDRIsQVAqlpcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4
ZTljMB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk
MWZjYjc0MGYtNDgzOS00ZTUyLTk3YTYtZmM1YmNkN2Y1YTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmNiSEO7hFDUK7qSRhYGlEbSwmSBTohDYXrV
TNtucR52j8lKeDK1zEsZsIuklFHFhE0+pTKdJFUJFzCMHKKWd0f0rZSWdIFIwzev
u10Agr8BJMbjVoQMlIbcw5P0b/1pWk80moxZP0uoY24Nk5irxtKGyQ9N1QdZtCZy
+LfilpsUEZb1Jl12eQ1ILuG6ceeuN26+aA/RUukzlVff4y6o9Ofbl1oVoYodyzPE
z8n5HaonoE7flOpwoe/3ICvCr17rzxNWebTkXD+k0pFTuu/Jiy7HA/1ihVrv2GRb
pJJLDeE1NBLkDrd0xiw0vJ5RSxqlu7zrRxBZ4UIAr+sFb4z3BQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFC7ytMUz+CvsOG6iQlgUtlBx4gruMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3
ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvZTFjYmJkZjEtMWE1Yy0z
NDY1LTk3NzktNmZhZjBlMDYxYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4
YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw
OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1
YzZmMDhlOWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3HgIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAGvaV3mwAqvUxxq6ffhKlnaQpoWFpWPHkjXGluq48Rlcez8asuYYE
muDBcYixPldFy9x+jF54MGZuHSFQtckTKXmoNUSA57tuHEB7tTIT7AWrg27CcES7
qnqZL6hZBjTfLKtj/i9ukoISufq0Vrpb+Sk1z6IvJb3o7yjIw/gT+cAMa9sybLZY
fiuoSMkgn/H3C9E/OkIu72k9gM0XX+wniKS8qL2+pgxhqTwhH2eJ5hfA1KSrjPZi
0a0iMjT8mSVrh8M50u6zg6506uFpfPUWMkC681BHES03/H3nJu1oOnbMPD0SyTD1
65kmmc5w0WRaVsvQhCT83AeBRkmHB8gwxQ==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:33:27 2026 by rpki-client