Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/76bf366e-d04a-36a6-8d40-3b4c27707374.roa
File:                     76bf366e-d04a-36a6-8d40-3b4c27707374.roa (raw, json)
Hash identifier:          wutrYEZgFJeb/DjeS80djkGVEC/Px8ro40gdMqg+n8g=
Subject key identifier:   7E:DC:F9:E2:AB:EB:5A:D8:1D:E2:6C:CF:04:61:AA:4D:AD:AE:CC:D0
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584F5A348A7BDAC30F74604FEF50
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/76bf366e-d04a-36a6-8d40-3b4c27707374.roa
Signing time:             Thu 01 Oct 2026 01:04:04 +0000
ROA not before:           Thu 01 Oct 2026 01:04:04 +0000
ROA not after:            Wed 30 Dec 2026 02:04:04 +0000
asID:                     25616
IP address blocks:        2602:f777:440::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:34:8a:7b:da:c3:0f:74:60:4f:ef:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Oct  1 01:04:04 2026 GMT
            Not After : Dec 30 02:04:04 2026 GMT
        Subject: CN=3ea1bcce-e15b-483c-b2d9-414fa4a0d3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3e:25:93:45:b3:42:2b:69:fb:f2:e8:8d:86:
                    74:22:d0:5b:46:26:c5:aa:c7:31:2e:e0:3c:64:be:
                    cf:e6:67:b4:56:ff:bc:2c:3f:34:0f:43:72:15:97:
                    98:76:08:71:47:c9:e7:68:a5:ad:b5:2f:78:d2:ba:
                    07:ff:cf:1b:55:e3:e2:d8:06:a4:3e:e2:a2:4b:bc:
                    1d:15:dc:1a:07:c8:bd:7f:e5:05:b9:d6:5f:61:2e:
                    dc:fc:97:90:2e:58:a7:18:f5:0a:54:d2:c2:71:cb:
                    74:6a:43:4b:aa:3e:eb:5a:7e:84:77:b9:24:12:79:
                    c4:cd:fa:05:00:ce:fc:fa:32:6f:28:c1:af:8d:a5:
                    1d:ec:fc:c7:c1:62:e0:28:86:df:aa:32:f0:38:af:
                    09:ae:cd:4e:1a:d3:aa:63:88:d2:d3:c8:fd:7c:d0:
                    3c:42:94:2b:2c:d5:be:0f:d1:8e:df:62:d3:06:44:
                    8e:87:6d:e5:8b:51:2a:13:b4:27:58:5c:cf:9f:62:
                    a8:1a:bd:10:7b:60:76:8b:50:ab:1c:90:c0:04:76:
                    d0:a3:18:5f:e6:42:ea:ee:26:a0:64:36:58:47:54:
                    46:12:a6:4b:fb:49:9d:96:b1:de:a4:a4:f8:cc:e4:
                    db:59:c8:5a:00:d5:fa:79:bf:8b:a0:6d:30:b1:91:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DC:F9:E2:AB:EB:5A:D8:1D:E2:6C:CF:04:61:AA:4D:AD:AE:CC:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/76bf366e-d04a-36a6-8d40-3b4c27707374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f777:440::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c5:84:45:72:c7:9e:3d:9d:4e:11:b9:a3:92:b8:61:aa:ce:
         af:4d:68:06:99:e3:84:f1:61:51:8c:15:2c:99:76:bb:2a:1e:
         c3:fb:80:36:84:1d:34:7b:74:74:18:bf:12:25:40:e8:18:c3:
         b4:e7:07:e9:7f:2a:9a:f3:1e:ab:41:30:40:45:87:31:4c:37:
         54:cf:91:f5:06:2f:c9:ff:3f:fd:07:97:32:07:95:28:ef:28:
         42:16:06:13:1f:40:e9:45:fc:38:37:81:a7:22:ea:8b:2c:b9:
         ab:48:bc:e2:c7:ab:c1:63:1c:57:ec:53:8a:cc:6d:de:4a:1f:
         f9:3f:36:92:0b:9b:66:29:60:4d:21:8f:40:af:71:64:5d:b3:
         8f:ff:27:00:25:ee:81:3e:1a:0c:7c:4d:7f:87:4a:2d:ef:db:
         57:5f:68:43:be:67:4f:e8:07:c2:a2:c3:a9:38:ab:01:df:16:
         dd:e7:52:b1:64:80:94:6d:60:ed:8f:47:50:84:bc:df:ed:f0:
         bf:aa:ce:6f:ac:21:71:3b:88:a1:9a:42:00:4f:10:96:97:47:
         15:25:b2:fb:19:f9:fc:4a:5e:e4:84:5a:73:f5:22:75:69:14:
         c9:00:27:d5:55:7f:ed:3b:a8:5e:b4:f0:af:0d:76:a1:fc:4f:
         53:45:ba:8c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9aNIp72sMPdGBP71AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NhYTljMjctNmI2OC00NWE4LWI3NzctNGM3YjAwNDgy
YWI4MB4XDTI2MTAwMTAxMDQwNFoXDTI2MTIzMDAyMDQwNFowLzEtMCsGA1UEAxMk
M2VhMWJjY2UtZTE1Yi00ODNjLWIyZDktNDE0ZmE0YTBkM2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz4lk0WzQitp+/LojYZ0ItBbRibFqscxLuA8
ZL7P5me0Vv+8LD80D0NyFZeYdghxR8nnaKWttS940roH/88bVePi2AakPuKiS7wd
FdwaB8i9f+UFudZfYS7c/JeQLlinGPUKVNLCcct0akNLqj7rWn6Ed7kkEnnEzfoF
AM78+jJvKMGvjaUd7PzHwWLgKIbfqjLwOK8Jrs1OGtOqY4jS08j9fNA8QpQrLNW+
D9GO32LTBkSOh23li1EqE7QnWFzPn2KoGr0Qe2B2i1CrHJDABHbQoxhf5kLq7iag
ZDZYR1RGEqZL+0mdlrHepKT4zOTbWchaANX6eb+LoG0wsZFgNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH7c+eKr61rYHeJszwRhqk2trszQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jY2Fh
OWMyNy02YjY4LTQ1YTgtYjc3Ny00YzdiMDA0ODJhYjgvNzZiZjM2NmUtZDA0YS0z
NmE2LThkNDAtM2I0YzI3NzA3Mzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2NhYTljMjctNmI2OC00NWE4LWI3
NzctNGM3YjAwNDgyYWI4L2NjYWE5YzI3LTZiNjgtNDVhOC1iNzc3LTRjN2IwMDQ4
MmFiOC5jcmwwHwYDVR0jBBgwFoAUokHvW5pqS+aRVpyHiqhu3FSyf4YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jY2FhOWMyNy02YjY4LTQ1YTgtYjc3Ny00Yzdi
MDA0ODJhYjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL3dwRA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIfFhEVyx549nU4RuaOSuGGqzq9NaAaZ44TxYVGMFSyZdrsqHsP7
gDaEHTR7dHQYvxIlQOgYw7TnB+l/KprzHqtBMEBFhzFMN1TPkfUGL8n/P/0HlzIH
lSjvKEIWBhMfQOlF/Dg3gaci6ossuatIvOLHq8FjHFfsU4rMbd5KH/k/NpILm2Yp
YE0hj0CvcWRds4//JwAl7oE+Ggx8TX+HSi3v21dfaEO+Z0/oB8Kiw6k4qwHfFt3n
UrFkgJRtYO2PR1CEvN/t8L+qzm+sIXE7iKGaQgBPEJaXRxUlsvsZ+fxKXuSEWnP1
InVpFMkAJ9VVf+07qF608K8NdqH8T1NFuow=
-----END CERTIFICATE-----
Generated at Sun Oct 11 03:28:53 2026 by rpki-client