Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/91602793-39d2-331e-9880-52568d0808f3.roa
File:                     91602793-39d2-331e-9880-52568d0808f3.roa (raw, json)
Hash identifier:          jNYTLEkM4XX5q3Qc5u8Y/zbNMCOOtihnxOpNw553EUY=
Subject key identifier:   A2:CB:C9:97:57:5F:11:B8:15:4E:DB:3F:BF:FE:56:C8:06:DE:E5:B4
Certificate issuer:       /CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
Certificate serial:       010D0C9F4328584F5B9803D8FC2C494AE30B4340
Authority key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/91602793-39d2-331e-9880-52568d0808f3.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     400956
IP address blocks:        2607:f298:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:98:03:d8:fc:2c:49:4a:e3:0b:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=202ac39d-fed5-4b84-b302-08673a5b8a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:4e:09:57:3f:09:34:fa:bd:40:ab:93:2c:
                    fc:76:6c:d1:43:e4:c9:80:00:a9:1b:b3:ac:a9:b4:
                    7e:90:57:2b:67:0e:61:cb:0b:a3:fe:29:a6:78:60:
                    88:fb:0c:a2:49:d5:de:9b:b8:6e:c5:98:26:64:ec:
                    30:f9:86:66:49:94:f9:ce:6a:91:b4:47:6d:ec:71:
                    cf:a9:fa:a8:72:bd:45:72:eb:a7:d7:4a:43:41:2d:
                    12:53:3b:fe:7c:8f:18:c1:c9:52:7d:43:20:89:b2:
                    da:de:7e:18:19:66:57:2a:98:f8:5f:c1:4e:90:4a:
                    76:83:74:3a:1a:58:eb:1f:4a:6c:41:69:0b:c0:ee:
                    0a:3c:29:ef:df:2d:1d:34:01:0c:79:5e:46:44:9b:
                    e2:10:94:d2:09:88:8a:e6:76:71:80:1f:90:df:55:
                    8d:e3:39:65:53:91:df:e1:0b:19:3a:17:e1:0a:b2:
                    e7:10:f1:34:dc:67:48:e0:1f:16:51:a2:14:4e:8a:
                    c9:8b:d6:cd:98:27:8d:58:17:bb:d9:aa:ef:5a:aa:
                    16:ae:01:52:fc:e1:68:f5:3a:b7:17:ee:a0:b6:54:
                    89:c3:b9:e5:7e:c9:82:ef:5e:8f:95:dc:a3:ec:ea:
                    a3:21:b4:46:d6:8b:1e:45:79:5e:d3:ad:08:14:dc:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CB:C9:97:57:5F:11:B8:15:4E:DB:3F:BF:FE:56:C8:06:DE:E5:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/91602793-39d2-331e-9880-52568d0808f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl

            X509v3 Authority Key Identifier:
                keyid:B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f298:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ea:cc:49:77:62:6f:56:98:6f:64:22:ea:05:eb:cd:2f:35:
         a6:35:68:4e:27:9f:55:eb:99:a6:6a:bf:21:e3:54:63:75:18:
         37:26:33:e8:17:d9:4b:26:2b:7b:8c:f6:c9:a4:89:5b:f1:92:
         da:ad:c8:06:02:55:3b:40:48:dd:5c:9c:37:b9:8c:db:f4:c5:
         4d:71:61:25:e6:9f:7d:10:d1:04:6a:64:d9:66:2f:13:89:49:
         27:28:14:0b:d4:48:4e:cb:4c:3b:0c:01:92:ac:c4:0b:9f:92:
         74:71:a9:39:83:af:43:d8:f2:fb:8e:52:02:62:af:6b:77:55:
         1c:15:91:a5:f6:a0:84:c7:53:d4:f5:e8:e0:a9:d4:ec:32:01:
         d7:b0:b7:71:de:05:14:64:05:70:fc:89:a5:f3:76:21:05:ee:
         51:87:75:7f:fd:47:a3:b5:bb:68:e0:ab:93:a2:a1:b1:de:83:
         65:73:5c:91:30:a9:ac:7c:3d:ac:d2:35:32:0e:10:8c:16:d6:
         1f:19:a4:13:1a:26:5f:a2:50:b1:24:f9:73:05:7f:5d:e2:6f:
         3a:68:20:2c:c8:bb:b1:36:73:ee:27:88:59:e9:92:5b:e5:72:
         bc:34:ab:34:f0:42:42:0a:d6:da:70:9a:3e:a5:87:6f:b1:51:
         3d:c1:da:16
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9bmAPY/CxJSuMLQ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmUzZTEwNGUtZGFlZi00ZmRiLTlkNjUtYWExZWU2ZGM0
YmUwMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk
MjAyYWMzOWQtZmVkNS00Yjg0LWIzMDItMDg2NzNhNWI4YTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL9OCVc/CTT6vUCrkyz8dmzRQ+TJgACpG7Os
qbR+kFcrZw5hywuj/immeGCI+wyiSdXem7huxZgmZOww+YZmSZT5zmqRtEdt7HHP
qfqocr1Fcuun10pDQS0SUzv+fI8YwclSfUMgibLa3n4YGWZXKpj4X8FOkEp2g3Q6
GljrH0psQWkLwO4KPCnv3y0dNAEMeV5GRJviEJTSCYiK5nZxgB+Q31WN4zllU5Hf
4QsZOhfhCrLnEPE03GdI4B8WUaIUTorJi9bNmCeNWBe72arvWqoWrgFS/OFo9Tq3
F+6gtlSJw7nlfsmC716Pldyj7OqjIbRG1oseRXle060IFNzhIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKLLyZdXXxG4FU7bP7/+VsgG3uW0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNl
MTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFlZTZkYzRiZTAvOTE2MDI3OTMtMzlkMi0z
MzFlLTk4ODAtNTI1NjhkMDgwOGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmUzZTEwNGUtZGFlZi00ZmRiLTlk
NjUtYWExZWU2ZGM0YmUwL2ZlM2UxMDRlLWRhZWYtNGZkYi05ZDY1LWFhMWVlNmRj
NGJlMC5jcmwwHwYDVR0jBBgwFoAUufWiUaI76sSwD1L8hmm6LjRR5AswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNlMTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFl
ZTZkYzRiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfymAAI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIDqzEl3Ym9WmG9kIuoF680vNaY1aE4nn1XrmaZqvyHjVGN1GDcm
M+gX2UsmK3uM9smkiVvxktqtyAYCVTtASN1cnDe5jNv0xU1xYSXmn30Q0QRqZNlm
LxOJSScoFAvUSE7LTDsMAZKsxAufknRxqTmDr0PY8vuOUgJir2t3VRwVkaX2oITH
U9T16OCp1OwyAdewt3HeBRRkBXD8iaXzdiEF7lGHdX/9R6O1u2jgq5OiobHeg2Vz
XJEwqax8PazSNTIOEIwW1h8ZpBMaJl+iULEk+XMFf13ibzpoICzIu7E2c+4niFnp
klvlcrw0qzTwQkIK1tpwmj6lh2+xUT3B2hY=
-----END CERTIFICATE-----
Generated at Fri Oct 30 20:25:17 2026 by rpki-client