Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/fad125e5-060b-3c92-a785-7f6a4c6c4c5c.roa
File:                     fad125e5-060b-3c92-a785-7f6a4c6c4c5c.roa (raw, json)
Hash identifier:          WLVo6YqSD/6pbylr5li5yQGjeSGNIaE0hdI/joCJ110=
Subject key identifier:   B4:F1:38:29:EF:D2:E2:AC:42:BB:B9:96:67:54:79:41:0A:0C:9E:95
Certificate issuer:       /CN=5599678a-c6a8-4921-aa0a-62a64b2f1631
Certificate serial:       010D0C9F4328584F1897A4E2584378C2AC44BD40
Authority key identifier: A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/fad125e5-060b-3c92-a785-7f6a4c6c4c5c.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     398437
IP address blocks:        2602:fd39::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:a4:e2:58:43:78:c2:ac:44:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5599678a-c6a8-4921-aa0a-62a64b2f1631
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=9f6e46e6-8b80-4ce2-b431-073777f28eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0d:ba:79:57:cb:ce:af:e5:1b:64:0d:75:62:
                    ab:88:78:12:68:70:70:1a:fa:f2:a2:6f:c4:7c:8b:
                    ed:a0:81:3c:e8:e1:f4:ab:c5:ea:03:b3:7d:47:75:
                    bb:1f:a6:8f:9f:f4:f7:c7:c1:8b:2d:5f:81:75:50:
                    ca:9c:72:a9:de:77:af:34:5a:04:45:29:62:ec:f8:
                    18:d8:92:3b:7d:ab:31:2f:c6:77:3e:b6:a7:26:e7:
                    f3:e7:3f:d7:41:e7:d9:5c:1d:30:09:2c:fa:07:01:
                    60:e5:c2:1a:f8:ca:51:ae:94:c5:cd:fc:9d:83:55:
                    e8:42:89:b6:ea:33:0e:9a:cb:86:3b:0c:88:4c:95:
                    54:bc:86:ac:37:c3:7e:9f:24:ae:a9:b1:c6:7b:0d:
                    3e:4b:ff:af:9c:40:73:3a:9d:9c:62:8c:9f:db:ac:
                    cc:77:a8:de:8f:a1:fc:a0:50:c4:36:88:23:85:d1:
                    82:76:22:90:45:9b:a9:63:0f:4e:f1:10:be:47:0f:
                    56:e6:7b:76:9a:bd:26:ce:40:34:22:b9:16:7d:9f:
                    81:32:a9:f8:b0:a6:c0:52:9f:c9:f7:94:2c:3d:53:
                    ab:46:f3:9e:63:51:71:ec:57:53:00:38:96:1f:7d:
                    ba:9b:31:74:26:43:3e:3b:59:f9:57:2f:15:27:0a:
                    d2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F1:38:29:EF:D2:E2:AC:42:BB:B9:96:67:54:79:41:0A:0C:9E:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/fad125e5-060b-3c92-a785-7f6a4c6c4c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.crl

            X509v3 Authority Key Identifier:
                keyid:A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd39::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:33:6c:78:f1:2d:a6:29:39:56:db:77:1d:90:0e:29:9c:92:
         8a:e3:71:cc:e2:e6:a0:a9:e5:f6:e2:dc:17:53:89:31:19:19:
         38:19:77:45:94:9b:aa:23:f4:9e:48:aa:b1:dd:e3:81:37:aa:
         78:eb:cf:54:db:4d:ec:5f:53:02:93:ef:f7:21:6a:49:8b:9f:
         26:95:e1:a4:0d:45:36:c0:54:a4:c4:f3:ba:58:a3:43:06:45:
         c3:f2:e6:10:46:f2:7f:79:5a:63:62:17:c3:40:37:70:e3:0b:
         98:80:54:4b:92:dd:6f:c4:26:9e:41:11:f1:9e:61:31:d3:54:
         9a:c1:26:db:b8:6d:28:16:33:8d:e4:00:d8:88:16:57:ef:87:
         a3:08:93:23:2f:1e:7e:27:9d:8d:3a:d1:43:b5:5c:c5:ce:9c:
         0e:28:c4:ff:b5:b8:1d:1c:dd:39:b7:8d:a3:dd:2a:5e:b8:81:
         a0:00:12:fc:a7:7f:4a:95:33:61:e0:61:0b:a9:80:9a:c7:a0:
         f8:fc:82:1f:dc:6b:20:54:8a:e4:ed:5b:e0:52:00:d3:cc:aa:
         03:2b:ce:75:dd:ee:40:63:16:b4:a1:01:34:ca:59:98:78:29:
         d5:3b:a9:f1:4d:1c:ea:35:d5:3f:4c:ad:e1:b3:a8:38:fb:ee:
         d1:2a:73:3e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8Yl6TiWEN4wqxEvUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU5OTY3OGEtYzZhOC00OTIxLWFhMGEtNjJhNjRiMmYx
NjMxMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk
OWY2ZTQ2ZTYtOGI4MC00Y2UyLWI0MzEtMDczNzc3ZjI4ZWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw26eVfLzq/lG2QNdWKriHgSaHBwGvryom/E
fIvtoIE86OH0q8XqA7N9R3W7H6aPn/T3x8GLLV+BdVDKnHKp3nevNFoERSli7PgY
2JI7fasxL8Z3PranJufz5z/XQefZXB0wCSz6BwFg5cIa+MpRrpTFzfydg1XoQom2
6jMOmsuGOwyITJVUvIasN8N+nySuqbHGew0+S/+vnEBzOp2cYoyf26zMd6jej6H8
oFDENogjhdGCdiKQRZupYw9O8RC+Rw9W5nt2mr0mzkA0IrkWfZ+BMqn4sKbAUp/J
95QsPVOrRvOeY1Fx7FdTADiWH326mzF0JkM+O1n5Vy8VJwrS8wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLTxOCnv0uKsQru5lmdUeUEKDJ6VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81NTk5
Njc4YS1jNmE4LTQ5MjEtYWEwYS02MmE2NGIyZjE2MzEvZmFkMTI1ZTUtMDYwYi0z
YzkyLWE3ODUtN2Y2YTRjNmM0YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTU5OTY3OGEtYzZhOC00OTIxLWFh
MGEtNjJhNjRiMmYxNjMxLzU1OTk2NzhhLWM2YTgtNDkyMS1hYTBhLTYyYTY0YjJm
MTYzMS5jcmwwHwYDVR0jBBgwFoAUp1eksTKFz0MuDlRvLxqzl14SQFwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81NTk5Njc4YS1jNmE4LTQ5MjEtYWEwYS02MmE2
NGIyZjE2MzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9OQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAYzNsePEtpik5Vtt3HZAOKZySiuNxzOLmoKnl9uLcF1OJMRkZOBl3
RZSbqiP0nkiqsd3jgTeqeOvPVNtN7F9TApPv9yFqSYufJpXhpA1FNsBUpMTzulij
QwZFw/LmEEbyf3laY2IXw0A3cOMLmIBUS5Ldb8QmnkER8Z5hMdNUmsEm27htKBYz
jeQA2IgWV++HowiTIy8efiedjTrRQ7Vcxc6cDijE/7W4HRzdObeNo90qXriBoAAS
/Kd/SpUzYeBhC6mAmseg+PyCH9xrIFSK5O1b4FIA08yqAyvOdd3uQGMWtKEBNMpZ
mHgp1Tup8U0c6jXVP0yt4bOoOPvu0SpzPg==
-----END CERTIFICATE-----
Generated at Sun Sep 13 11:05:24 2026 by rpki-client