Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/685bffdf-ca5d-3e68-bdd6-6b2ec2c7a863.roa
File:                     685bffdf-ca5d-3e68-bdd6-6b2ec2c7a863.roa (raw, json)
Hash identifier:          kyW5GI8/03cp4nXXua6zivq8yzW3m3e9C07P8qZdHUE=
Subject key identifier:   BD:A5:39:78:23:9C:BD:83:70:02:5B:99:10:5F:49:25:0D:62:0E:C6
Certificate issuer:       /CN=ac0c72ee-a963-4924-8dd0-a48579578b1b
Certificate serial:       010D0C9F4328584EE7BCBF66D8F613190BEDA118
Authority key identifier: 8F:35:48:6A:6F:2C:E2:E5:11:9B:D3:4E:C3:FB:F2:00:1F:EC:A8:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/685bffdf-ca5d-3e68-bdd6-6b2ec2c7a863.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     400042
IP address blocks:        2602:f7ca::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ac0c72ee-a963-4924-8dd0-a48579578b1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ac0c72ee-a963-4924-8dd0-a48579578b1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:bf:66:d8:f6:13:19:0b:ed:a1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0c72ee-a963-4924-8dd0-a48579578b1b
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=7ea04aad-0215-4755-b1b2-844d8d3125ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:c5:03:05:c7:b3:34:e5:77:ae:53:01:e2:
                    44:0e:b0:52:85:4a:97:88:76:7d:10:ab:10:8e:01:
                    34:44:85:00:a0:4c:4c:3e:31:cd:4d:72:e2:94:b0:
                    6d:eb:80:74:a2:d9:2c:bc:38:c3:a0:80:44:9d:39:
                    dd:53:5e:e0:57:36:0e:69:4f:c1:7a:d2:e0:3b:ef:
                    3b:f5:47:e0:3f:e7:95:54:51:9f:50:c1:69:5d:62:
                    5a:cd:79:c8:bf:17:0a:c1:e9:3f:22:26:f3:a9:12:
                    81:f5:ca:10:2f:48:7c:bd:6a:19:2f:c0:d5:c0:79:
                    26:24:ed:22:1c:43:94:29:24:dc:a8:e0:55:f7:ba:
                    f4:0d:30:ea:a1:c9:ea:f2:ed:48:c3:da:8e:a4:8d:
                    d7:f3:a6:36:01:cd:96:91:e3:24:51:14:a9:02:ea:
                    2f:b8:c7:72:ab:24:2c:cb:1f:b3:4f:e8:bd:f3:0f:
                    1d:9a:00:2a:50:d9:e4:30:f0:a0:b2:00:40:2d:b7:
                    d3:d7:86:61:73:9d:dd:cd:46:22:a6:f0:b9:5f:9b:
                    3c:42:3e:76:6c:27:f5:21:7b:f5:c8:11:24:9c:fc:
                    d8:9a:22:9a:89:ac:11:00:79:b0:0d:50:cd:6d:65:
                    fe:2a:bf:49:62:65:b6:1e:0a:f5:25:f4:a9:16:58:
                    02:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A5:39:78:23:9C:BD:83:70:02:5B:99:10:5F:49:25:0D:62:0E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/685bffdf-ca5d-3e68-bdd6-6b2ec2c7a863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ac0c72ee-a963-4924-8dd0-a48579578b1b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:35:48:6A:6F:2C:E2:E5:11:9B:D3:4E:C3:FB:F2:00:1F:EC:A8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ca::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c0:d7:93:43:3a:86:ea:ba:dd:ee:9c:46:7f:aa:21:92:bf:
         19:4a:65:96:9a:81:64:05:66:08:20:c1:dd:b6:69:fa:d3:38:
         e7:03:1b:ab:d0:1a:d0:41:a8:27:58:0b:d7:39:c2:c6:ed:fd:
         1f:6e:b8:de:07:34:ee:bb:d8:25:05:cc:a2:58:2a:8e:d2:7a:
         d6:e5:3a:f8:05:b6:07:44:da:78:88:73:34:c7:04:b9:74:a5:
         97:c5:61:34:0e:ef:d4:71:67:91:bb:fd:b9:f5:42:b7:ed:99:
         c8:9d:c7:59:55:10:04:6b:e0:eb:a2:75:10:34:16:98:c2:41:
         f4:28:f1:bc:8d:00:e1:0f:e1:8b:7b:b2:67:5f:24:3b:6c:00:
         93:a5:7f:64:ac:2d:16:45:8e:7a:b9:82:24:a0:04:77:03:71:
         ae:63:45:9b:43:0f:f1:ed:23:27:67:0d:67:62:99:33:3f:11:
         9f:c6:9b:e6:56:0d:0d:6a:ea:0c:92:45:81:95:15:91:b0:d4:
         0f:ab:6a:c8:ae:59:0f:6f:06:69:31:25:ce:ad:4e:f1:10:7c:
         5f:40:40:a6:17:a4:f2:7e:4f:93:f3:d9:46:67:90:b1:01:94:
         73:1c:2a:a9:e7:33:f6:82:b1:a2:d9:46:67:b8:5b:20:ec:00:
         77:86:aa:d3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7nvL9m2PYTGQvtoRgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWMwYzcyZWUtYTk2My00OTI0LThkZDAtYTQ4NTc5NTc4
YjFiMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk
N2VhMDRhYWQtMDIxNS00NzU1LWIxYjItODQ0ZDhkMzEyNWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q3FAwXHszTld65TAeJEDrBShUqXiHZ9EKsQ
jgE0RIUAoExMPjHNTXLilLBt64B0otksvDjDoIBEnTndU17gVzYOaU/BetLgO+87
9UfgP+eVVFGfUMFpXWJazXnIvxcKwek/IibzqRKB9coQL0h8vWoZL8DVwHkmJO0i
HEOUKSTcqOBV97r0DTDqocnq8u1Iw9qOpI3X86Y2Ac2WkeMkURSpAuovuMdyqyQs
yx+zT+i98w8dmgAqUNnkMPCgsgBALbfT14Zhc53dzUYipvC5X5s8Qj52bCf1IXv1
yBEknPzYmiKaiawRAHmwDVDNbWX+Kr9JYmW2Hgr1JfSpFlgCiwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFL2lOXgjnL2DcAJbmRBfSSUNYg7GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hYzBj
NzJlZS1hOTYzLTQ5MjQtOGRkMC1hNDg1Nzk1NzhiMWIvNjg1YmZmZGYtY2E1ZC0z
ZTY4LWJkZDYtNmIyZWMyYzdhODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWMwYzcyZWUtYTk2My00OTI0LThk
ZDAtYTQ4NTc5NTc4YjFiL2FjMGM3MmVlLWE5NjMtNDkyNC04ZGQwLWE0ODU3OTU3
OGIxYi5jcmwwHwYDVR0jBBgwFoAUjzVIam8s4uURm9NOw/vyAB/sqO8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hYzBjNzJlZS1hOTYzLTQ5MjQtOGRkMC1hNDg1
Nzk1NzhiMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3ygAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAhsDXk0M6huq63e6cRn+qIZK/GUpllpqBZAVmCCDB3bZp+tM45wMb
q9Aa0EGoJ1gL1znCxu39H2643gc07rvYJQXMolgqjtJ61uU6+AW2B0TaeIhzNMcE
uXSll8VhNA7v1HFnkbv9ufVCt+2ZyJ3HWVUQBGvg66J1EDQWmMJB9CjxvI0A4Q/h
i3uyZ18kO2wAk6V/ZKwtFkWOermCJKAEdwNxrmNFm0MP8e0jJ2cNZ2KZMz8Rn8ab
5lYNDWrqDJJFgZUVkbDUD6tqyK5ZD28GaTElzq1O8RB8X0BAphek8n5Pk/PZRmeQ
sQGUcxwqqecz9oKxotlGZ7hbIOwAd4aq0w==
-----END CERTIFICATE-----
Generated at Sun Sep 13 15:48:45 2026 by rpki-client