Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/93c2a3c1-ca91-3ae7-bacc-170d37cbc2c8.roa
File:                     93c2a3c1-ca91-3ae7-bacc-170d37cbc2c8.roa (raw, json)
Hash identifier:          xxPNahNRyfyRFpfb88qwVBgBvMLAOwupmaITSdAN9lg=
Subject key identifier:   BC:41:B8:C8:5D:C4:85:1B:E5:1C:FA:C6:3B:37:66:51:01:1F:7B:3A
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F857856810BE9ED7B6372BB00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/93c2a3c1-ca91-3ae7-bacc-170d37cbc2c8.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     21859
IP address blocks:        2602:ffe4:ca0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:56:81:0b:e9:ed:7b:63:72:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=4cd3f69e-3ce2-4e92-aa50-6e0fc2533009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f6:01:d0:c5:fb:25:9c:8b:45:db:5f:29:1d:
                    d2:b9:68:ce:29:52:c1:ba:b5:aa:b5:7b:a1:d5:17:
                    1f:86:5d:08:70:ad:2c:26:95:46:d5:51:c8:2f:4b:
                    71:1e:d4:d4:ee:9f:36:9d:3d:8b:c4:db:8e:7b:64:
                    7c:f0:b8:6d:83:94:3a:21:88:50:45:23:33:5c:45:
                    dc:c8:03:eb:5a:66:84:bc:27:c6:e7:4c:0d:3a:9b:
                    e7:94:3b:f8:f8:6c:62:31:11:90:b8:3b:43:16:43:
                    b5:31:d8:47:2a:96:9e:6f:6e:f7:60:36:1d:2d:e5:
                    35:70:b6:c8:b1:10:4f:1e:07:a8:2f:00:6a:f8:76:
                    db:73:98:cb:6f:ea:8b:76:2d:e3:cc:24:ab:b4:f7:
                    6a:75:e8:a4:27:35:8f:21:6f:ca:ce:fd:6a:0d:aa:
                    3e:9f:b6:87:fa:ca:63:1b:c6:31:11:d3:9a:b9:f6:
                    ed:ef:6c:71:65:81:0a:32:d2:03:95:92:ce:f6:0b:
                    d6:f1:65:f1:45:89:db:e5:10:90:f9:3a:bd:48:e2:
                    53:4c:e5:d0:9d:d2:32:12:fc:46:fa:29:24:bd:bf:
                    53:20:74:67:31:34:97:ca:40:71:02:b9:41:3d:d5:
                    55:17:ab:62:e0:f7:db:df:e1:be:0d:81:31:69:e5:
                    91:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:41:B8:C8:5D:C4:85:1B:E5:1C:FA:C6:3B:37:66:51:01:1F:7B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/93c2a3c1-ca91-3ae7-bacc-170d37cbc2c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:ca0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:fb:ed:43:d6:8e:9f:ba:03:62:18:85:99:bb:91:78:2d:b9:
         8d:2e:48:81:8f:6e:27:ab:39:9d:12:7f:23:a2:bb:5a:7b:2d:
         9d:d2:b2:de:7a:07:66:15:b5:38:8b:99:03:ea:07:08:17:ab:
         a5:83:f8:2a:2e:df:4b:99:66:49:23:4e:e6:b4:f3:53:61:5c:
         ef:94:92:bf:df:78:b1:df:44:5a:da:ed:e3:04:20:ce:5e:02:
         f4:04:9a:78:36:57:b9:09:10:5f:08:34:fc:7e:1b:ed:ca:3d:
         5e:04:9d:99:d0:51:4c:b1:ee:b2:f8:77:d8:93:fc:03:3c:b7:
         07:f0:62:ff:3c:74:a8:fa:2f:64:13:3b:9c:ee:6b:36:fb:b6:
         44:66:cd:08:97:5e:bb:c0:d3:7c:48:87:7c:dd:d6:cd:24:43:
         06:42:b9:c6:ba:18:39:57:1c:96:8a:36:23:33:fa:d1:27:12:
         20:c0:5a:81:1d:93:ab:bb:1f:1d:bc:90:22:3e:c0:a2:b5:bc:
         97:8f:97:a7:c2:37:ab:88:fe:45:c8:91:2c:d3:4c:63:1e:24:
         63:75:49:90:0b:bf:c4:92:0e:9b:be:8c:f9:a3:c8:19:ac:66:
         65:df:d7:56:65:b7:b9:b6:d3:d5:55:c6:96:a9:da:16:b3:02:
         9a:19:43:c7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+FeFaBC+nte2NyuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk
NGNkM2Y2OWUtM2NlMi00ZTkyLWFhNTAtNmUwZmMyNTMzMDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvYB0MX7JZyLRdtfKR3SuWjOKVLBurWqtXuh
1Rcfhl0IcK0sJpVG1VHIL0txHtTU7p82nT2LxNuOe2R88Lhtg5Q6IYhQRSMzXEXc
yAPrWmaEvCfG50wNOpvnlDv4+GxiMRGQuDtDFkO1MdhHKpaeb273YDYdLeU1cLbI
sRBPHgeoLwBq+Hbbc5jLb+qLdi3jzCSrtPdqdeikJzWPIW/Kzv1qDao+n7aH+spj
G8YxEdOaufbt72xxZYEKMtIDlZLO9gvW8WXxRYnb5RCQ+Tq9SOJTTOXQndIyEvxG
+ikkvb9TIHRnMTSXykBxArlBPdVVF6ti4Pfb3+G+DYExaeWR7wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLxBuMhdxIUb5Rz6xjs3ZlEBH3s6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOTNjMmEzYzEtY2E5MS0z
YWU3LWJhY2MtMTcwZDM3Y2JjMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL/5Ayg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKf77UPWjp+6A2IYhZm7kXgtuY0uSIGPbierOZ0SfyOiu1p7LZ3S
st56B2YVtTiLmQPqBwgXq6WD+Cou30uZZkkjTua081NhXO+Ukr/feLHfRFra7eME
IM5eAvQEmng2V7kJEF8INPx+G+3KPV4EnZnQUUyx7rL4d9iT/AM8twfwYv88dKj6
L2QTO5zuazb7tkRmzQiXXrvA03xIh3zd1s0kQwZCuca6GDlXHJaKNiMz+tEnEiDA
WoEdk6u7Hx28kCI+wKK1vJePl6fCN6uI/kXIkSzTTGMeJGN1SZALv8SSDpu+jPmj
yBmsZmXf11Zlt7m209VVxpap2hazApoZQ8c=
-----END CERTIFICATE-----
Generated at Fri Oct 23 22:05:01 2026 by rpki-client