Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28e93e62-e34f-370f-bb28-bac028de168d.roa
File:                     28e93e62-e34f-370f-bb28-bac028de168d.roa (raw, json)
Hash identifier:          mtjYN0FOnEOjAUaksCFVxg6jPVBhNJC3gFwKtUaOA0Y=
Subject key identifier:   CD:1E:EC:A8:62:49:4B:62:1F:F9:E1:E8:CF:78:39:FC:4A:96:C7:DC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6292E8B716B4F3355D84CE80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28e93e62-e34f-370f-bb28-bac028de168d.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        2605:a401:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:e8:b7:16:b4:f3:35:5d:84:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=fc7269cc-8633-4b7d-b950-3f6ae5d868dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2f:3e:ef:7d:34:33:59:c6:82:a1:e7:1c:6f:
                    fd:de:69:74:4b:c6:c9:64:73:29:cc:0b:74:fc:0e:
                    97:03:d1:a1:94:65:4a:b4:dd:9a:b2:bf:9b:92:bd:
                    74:cc:15:09:ec:15:ef:05:70:4e:56:a4:5d:19:91:
                    0f:51:fc:e7:08:a3:d5:38:83:36:e0:cc:90:d3:69:
                    5a:09:19:b9:cc:74:7e:8e:65:59:7c:3b:f2:8c:5d:
                    10:4a:4b:5b:4f:11:b9:f3:c6:66:ae:a3:94:85:1e:
                    2f:9f:b7:2c:d2:0f:a1:fe:97:64:d1:05:d7:8d:41:
                    c6:25:bc:de:97:ed:78:98:06:38:f6:a5:12:a1:54:
                    cf:14:c5:2f:da:2e:d4:73:80:f5:3a:32:ce:33:0e:
                    44:01:db:04:7b:07:ff:ff:89:20:a2:a2:df:ff:1f:
                    29:ef:79:c2:17:8e:96:eb:c8:90:df:6a:af:2e:29:
                    f1:64:6d:41:a0:aa:7f:a6:08:6e:ff:8e:c3:4e:f8:
                    d6:7e:42:f9:c7:23:65:e0:8e:a5:72:bd:9a:23:5e:
                    4f:b1:52:c6:b0:8d:39:6b:dc:92:99:42:37:4f:22:
                    22:c6:05:f1:f2:cd:86:b3:d0:e6:96:70:eb:08:ee:
                    9b:ea:14:00:64:8a:46:c1:3b:28:a4:c7:d4:3e:4b:
                    98:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1E:EC:A8:62:49:4B:62:1F:F9:E1:E8:CF:78:39:FC:4A:96:C7:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28e93e62-e34f-370f-bb28-bac028de168d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:80:9d:27:76:8c:a3:44:11:50:41:9a:d8:03:eb:74:e0:8a:
         52:e0:69:52:c0:5a:5b:c7:29:41:ea:dc:2b:65:e7:df:47:c5:
         ee:e2:d7:aa:be:7a:f3:14:ad:0e:76:5c:3f:4b:4f:9f:fd:c3:
         8a:08:ec:e3:22:5c:7d:f5:74:c8:7a:9a:e2:01:5f:d2:93:47:
         3c:fc:0e:e9:30:db:1e:e5:e1:4b:1f:3a:55:29:78:6e:d6:fe:
         46:e9:9e:04:ef:51:cb:88:02:dc:b2:21:3e:94:62:51:29:f5:
         40:f5:7e:6c:3f:4c:a6:94:ee:5a:02:d7:87:f1:30:db:2b:19:
         a4:78:da:3f:8d:0f:d7:6f:18:cb:72:86:d0:2e:91:20:bf:50:
         4c:16:51:f9:3f:17:7a:b8:ed:d7:c6:16:75:f6:a3:3c:5d:c1:
         db:74:96:28:25:94:72:12:11:40:50:59:10:f2:ea:52:ed:d7:
         95:63:4c:18:b9:3f:5c:f4:e1:76:c9:1f:74:db:4b:56:1e:08:
         74:47:1d:3e:5e:21:76:02:b9:01:79:13:79:e0:29:0c:2f:5d:
         07:e7:34:81:4c:7c:a5:08:9d:61:dc:f2:5c:6b:c3:42:2c:4b:
         e6:12:bf:53:09:ea:35:5c:7d:db:69:31:df:66:3d:75:ed:4d:
         d6:b8:9b:df
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9ikui3FrTzNV2EzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZmM3MjY5Y2MtODYzMy00YjdkLWI5NTAtM2Y2YWU1ZDg2OGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS8+7300M1nGgqHnHG/93ml0S8bJZHMpzAt0
/A6XA9GhlGVKtN2asr+bkr10zBUJ7BXvBXBOVqRdGZEPUfznCKPVOIM24MyQ02la
CRm5zHR+jmVZfDvyjF0QSktbTxG588ZmrqOUhR4vn7cs0g+h/pdk0QXXjUHGJbze
l+14mAY49qUSoVTPFMUv2i7Uc4D1OjLOMw5EAdsEewf//4kgoqLf/x8p73nCF46W
68iQ32qvLinxZG1BoKp/pghu/47DTvjWfkL5xyNl4I6lcr2aI15PsVLGsI05a9yS
mUI3TyIixgXx8s2Gs9DmlnDrCO6b6hQAZIpGwTsopMfUPkuYSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM0e7KhiSUtiH/nh6M94OfxKlsfcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMjhlOTNlNjItZTM0Zi0z
NzBmLWJiMjgtYmFjMDI4ZGUxNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAQAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAmAnSd2jKNEEVBBmtgD63TgilLgaVLAWlvHKUHq3Ctl599Hxe7i
16q+evMUrQ52XD9LT5/9w4oI7OMiXH31dMh6muIBX9KTRzz8Dukw2x7l4UsfOlUp
eG7W/kbpngTvUcuIAtyyIT6UYlEp9UD1fmw/TKaU7loC14fxMNsrGaR42j+ND9dv
GMtyhtAukSC/UEwWUfk/F3q47dfGFnX2ozxdwdt0ligllHISEUBQWRDy6lLt15Vj
TBi5P1z04XbJH3TbS1YeCHRHHT5eIXYCuQF5E3ngKQwvXQfnNIFMfKUInWHc8lxr
w0IsS+YSv1MJ6jVcfdtpMd9mPXXtTda4m98=
-----END CERTIFICATE-----
Generated at Wed Oct 21 14:55:01 2026 by rpki-client