Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/8378ad3f-f5c5-3d0e-bf47-e33619b955bb.roa
File:                     8378ad3f-f5c5-3d0e-bf47-e33619b955bb.roa (raw, json)
Hash identifier:          vYiLjfddOxVEUKDipyt9ZOhnRaOS5SJlnvv4HW9AD30=
Subject key identifier:   B9:8C:C9:09:98:FA:57:BB:45:A5:88:E3:E3:14:F8:C3:1C:CE:7B:63
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F4328584EEA875AD7848E88F46182DF40
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/8378ad3f-f5c5-3d0e-bf47-e33619b955bb.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     398427
IP address blocks:        2602:fd35::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:5a:d7:84:8e:88:f4:61:82:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=f78ed966-21f4-40ae-8ce3-f50a17ebb211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:0a:9d:68:e6:73:4b:ad:57:90:e2:15:4a:
                    bb:fc:4c:a0:07:77:f7:96:5d:a3:59:30:3e:21:b5:
                    fb:30:d5:39:29:7c:08:25:e3:8e:53:f8:29:44:54:
                    a1:08:17:0c:37:e2:23:42:de:27:65:07:32:fb:7d:
                    34:4e:07:2d:46:9a:93:5c:7b:d1:26:85:9a:ea:2f:
                    0d:45:c2:4e:bf:6c:c5:e9:32:0e:ab:28:97:72:b1:
                    92:47:fe:4c:b0:ec:4f:59:98:ba:cd:ec:a2:d9:1a:
                    3f:7f:7e:af:a1:eb:b6:07:fc:08:ea:fc:8d:f6:1b:
                    7c:a6:ed:f0:7d:15:c7:86:18:cb:43:61:3c:ae:92:
                    2f:08:8d:f0:b5:4f:c3:dd:39:dd:46:7e:42:79:ed:
                    64:49:b1:f4:38:ae:81:b7:61:1d:27:70:41:c5:a8:
                    43:0c:ac:19:a1:73:ac:ac:5c:56:f6:0d:c0:26:54:
                    b6:8d:9a:ca:ab:25:68:9a:d2:04:50:b8:2e:e1:55:
                    1e:a7:14:f2:d5:90:50:83:bb:b9:c1:67:43:6d:91:
                    7a:fb:7a:d0:47:7d:4c:95:03:37:2a:f4:81:77:3f:
                    67:0f:65:82:3d:13:88:05:1b:3c:e2:dd:28:c8:16:
                    42:df:48:23:c8:fc:a5:c9:f1:b0:b0:ed:c4:d7:bf:
                    be:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8C:C9:09:98:FA:57:BB:45:A5:88:E3:E3:14:F8:C3:1C:CE:7B:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/8378ad3f-f5c5-3d0e-bf47-e33619b955bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd35::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f0:62:fb:db:0e:1a:71:61:c3:d6:b4:ad:ca:a5:d4:96:c7:
         03:eb:c9:53:ac:44:d1:ee:bb:d8:48:88:30:68:bc:ab:e4:46:
         24:fd:14:36:4f:73:a1:4e:4c:86:80:f3:e6:5f:f3:a3:28:01:
         eb:72:c1:49:74:b3:6c:c1:e1:b6:98:71:e3:eb:97:4e:e2:e2:
         e6:77:0d:dc:5a:76:9e:84:b1:ed:b7:bc:fe:9e:65:1a:b6:c7:
         e0:16:c1:c9:9c:11:e3:04:c9:68:cf:06:ed:75:c9:df:e7:15:
         35:24:e3:81:2b:4e:17:49:5e:dd:72:af:5a:fa:2c:ed:20:5b:
         08:73:0d:01:49:d8:89:a1:7c:65:d9:6e:4e:90:1d:94:20:f9:
         09:27:cb:43:9d:40:bb:d6:3c:ea:95:c5:57:e8:63:a3:7f:a3:
         d7:17:c7:37:7d:a0:bf:4b:70:a9:82:85:55:4d:ff:c6:94:59:
         86:8d:a1:b0:b1:58:db:db:36:88:f1:90:a3:63:92:4b:0e:53:
         74:15:14:9d:15:7f:2e:b7:51:df:64:2d:af:87:fd:ed:e3:c8:
         73:83:1d:dc:3a:f6:e1:4a:b7:46:a9:5a:2c:4f:4b:55:7c:38:
         78:fb:34:ba:d1:9f:af:cb:8f:4d:9b:0a:fb:61:55:78:06:df:
         64:cd:33:10
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7qh1rXhI6I9GGC30AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5
OTVkMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
Zjc4ZWQ5NjYtMjFmNC00MGFlLThjZTMtZjUwYTE3ZWJiMjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3cKnWjmc0utV5DiFUq7/EygB3f3ll2jWTA+
IbX7MNU5KXwIJeOOU/gpRFShCBcMN+IjQt4nZQcy+300TgctRpqTXHvRJoWa6i8N
RcJOv2zF6TIOqyiXcrGSR/5MsOxPWZi6zeyi2Ro/f36voeu2B/wI6vyN9ht8pu3w
fRXHhhjLQ2E8rpIvCI3wtU/D3TndRn5Cee1kSbH0OK6Bt2EdJ3BBxahDDKwZoXOs
rFxW9g3AJlS2jZrKqyVomtIEULgu4VUepxTy1ZBQg7u5wWdDbZF6+3rQR31MlQM3
KvSBdz9nD2WCPROIBRs84t0oyBZC30gjyPylyfGwsO3E17++UQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLmMyQmY+le7RaWI4+MU+MMczntjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj
NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvODM3OGFkM2YtZjVjNS0z
ZDBlLWJmNDctZTMzNjE5Yjk1NWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy
MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5
OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0
MTk1OTk5NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9NQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJvBi+9sOGnFhw9a0rcql1JbHA+vJU6xE0e672EiIMGi8q+RGJP0U
Nk9zoU5MhoDz5l/zoygB63LBSXSzbMHhtphx4+uXTuLi5ncN3Fp2noSx7be8/p5l
GrbH4BbByZwR4wTJaM8G7XXJ3+cVNSTjgStOF0le3XKvWvos7SBbCHMNAUnYiaF8
ZdluTpAdlCD5CSfLQ51Au9Y86pXFV+hjo3+j1xfHN32gv0twqYKFVU3/xpRZho2h
sLFY29s2iPGQo2OSSw5TdBUUnRV/LrdR32Qtr4f97ePIc4Md3Dr24Uq3RqlaLE9L
VXw4ePs0utGfr8uPTZsK+2FVeAbfZM0zEA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:44:30 2026 by rpki-client