Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa
File:                     0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa (raw, json)
Hash identifier:          hdQFm4bGomnaboly4fUTEKzSdTxEUNN5KOnfODUDUNU=
Subject key identifier:   93:E3:37:12:36:CB:BE:4F:A0:A2:AA:D6:2E:43:07:5D:28:16:48:73
Certificate issuer:       /CN=5b959ce4-3ae9-4721-8444-22b2e7161104
Certificate serial:       010D0C9F4328584F2D87BC81E420CA702D3BEB00
Authority key identifier: F7:04:0B:E9:9B:F2:56:71:7F:ED:45:FE:D5:1E:7E:0A:FC:8F:D5:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     32109
IP address blocks:        2602:ff0e::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:bc:81:e4:20:ca:70:2d:3b:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b959ce4-3ae9-4721-8444-22b2e7161104
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=6c77ae67-3630-4903-b547-c6e3557d449f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:17:af:05:bf:36:ee:25:c5:21:df:81:f8:18:
                    2b:45:86:78:00:4f:ff:70:45:96:c9:d0:4b:d9:b9:
                    df:83:50:e3:64:f5:00:f6:2c:a8:b1:91:71:c6:ad:
                    97:e5:34:ee:9d:75:b0:31:36:0d:b4:87:49:76:51:
                    b6:4b:f2:36:9d:f1:39:f4:71:b5:5a:3e:35:18:04:
                    09:31:59:98:fe:a5:5c:c2:d9:35:60:80:c9:b2:64:
                    14:fe:d6:0c:1b:14:bb:a9:db:67:61:b7:3c:34:ea:
                    73:88:5b:06:ea:03:15:f2:6b:cb:1e:47:ac:d7:d3:
                    0b:eb:3d:07:fa:c3:ee:95:38:39:60:19:de:f1:67:
                    58:47:b2:c3:5c:fa:b3:13:76:7f:48:51:83:d1:8d:
                    4d:0f:be:1a:79:ad:e9:5d:61:04:ee:42:a0:b9:0f:
                    9d:85:19:ee:c4:0e:3a:5b:a4:68:08:52:4d:b2:b7:
                    ef:f4:d4:9e:97:9d:be:cd:0d:36:ad:ad:9d:07:ab:
                    6f:66:27:47:35:4b:99:84:89:bd:dd:14:41:1e:91:
                    8e:4b:55:09:5c:04:93:cd:9c:7b:78:83:e9:5f:cd:
                    51:5b:06:e1:d4:39:34:01:5a:d8:92:e7:16:78:9b:
                    ed:85:4b:77:cc:37:8c:22:7c:63:be:8b:ee:bb:62:
                    72:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E3:37:12:36:CB:BE:4F:A0:A2:AA:D6:2E:43:07:5D:28:16:48:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.crl

            X509v3 Authority Key Identifier:
                keyid:F7:04:0B:E9:9B:F2:56:71:7F:ED:45:FE:D5:1E:7E:0A:FC:8F:D5:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff0e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ed:74:cf:71:5a:4b:4f:c0:e1:02:7e:2e:80:16:9f:28:6a:
         1d:6f:c8:ea:63:fd:cf:82:13:66:bd:15:8d:f9:fa:24:73:c6:
         bd:27:b8:9c:b7:18:d9:63:00:9c:58:a9:29:26:12:94:55:d8:
         8e:f0:98:6f:e1:43:7e:cc:ba:68:07:e4:91:96:6e:d5:56:e8:
         e7:46:e0:84:fb:42:a3:14:b7:36:b8:b8:58:8a:29:77:6a:dd:
         e0:4e:28:95:83:7b:02:3e:dd:80:c4:d9:b5:12:12:41:1b:6c:
         2d:cf:65:65:59:b4:00:48:3e:91:47:58:cd:07:9e:8d:3e:b9:
         84:32:05:91:d4:97:7d:8a:16:8f:72:85:62:dd:3d:c0:a0:cd:
         9a:9a:f3:25:fd:34:d5:51:5c:15:90:02:49:6c:0e:b3:44:51:
         b2:cc:80:67:e4:52:3b:20:1b:6c:22:02:0c:b1:34:c5:9c:a1:
         48:34:7f:60:48:1d:06:91:c3:b4:82:07:24:27:46:a9:aa:4c:
         62:2c:dd:8c:22:29:a2:55:8d:36:02:91:48:4c:3d:6f:65:cb:
         65:1a:ee:2b:3d:12:6b:21:28:f6:a9:b0:b7:51:65:3f:49:ec:
         d6:6a:62:6a:53:d8:22:c2:e2:28:d8:44:bf:18:e0:3f:be:e7:
         71:1b:14:78
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8th7yB5CDKcC076wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI5NTljZTQtM2FlOS00NzIxLTg0NDQtMjJiMmU3MTYx
MTA0MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmM3N2FlNjctMzYzMC00OTAzLWI1NDctYzZlMzU1N2Q0NDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBevBb827iXFId+B+BgrRYZ4AE//cEWWydBL
2bnfg1DjZPUA9iyosZFxxq2X5TTunXWwMTYNtIdJdlG2S/I2nfE59HG1Wj41GAQJ
MVmY/qVcwtk1YIDJsmQU/tYMGxS7qdtnYbc8NOpziFsG6gMV8mvLHkes19ML6z0H
+sPulTg5YBne8WdYR7LDXPqzE3Z/SFGD0Y1ND74aea3pXWEE7kKguQ+dhRnuxA46
W6RoCFJNsrfv9NSel52+zQ02ra2dB6tvZidHNUuZhIm93RRBHpGOS1UJXASTzZx7
eIPpX81RWwbh1Dk0AVrYkucWeJvthUt3zDeMInxjvovuu2JyIwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJPjNxI2y75PoKKq1i5DB10oFkhzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81Yjk1
OWNlNC0zYWU5LTQ3MjEtODQ0NC0yMmIyZTcxNjExMDQvMGMwNGQ5MWEtN2ZjZi0z
NjQ3LWEzZGMtYmNlZGI2M2Q2YjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWI5NTljZTQtM2FlOS00NzIxLTg0
NDQtMjJiMmU3MTYxMTA0LzViOTU5Y2U0LTNhZTktNDcyMS04NDQ0LTIyYjJlNzE2
MTEwNC5jcmwwHwYDVR0jBBgwFoAU9wQL6ZvyVnF/7UX+1R5+CvyP1aMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81Yjk1OWNlNC0zYWU5LTQ3MjEtODQ0NC0yMmIy
ZTcxNjExMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/DgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAre10z3FaS0/A4QJ+LoAWnyhqHW/I6mP9z4ITZr0Vjfn6JHPGvSe4
nLcY2WMAnFipKSYSlFXYjvCYb+FDfsy6aAfkkZZu1Vbo50bghPtCoxS3Nri4WIop
d2rd4E4olYN7Aj7dgMTZtRISQRtsLc9lZVm0AEg+kUdYzQeejT65hDIFkdSXfYoW
j3KFYt09wKDNmprzJf001VFcFZACSWwOs0RRssyAZ+RSOyAbbCICDLE0xZyhSDR/
YEgdBpHDtIIHJCdGqapMYizdjCIpolWNNgKRSEw9b2XLZRruKz0SayEo9qmwt1Fl
P0ns1mpialPYIsLiKNhEvxjgP77ncRsUeA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 14:36:39 2026 by rpki-client