Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/7a92aa7c-6624-3fbd-a0b1-f7a8054b24e8.roa
File:                     7a92aa7c-6624-3fbd-a0b1-f7a8054b24e8.roa (raw, json)
Hash identifier:          7vDDA/Iu//2M1ZjVUgBvukPG9lR0UYZIvAP6InXhqyM=
Subject key identifier:   28:CF:22:6A:00:10:E8:E0:A9:49:06:DA:9D:02:3F:FF:23:41:29:E3
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584ED4325C4DA2576A6A18459B80
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/7a92aa7c-6624-3fbd-a0b1-f7a8054b24e8.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     18526
IP address blocks:        2602:fd6f:140::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:5c:4d:a2:57:6a:6a:18:45:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=89c43660-249f-4a7a-9656-1dd09aaa977a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:9c:23:67:95:be:c0:79:49:c2:60:7e:94:
                    3c:eb:29:88:e5:7b:04:a1:4f:f4:7a:d5:09:cf:5b:
                    ec:fd:19:bd:90:d1:d4:fb:7a:79:5b:a5:b6:44:e7:
                    21:5d:6c:e5:16:fd:1c:d0:35:86:24:3c:10:5b:de:
                    7c:d8:2d:bf:27:66:87:09:b7:bc:7d:d2:64:41:ab:
                    9f:bc:6a:21:c0:01:65:5e:e5:98:24:0d:d5:82:1e:
                    13:1b:b5:8a:a9:4c:92:00:f3:96:c3:d9:0f:29:23:
                    05:b1:3f:2f:4d:01:31:c0:a6:58:18:91:a9:89:22:
                    5b:fc:98:c7:b9:66:34:30:14:f6:6c:97:78:76:a2:
                    42:27:55:a6:42:f3:d1:a5:10:d2:f3:46:a1:19:c7:
                    4d:fa:ed:1d:eb:df:af:15:ec:76:67:82:92:db:d9:
                    b5:6c:b6:be:46:3d:eb:ed:38:53:e5:09:cd:d6:fa:
                    14:aa:87:84:97:71:1f:bc:d5:cb:84:e5:cc:ac:14:
                    2c:75:c3:09:01:62:d7:40:30:71:33:84:fb:23:f2:
                    7e:dd:27:c5:af:78:3c:88:f5:11:69:42:c4:f8:4c:
                    60:65:96:e1:09:6e:cd:16:09:49:5f:60:f7:62:12:
                    2b:3d:58:5b:5f:7d:73:e9:72:20:be:12:63:2b:b2:
                    a4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CF:22:6A:00:10:E8:E0:A9:49:06:DA:9D:02:3F:FF:23:41:29:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/7a92aa7c-6624-3fbd-a0b1-f7a8054b24e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:140::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:10:83:88:1c:19:b5:87:e5:90:1b:00:3e:ed:f1:c3:cf:e9:
         c2:2b:f6:ec:03:9f:f1:82:93:8d:0d:ae:81:83:a4:88:ec:f5:
         c7:a3:04:54:72:4b:7a:2c:c6:f9:8d:2c:8b:8f:aa:92:de:f0:
         8b:bc:de:11:67:1b:6b:e7:18:0d:44:77:e5:6e:e1:b0:a6:3d:
         cd:f2:0f:34:e3:c3:af:e7:6d:48:4b:08:a8:f4:6a:2e:a9:7a:
         f1:be:5d:29:9a:39:b8:32:04:5c:5d:1d:f0:7d:af:a9:20:a9:
         65:6a:47:d8:a6:52:32:c2:8d:7d:f5:11:a4:46:29:60:1f:3f:
         80:f0:b2:30:61:ff:c9:c7:0b:49:cc:31:de:c3:12:11:67:dc:
         ad:00:98:f4:71:c6:3d:57:9a:e7:5f:04:c9:f5:19:22:63:2d:
         bb:3d:97:76:15:28:fc:8e:6c:67:2f:cd:42:ef:88:6e:a0:9f:
         63:e1:ee:b1:85:9f:09:d6:5d:60:0b:9b:39:8f:2e:6a:e9:f4:
         cf:e1:a1:60:b3:78:50:7a:a3:06:3b:19:b1:fe:24:75:d1:05:
         cb:1a:e1:c8:6b:fa:cd:49:33:f4:d2:58:62:41:e1:d9:f2:73:
         ca:b7:1f:db:44:ac:bd:d4:ad:ad:86:59:f7:63:21:86:60:5d:
         cb:00:53:8a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7UMlxNoldqahhFm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl
NjlkMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk
ODljNDM2NjAtMjQ5Zi00YTdhLTk2NTYtMWRkMDlhYWE5NzdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsycI2eVvsB5ScJgfpQ86ymI5XsEoU/0etUJ
z1vs/Rm9kNHU+3p5W6W2ROchXWzlFv0c0DWGJDwQW9582C2/J2aHCbe8fdJkQauf
vGohwAFlXuWYJA3Vgh4TG7WKqUySAPOWw9kPKSMFsT8vTQExwKZYGJGpiSJb/JjH
uWY0MBT2bJd4dqJCJ1WmQvPRpRDS80ahGcdN+u0d69+vFex2Z4KS29m1bLa+Rj3r
7ThT5QnN1voUqoeEl3EfvNXLhOXMrBQsdcMJAWLXQDBxM4T7I/J+3SfFr3g8iPUR
aULE+ExgZZbhCW7NFglJX2D3YhIrPVhbX31z6XIgvhJjK7KkTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCjPImoAEOjgqUkG2p0CP/8jQSnjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5
ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvN2E5MmFhN2MtNjYyNC0z
ZmJkLWEwYjEtZjdhODA1NGIyNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2
OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4
ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3
YjU0OGU2OWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL9bwFA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIwQg4gcGbWH5ZAbAD7t8cPP6cIr9uwDn/GCk40NroGDpIjs9cej
BFRyS3osxvmNLIuPqpLe8Iu83hFnG2vnGA1Ed+Vu4bCmPc3yDzTjw6/nbUhLCKj0
ai6pevG+XSmaObgyBFxdHfB9r6kgqWVqR9imUjLCjX31EaRGKWAfP4DwsjBh/8nH
C0nMMd7DEhFn3K0AmPRxxj1XmudfBMn1GSJjLbs9l3YVKPyObGcvzULviG6gn2Ph
7rGFnwnWXWALmzmPLmrp9M/hoWCzeFB6owY7GbH+JHXRBcsa4chr+s1JM/TSWGJB
4dnyc8q3H9tErL3Ura2GWfdjIYZgXcsAU4o=
-----END CERTIFICATE-----
Generated at Fri Sep 11 09:28:07 2026 by rpki-client