Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f577140d-00c9-36d6-b6e0-059ef18ec912.roa
File:                     f577140d-00c9-36d6-b6e0-059ef18ec912.roa (raw, json)
Hash identifier:          SdjK894MmS4xBGQmboaWZjvF8FP8mwB8T1BZVouVHO0=
Subject key identifier:   3C:DA:7F:27:E7:E9:5C:58:22:E0:60:19:5E:4D:A3:25:52:18:4F:DC
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584EA7886B72C66A6FC65A069910
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f577140d-00c9-36d6-b6e0-059ef18ec912.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     55395
IP address blocks:        2602:fd6f:60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:6b:72:c6:6a:6f:c6:5a:06:99:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2099caf9-79de-4f7b-8a13-179afc1b8d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8b:68:67:30:90:e8:8a:a1:15:2d:77:b9:9c:
                    63:b9:c3:46:14:56:b2:1c:de:7f:e2:98:fb:46:7b:
                    c1:cd:4c:f8:fa:06:92:02:09:c0:8b:ce:65:67:6c:
                    9d:56:73:2a:d9:bc:37:92:5c:58:9e:24:87:53:29:
                    88:b9:b3:01:3b:e0:ee:9f:cb:a4:df:68:3b:56:74:
                    2a:c9:42:1a:78:28:0e:ac:eb:be:20:70:7d:14:a5:
                    35:25:09:8d:41:8c:cf:9b:26:da:db:36:9c:9c:a4:
                    1f:b1:72:09:49:6d:b5:4f:48:d9:1d:1c:c5:b6:0e:
                    68:69:60:4c:18:f9:f8:1a:79:72:52:cb:c6:c1:cf:
                    fa:53:38:87:b9:25:b0:ba:ea:ff:87:27:27:7a:93:
                    57:55:2c:d4:68:a3:10:b3:f8:dd:a1:d6:9e:92:40:
                    e1:61:da:d1:a5:b9:65:4f:b4:2e:31:23:63:5b:55:
                    47:9e:5e:b0:56:5f:9a:bc:1d:a1:d5:fc:9b:5f:67:
                    38:f8:bc:2c:40:10:cd:c0:dc:3e:b1:0e:7f:86:8a:
                    e9:29:07:ba:df:73:8f:9d:e1:c9:de:5c:fb:94:03:
                    d2:58:9a:04:27:f3:4d:2c:d2:15:9d:83:8d:49:03:
                    1c:e4:65:ef:8a:d0:e3:9f:67:50:be:08:2e:55:8b:
                    e1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DA:7F:27:E7:E9:5C:58:22:E0:60:19:5E:4D:A3:25:52:18:4F:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f577140d-00c9-36d6-b6e0-059ef18ec912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d4:22:89:51:90:74:64:43:60:09:78:a9:ed:b9:5d:b8:b3:
         e0:b2:a7:4d:b8:b7:43:f5:a4:a4:26:07:d5:93:f1:8a:10:a9:
         20:b3:97:f5:10:d0:70:48:17:e5:7d:f4:ce:21:6a:a0:39:08:
         e0:2e:d9:de:4a:2a:2f:46:8d:bd:5a:2b:2d:3b:26:42:01:ff:
         5a:be:58:db:9d:ae:70:19:bd:ee:a7:f3:f4:6c:8b:e8:05:78:
         21:be:dd:35:a1:7b:79:7e:eb:da:0b:b7:b1:62:f3:5d:b4:03:
         16:82:33:89:57:25:7d:12:2a:4e:63:21:b5:a1:2d:4c:ff:7a:
         fa:f8:a0:c3:35:e6:fa:02:5d:ac:95:27:25:b0:bb:e3:ab:55:
         1e:a7:ce:3f:34:19:e6:b5:dd:86:ee:09:eb:a5:83:05:c4:03:
         e4:a3:a6:09:e6:1b:59:0c:f4:b7:38:cb:b6:10:3a:eb:71:d1:
         8f:82:b1:f3:df:c7:85:f2:39:35:0f:0f:59:63:aa:9d:f4:98:
         57:c4:ce:e0:d3:1f:2a:4c:7e:3a:9d:c1:07:5d:46:d5:c0:05:
         7f:5c:52:cf:55:6b:78:3f:ba:5e:5b:1e:f6:d0:5f:07:ac:9f:
         38:00:9a:46:93:0c:ff:9d:18:3a:b7:10:f4:36:bf:0d:56:b2:
         4c:ca:a0:e0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niGtyxmpvxloGmRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl
NjlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjA5OWNhZjktNzlkZS00ZjdiLThhMTMtMTc5YWZjMWI4ZDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYtoZzCQ6IqhFS13uZxjucNGFFayHN5/4pj7
RnvBzUz4+gaSAgnAi85lZ2ydVnMq2bw3klxYniSHUymIubMBO+Dun8uk32g7VnQq
yUIaeCgOrOu+IHB9FKU1JQmNQYzPmyba2zacnKQfsXIJSW21T0jZHRzFtg5oaWBM
GPn4GnlyUsvGwc/6UziHuSWwuur/hycnepNXVSzUaKMQs/jdodaekkDhYdrRpbll
T7QuMSNjW1VHnl6wVl+avB2h1fybX2c4+LwsQBDNwNw+sQ5/horpKQe633OPneHJ
3lz7lAPSWJoEJ/NNLNIVnYONSQMc5GXvitDjn2dQvgguVYvhfQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDzafyfn6VxYIuBgGV5NoyVSGE/cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5
ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvZjU3NzE0MGQtMDBjOS0z
NmQ2LWI2ZTAtMDU5ZWYxOGVjOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2
OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4
ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3
YjU0OGU2OWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL9bwBg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEvUIolRkHRkQ2AJeKntuV24s+Cyp024t0P1pKQmB9WT8YoQqSCz
l/UQ0HBIF+V99M4haqA5COAu2d5KKi9Gjb1aKy07JkIB/1q+WNudrnAZve6n8/Rs
i+gFeCG+3TWhe3l+69oLt7Fi8120AxaCM4lXJX0SKk5jIbWhLUz/evr4oMM15voC
XayVJyWwu+OrVR6nzj80Gea13YbuCeulgwXEA+SjpgnmG1kM9Lc4y7YQOutx0Y+C
sfPfx4XyOTUPD1ljqp30mFfEzuDTHypMfjqdwQddRtXABX9cUs9Va3g/ul5bHvbQ
XwesnzgAmkaTDP+dGDq3EPQ2vw1WskzKoOA=
-----END CERTIFICATE-----
Generated at Fri Sep 11 11:55:58 2026 by rpki-client