Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/1be577e5-88ce-38c2-b796-7b1bf9d4ec5e.roa
File:                     1be577e5-88ce-38c2-b796-7b1bf9d4ec5e.roa (raw, json)
Hash identifier:          en0nGLuxb4SrYpuLU2wt/6kIFH0KrQ23o4T/d+ZUYWE=
Subject key identifier:   62:DF:0C:6F:91:31:79:B1:97:33:80:0B:A4:DA:FF:70:C0:37:36:89
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584FA1632420463BFD487198B7A0
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/1be577e5-88ce-38c2-b796-7b1bf9d4ec5e.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     211876
IP address blocks:        2602:fd92:300::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:24:20:46:3b:fd:48:71:98:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=c3dcc67b-3151-4785-a22d-965d4af8c4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7e:07:43:21:08:79:58:92:4f:c4:44:c5:6d:
                    8e:0c:5a:81:01:86:19:f7:42:b3:8b:e9:8b:1a:41:
                    fc:f7:60:2b:a2:d3:a0:63:f2:c5:7d:17:e8:3e:ec:
                    a5:dc:15:4e:53:4c:61:58:11:a9:b6:d9:c1:5d:f7:
                    b5:8b:24:60:02:52:56:04:f2:4f:2a:e8:03:a0:9b:
                    be:57:3e:ad:97:7b:9f:1a:76:07:40:44:cd:4f:ff:
                    56:7d:fb:59:e4:a1:d2:b0:e7:76:3d:ad:b5:8c:9b:
                    87:60:fb:e2:65:ab:8f:d8:d3:44:96:01:d6:94:fa:
                    90:7e:10:eb:ae:42:73:e3:3e:99:0f:f1:5f:74:1e:
                    65:e5:41:7b:e8:bc:6d:83:94:b0:ba:72:67:c9:d3:
                    68:27:e3:76:f8:66:b2:b5:3d:f7:fc:eb:e2:41:1b:
                    98:01:b7:74:98:99:ed:80:d6:da:b4:2a:c5:6e:c8:
                    07:18:c6:12:22:dc:3e:83:b1:d1:2f:02:dc:97:96:
                    1d:e3:e5:83:7b:b0:fb:0a:0b:b4:00:ab:2e:35:1d:
                    83:ea:d2:ba:59:c7:ca:78:10:59:64:e7:85:c1:31:
                    32:45:7a:74:54:e0:b9:52:a8:bc:15:b6:36:d6:20:
                    03:92:a5:b6:ce:84:12:0f:b3:e7:b7:d9:50:5d:39:
                    42:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DF:0C:6F:91:31:79:B1:97:33:80:0B:A4:DA:FF:70:C0:37:36:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/1be577e5-88ce-38c2-b796-7b1bf9d4ec5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:65:d8:df:11:ed:b6:c5:2d:73:02:82:c9:5f:49:93:82:
         f3:93:27:c3:52:18:11:83:e2:65:f7:a8:25:74:f1:47:46:85:
         80:8d:b6:97:b3:90:62:20:dd:e9:f0:db:08:10:29:b8:af:37:
         25:f4:54:9f:bd:f4:1d:31:ae:aa:f8:fa:1d:2c:34:df:1c:65:
         69:18:71:f7:74:ff:12:39:e0:39:be:2c:6d:1b:2f:f2:cd:02:
         27:8a:96:e8:e3:1f:1b:8a:ef:08:ec:32:3d:d4:63:d1:8d:a0:
         ea:b3:9a:e3:3e:3e:f3:5c:a2:4d:05:bb:a6:83:b7:72:86:ed:
         0b:8e:b5:44:04:61:b5:65:b7:95:59:27:19:e0:c6:64:24:9c:
         42:3b:9a:f8:13:28:26:a1:72:10:af:ba:0d:bf:9e:48:1b:1d:
         71:09:28:dc:12:21:fb:9a:e8:95:93:6b:01:1c:46:57:40:4f:
         31:7f:7d:cb:ac:33:cd:2d:70:89:0b:33:a7:74:6f:66:cf:84:
         72:6a:ba:1f:26:33:00:31:64:72:34:d3:3c:fc:73:2a:58:4a:
         f1:e2:08:8d:70:bf:4e:e4:78:69:e3:6e:28:3b:8e:cb:e1:53:
         6c:5c:df:fc:c5:58:4b:d4:ac:e0:d6:5d:1f:b4:42:23:76:29:
         84:0d:de:a7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+hYyQgRjv9SHGYt6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MmE3MzMtMGUxMy00MDEyLTgyOTQtZmNlNjU1ZTRh
NDFhMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk
YzNkY2M2N2ItMzE1MS00Nzg1LWEyMmQtOTY1ZDRhZjhjNGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX4HQyEIeViST8RExW2ODFqBAYYZ90Kzi+mL
GkH892ArotOgY/LFfRfoPuyl3BVOU0xhWBGpttnBXfe1iyRgAlJWBPJPKugDoJu+
Vz6tl3ufGnYHQETNT/9WfftZ5KHSsOd2Pa21jJuHYPviZauP2NNElgHWlPqQfhDr
rkJz4z6ZD/FfdB5l5UF76Lxtg5SwunJnydNoJ+N2+GaytT33/OviQRuYAbd0mJnt
gNbatCrFbsgHGMYSItw+g7HRLwLcl5Yd4+WDe7D7Cgu0AKsuNR2D6tK6WcfKeBBZ
ZOeFwTEyRXp0VOC5Uqi8FbY21iADkqW2zoQSD7Pnt9lQXTlCqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGLfDG+RMXmxlzOAC6Ta/3DANzaJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYy
YTczMy0wZTEzLTQwMTItODI5NC1mY2U2NTVlNGE0MWEvMWJlNTc3ZTUtODhjZS0z
OGMyLWI3OTYtN2IxYmY5ZDRlYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2MmE3MzMtMGUxMy00MDEyLTgy
OTQtZmNlNjU1ZTRhNDFhL2RkNjJhNzMzLTBlMTMtNDAxMi04Mjk0LWZjZTY1NWU0
YTQxYS5jcmwwHwYDVR0jBBgwFoAUkRNYtHaun6GwfpONvDcsq5c9dt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYyYTczMy0wZTEzLTQwMTItODI5NC1mY2U2
NTVlNGE0MWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL9kgMA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHoQZdjfEe22xS1zAoLJX0mTgvOTJ8NSGBGD4mX3qCV08UdGhYCN
tpezkGIg3enw2wgQKbivNyX0VJ+99B0xrqr4+h0sNN8cZWkYcfd0/xI54Dm+LG0b
L/LNAieKlujjHxuK7wjsMj3UY9GNoOqzmuM+PvNcok0Fu6aDt3KG7QuOtUQEYbVl
t5VZJxngxmQknEI7mvgTKCahchCvug2/nkgbHXEJKNwSIfua6JWTawEcRldATzF/
fcusM80tcIkLM6d0b2bPhHJquh8mMwAxZHI00zz8cypYSvHiCI1wv07keGnjbig7
jsvhU2xc3/zFWEvUrODWXR+0QiN2KYQN3qc=
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:40:36 2026 by rpki-client