Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/4e2c01a0-0141-3419-a05b-416705d7f935.roa
File:                     4e2c01a0-0141-3419-a05b-416705d7f935.roa (raw, json)
Hash identifier:          Y19Tkxm/rADNzpL6i2iZLF0F2Z3b9DalBlytI981p90=
Subject key identifier:   1D:76:29:19:99:F1:70:68:9C:2F:92:84:B9:2D:D3:3E:DB:55:47:6F
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584F03A77D4A4D82E936F4EB2DB8
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/4e2c01a0-0141-3419-a05b-416705d7f935.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     210934
IP address blocks:        2602:fd92:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:7d:4a:4d:82:e9:36:f4:eb:2d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=c27a904c-c799-4d2b-a3ec-43c7e67bb5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e8:b3:e4:fd:89:bb:ef:fe:31:87:96:a7:a7:
                    b8:92:91:88:e8:21:1a:54:06:6e:2b:1a:bf:0f:25:
                    a0:71:fc:46:e1:4a:c0:e9:b0:9f:dc:cd:db:27:94:
                    bf:d1:b7:25:45:9f:a1:f2:7a:7a:f5:35:70:0e:fb:
                    76:5f:e6:7c:14:e7:00:ff:d0:57:8b:e2:a5:ed:90:
                    7a:b6:47:1e:22:30:42:b4:e9:a5:de:35:f4:da:c7:
                    93:60:9e:98:9f:dc:63:a1:bc:74:2d:a6:64:f2:58:
                    b1:11:a7:67:da:34:34:3f:6a:ea:cc:63:d0:8b:2f:
                    0b:97:87:cc:59:3e:b8:c2:fd:29:e1:ba:5e:7b:a3:
                    16:1b:3b:4c:66:42:49:f8:2d:30:d6:90:5f:89:c3:
                    57:95:b8:28:07:6c:40:67:66:03:ad:c5:b7:ff:90:
                    93:08:50:8f:0d:a1:a3:d5:44:40:3d:1d:02:2a:02:
                    4d:2a:2c:3f:5b:d6:97:f4:ae:c8:e5:19:45:05:f2:
                    da:0a:77:25:11:19:73:5f:fb:84:b5:1c:9c:fa:51:
                    bd:92:fd:22:5f:0e:d7:89:bc:c1:a2:1a:eb:05:b2:
                    f3:94:17:38:ea:e3:2b:85:ed:9b:c8:6a:7a:fe:86:
                    1d:b3:db:b1:1c:6b:7a:2b:e5:68:8d:a1:e6:00:0f:
                    ab:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:76:29:19:99:F1:70:68:9C:2F:92:84:B9:2D:D3:3E:DB:55:47:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/4e2c01a0-0141-3419-a05b-416705d7f935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9d:79:dd:5d:02:4b:b4:14:29:68:1c:db:72:27:f6:89:23:
         bc:9c:35:23:dd:bf:53:2d:df:b7:66:79:62:ca:d9:df:28:fd:
         1a:10:c5:b3:c1:ee:9f:83:9e:29:c7:99:d2:56:61:33:c9:5b:
         67:7f:6d:0c:03:16:02:1c:2b:26:e0:ef:00:68:0d:e1:8d:6a:
         f0:e0:5d:28:5c:ad:2d:94:db:32:f1:35:c6:42:bf:20:a2:3a:
         44:f8:17:ac:55:66:9f:a0:3f:90:9a:3d:e7:f1:f3:3f:e7:90:
         8c:08:b5:fd:81:7d:4a:4c:c5:ad:55:39:dd:45:34:15:7a:b3:
         54:0d:c1:c0:45:e8:7f:61:98:5b:e9:73:27:07:ee:08:ac:c0:
         1a:bb:34:68:fd:bc:b2:28:7c:a5:33:1e:f5:0c:00:90:1a:b8:
         cc:68:8f:44:06:11:09:2a:14:94:98:8c:a8:cc:c9:46:50:d5:
         af:86:55:d7:8f:54:95:73:7a:9d:f7:96:6b:e9:a0:1c:2e:11:
         31:7a:d2:19:64:7a:e3:b8:1f:f8:0c:6e:34:31:d9:59:2b:eb:
         c9:f7:1c:0c:a0:65:12:cc:e3:ab:79:87:26:7a:f5:36:34:3e:
         e8:2d:a6:aa:20:ea:d0:b0:d4:ea:4e:73:d1:cc:15:95:b6:04:
         69:69:c8:46
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8Dp31KTYLpNvTrLbgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MmE3MzMtMGUxMy00MDEyLTgyOTQtZmNlNjU1ZTRh
NDFhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
YzI3YTkwNGMtYzc5OS00ZDJiLWEzZWMtNDNjN2U2N2JiNWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+iz5P2Ju+/+MYeWp6e4kpGI6CEaVAZuKxq/
DyWgcfxG4UrA6bCf3M3bJ5S/0bclRZ+h8np69TVwDvt2X+Z8FOcA/9BXi+Kl7ZB6
tkceIjBCtOml3jX02seTYJ6Yn9xjobx0LaZk8lixEadn2jQ0P2rqzGPQiy8Ll4fM
WT64wv0p4bpee6MWGztMZkJJ+C0w1pBficNXlbgoB2xAZ2YDrcW3/5CTCFCPDaGj
1URAPR0CKgJNKiw/W9aX9K7I5RlFBfLaCnclERlzX/uEtRyc+lG9kv0iXw7XibzB
ohrrBbLzlBc46uMrhe2byGp6/oYds9uxHGt6K+VojaHmAA+rswIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFB12KRmZ8XBonC+ShLkt0z7bVUdvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYy
YTczMy0wZTEzLTQwMTItODI5NC1mY2U2NTVlNGE0MWEvNGUyYzAxYTAtMDE0MS0z
NDE5LWEwNWItNDE2NzA1ZDdmOTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2MmE3MzMtMGUxMy00MDEyLTgy
OTQtZmNlNjU1ZTRhNDFhL2RkNjJhNzMzLTBlMTMtNDAxMi04Mjk0LWZjZTY1NWU0
YTQxYS5jcmwwHwYDVR0jBBgwFoAUkRNYtHaun6GwfpONvDcsq5c9dt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYyYTczMy0wZTEzLTQwMTItODI5NC1mY2U2
NTVlNGE0MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9kggw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcJ153V0CS7QUKWgc23In9okjvJw1I92/Uy3ft2Z5YsrZ3yj9GhDF
s8Hun4OeKceZ0lZhM8lbZ39tDAMWAhwrJuDvAGgN4Y1q8OBdKFytLZTbMvE1xkK/
IKI6RPgXrFVmn6A/kJo95/HzP+eQjAi1/YF9SkzFrVU53UU0FXqzVA3BwEXof2GY
W+lzJwfuCKzAGrs0aP28sih8pTMe9QwAkBq4zGiPRAYRCSoUlJiMqMzJRlDVr4ZV
149UlXN6nfeWa+mgHC4RMXrSGWR647gf+AxuNDHZWSvryfccDKBlEszjq3mHJnr1
NjQ+6C2mqiDq0LDU6k5z0cwVlbYEaWnIRg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:09:34 2026 by rpki-client