Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/2078c601-4345-360c-ae2c-51e3bfbf4e97.roa
File:                     2078c601-4345-360c-ae2c-51e3bfbf4e97.roa (raw, json)
Hash identifier:          P5ztDhDB1YbQ23NAGoXB0bc4ECluaGP7bjWVQ1D8fxk=
Subject key identifier:   6B:CD:4D:10:91:02:C1:48:7E:A0:59:21:DB:07:82:63:17:0F:8C:33
Certificate issuer:       /CN=13387421-5611-48dd-8b16-4f308be22a1f
Certificate serial:       010D0C9F4328584F63F830DE3675040D9F2A5880
Authority key identifier: E7:A1:A0:1D:AA:E5:45:80:F1:81:B2:90:A0:EC:CA:1C:51:26:69:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/2078c601-4345-360c-ae2c-51e3bfbf4e97.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     402101
IP address blocks:        2602:f485::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/13387421-5611-48dd-8b16-4f308be22a1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/13387421-5611-48dd-8b16-4f308be22a1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:30:de:36:75:04:0d:9f:2a:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13387421-5611-48dd-8b16-4f308be22a1f
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=9c059fcf-9cb8-4028-bc69-aa40f54abcdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a0:db:71:57:e4:36:b8:86:7a:01:4e:05:bb:
                    60:f7:37:0c:30:d9:cd:40:49:f1:b1:80:54:61:8b:
                    7a:0a:1a:27:32:f1:ed:ab:3d:cb:f7:23:9f:37:0d:
                    8b:4a:35:58:94:02:46:5f:a2:85:a2:ef:f5:2d:d3:
                    85:68:1f:cd:16:7a:c5:8a:53:8c:7f:51:ac:bd:8d:
                    24:52:2c:a1:ae:56:e2:31:3e:8c:b6:bb:58:bf:29:
                    f1:27:5c:ee:a9:43:2c:03:40:06:d2:c1:75:6f:06:
                    48:f8:11:65:41:76:64:e9:2e:fa:96:a3:42:0a:41:
                    e7:d3:bf:c1:8c:91:c5:ff:62:01:ea:b3:24:a9:99:
                    f3:1d:08:96:49:f2:6a:a6:39:35:e8:af:56:b0:1a:
                    5a:c3:54:02:5c:f2:87:ba:af:2f:ef:f5:db:bb:1f:
                    ea:6a:4f:4e:ff:c0:47:38:b7:91:bd:f8:11:a4:94:
                    d3:92:4f:92:5f:0e:a2:71:19:98:95:96:e0:ee:f6:
                    4d:4f:7d:a3:a2:00:a7:53:ad:f5:c5:7e:27:dd:0e:
                    07:07:f0:7f:45:8f:cd:16:e7:0d:79:c4:0f:c2:37:
                    79:4a:c1:cd:3d:24:7f:65:44:ad:b7:28:9e:01:5d:
                    2c:2b:4f:df:7b:97:cd:9f:b9:eb:74:df:4b:31:82:
                    e1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CD:4D:10:91:02:C1:48:7E:A0:59:21:DB:07:82:63:17:0F:8C:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/2078c601-4345-360c-ae2c-51e3bfbf4e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/13387421-5611-48dd-8b16-4f308be22a1f.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A1:A0:1D:AA:E5:45:80:F1:81:B2:90:A0:EC:CA:1C:51:26:69:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f485::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:93:55:d4:b1:f3:1a:ac:da:57:bd:00:bd:44:4a:0f:b2:d1:
         dc:cb:e9:a1:44:a7:48:f9:d9:bb:e4:5e:2a:68:6b:93:ca:5e:
         ca:60:06:8a:1d:df:07:97:c0:b2:68:a7:6f:e8:51:dd:c5:4a:
         fd:a6:0b:5c:20:3c:94:fe:36:ca:38:d3:56:a1:04:7e:bd:0c:
         88:57:76:65:0b:f8:88:58:3d:c8:a6:6b:20:c6:09:fd:f5:1e:
         d7:71:af:59:b6:5d:44:6b:db:08:53:80:9d:64:f1:b4:93:4b:
         29:12:51:08:33:10:36:09:16:71:9a:40:d9:b2:24:46:3a:54:
         a6:e4:72:1b:51:89:24:ec:a0:9e:f7:01:df:76:12:6b:c7:8a:
         3f:2d:a0:db:34:63:d6:7f:02:fa:70:8c:a3:99:29:66:fe:5c:
         d2:ce:b6:14:bf:ea:1f:46:81:f1:51:2d:65:44:bc:ad:f9:37:
         a3:3f:53:94:ae:76:1b:50:d5:aa:14:13:e7:58:aa:64:14:9a:
         76:cd:c5:d8:53:f0:14:d9:66:54:3c:1a:ac:f4:a9:3b:e8:b0:
         35:69:87:b3:76:b9:cf:70:b0:db:21:16:37:bb:9e:e9:07:57:
         32:43:bb:56:c7:aa:4b:6e:49:27:a1:05:73:ea:da:42:6b:9c:
         8a:08:c4:68
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9j+DDeNnUEDZ8qWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTMzODc0MjEtNTYxMS00OGRkLThiMTYtNGYzMDhiZTIy
YTFmMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk
OWMwNTlmY2YtOWNiOC00MDI4LWJjNjktYWE0MGY1NGFiY2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6DbcVfkNriGegFOBbtg9zcMMNnNQEnxsYBU
YYt6ChonMvHtqz3L9yOfNw2LSjVYlAJGX6KFou/1LdOFaB/NFnrFilOMf1GsvY0k
UiyhrlbiMT6MtrtYvynxJ1zuqUMsA0AG0sF1bwZI+BFlQXZk6S76lqNCCkHn07/B
jJHF/2IB6rMkqZnzHQiWSfJqpjk16K9WsBpaw1QCXPKHuq8v7/Xbux/qak9O/8BH
OLeRvfgRpJTTkk+SXw6icRmYlZbg7vZNT32jogCnU631xX4n3Q4HB/B/RY/NFucN
ecQPwjd5SsHNPSR/ZUSttyieAV0sK0/fe5fNn7nrdN9LMYLh5wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGvNTRCRAsFIfqBZIdsHgmMXD4wzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMzM4
NzQyMS01NjExLTQ4ZGQtOGIxNi00ZjMwOGJlMjJhMWYvMjA3OGM2MDEtNDM0NS0z
NjBjLWFlMmMtNTFlM2JmYmY0ZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTMzODc0MjEtNTYxMS00OGRkLThi
MTYtNGYzMDhiZTIyYTFmLzEzMzg3NDIxLTU2MTEtNDhkZC04YjE2LTRmMzA4YmUy
MmExZi5jcmwwHwYDVR0jBBgwFoAU56GgHarlRYDxgbKQoOzKHFEmaTMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMzM4NzQyMS01NjExLTQ4ZGQtOGIxNi00ZjMw
OGJlMjJhMWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL0hQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAipNV1LHzGqzaV70AvURKD7LR3MvpoUSnSPnZu+ReKmhrk8peymAG
ih3fB5fAsminb+hR3cVK/aYLXCA8lP42yjjTVqEEfr0MiFd2ZQv4iFg9yKZrIMYJ
/fUe13GvWbZdRGvbCFOAnWTxtJNLKRJRCDMQNgkWcZpA2bIkRjpUpuRyG1GJJOyg
nvcB33YSa8eKPy2g2zRj1n8C+nCMo5kpZv5c0s62FL/qH0aB8VEtZUS8rfk3oz9T
lK52G1DVqhQT51iqZBSads3F2FPwFNlmVDwarPSpO+iwNWmHs3a5z3Cw2yEWN7ue
6QdXMkO7VseqS25JJ6EFc+raQmucigjEaA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 03:29:38 2026 by rpki-client