Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81/594ad9ce-a2de-3313-a63a-482dcc911b42.roa
File:                     594ad9ce-a2de-3313-a63a-482dcc911b42.roa (raw, json)
Hash identifier:          g0x8nFY/9iDpFzJ6oB3N0AXEJhdQ7dDHzJeKIc+1q0A=
Subject key identifier:   33:66:D1:9E:1B:13:D8:DB:D0:86:C1:45:60:6F:5E:E5:6B:DF:38:F2
Certificate issuer:       /CN=6830f8c6-bc25-42bd-8847-d98a6c864d81
Certificate serial:       010D0C9F4328584F498A057EA426446703FEE640
Authority key identifier: 50:C5:54:AD:5A:0E:EC:A7:92:94:EC:56:F2:1F:76:2F:60:35:DF:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81/594ad9ce-a2de-3313-a63a-482dcc911b42.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23239
IP address blocks:        2602:f484:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81/6830f8c6-bc25-42bd-8847-d98a6c864d81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81/6830f8c6-bc25-42bd-8847-d98a6c864d81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:05:7e:a4:26:44:67:03:fe:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6830f8c6-bc25-42bd-8847-d98a6c864d81
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=abbfa8a4-7c28-4b53-88f5-6d70194ed73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:65:13:da:62:99:4e:48:9f:fe:0b:69:b2:
                    80:f5:7b:78:60:3b:a0:42:43:10:99:2e:2a:1d:7d:
                    87:a2:ae:12:23:97:7d:b7:24:4d:ea:82:90:7e:08:
                    e9:e8:db:ba:96:8c:d8:52:69:34:49:ca:98:20:d7:
                    6c:2a:c6:30:c5:87:91:e7:0a:28:7a:6b:af:a5:5c:
                    76:0d:6e:75:49:38:d7:c2:a9:b6:9d:77:39:0f:95:
                    77:34:92:10:5f:48:12:97:80:37:28:27:9c:0b:72:
                    b3:9d:d7:3c:7e:02:3b:f7:e2:55:54:4f:7b:9f:f5:
                    91:73:ab:3d:b6:56:ab:9b:3d:a3:89:6a:53:b7:e9:
                    2a:aa:93:f0:75:5b:77:ac:e7:5e:96:8d:ce:5c:00:
                    99:0f:94:43:52:ab:11:47:1d:58:14:6f:91:37:f9:
                    23:83:6a:1c:83:99:9f:b9:cf:c9:36:bc:23:33:03:
                    e9:2a:d1:30:93:17:cc:6f:35:6c:75:eb:79:fc:86:
                    26:fa:62:99:d4:f0:b0:b1:55:b0:69:16:88:d2:b0:
                    a5:f4:22:41:74:b7:0b:b0:8c:56:59:95:12:83:a0:
                    7b:28:1f:28:0a:d2:b0:d2:be:5e:21:35:67:94:dd:
                    f2:18:dd:64:f0:b3:94:ff:3f:52:a7:2a:54:88:79:
                    ed:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:66:D1:9E:1B:13:D8:DB:D0:86:C1:45:60:6F:5E:E5:6B:DF:38:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81/594ad9ce-a2de-3313-a63a-482dcc911b42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81/6830f8c6-bc25-42bd-8847-d98a6c864d81.crl

            X509v3 Authority Key Identifier:
                keyid:50:C5:54:AD:5A:0E:EC:A7:92:94:EC:56:F2:1F:76:2F:60:35:DF:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f484:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:78:e3:bd:c9:8c:b7:06:2c:ff:fa:d4:93:aa:06:74:18:07:
         bb:72:8f:6c:69:74:f4:71:05:7f:6c:dd:f9:e0:3e:3c:01:1d:
         89:cf:60:d2:c2:d9:5a:96:cd:da:36:91:d6:6e:76:f2:a9:ca:
         30:11:e5:0f:c9:4e:d7:0c:0f:67:d3:87:26:41:78:55:f0:54:
         52:73:aa:7c:e8:9a:53:31:c9:49:9e:a7:36:80:89:3c:74:8a:
         ad:75:9e:85:34:6b:4c:6f:13:40:1f:d4:92:17:f3:28:36:c6:
         bf:00:6b:22:90:f4:9e:69:60:76:a2:12:80:fd:1b:3d:1b:94:
         a1:6f:b3:6a:e8:e8:73:20:14:8e:7b:f7:35:e2:c8:79:5e:62:
         13:77:0f:25:ee:e8:8d:ef:56:a0:13:07:60:8d:b8:17:99:63:
         59:30:70:64:b8:4a:45:85:15:60:2a:fb:b5:fd:54:9e:66:4f:
         f6:64:4a:4c:28:bc:35:28:43:1a:34:b1:a0:c8:d1:fe:53:7c:
         e2:40:da:0b:04:32:88:1f:96:3e:6e:3f:dc:54:9f:72:ad:fb:
         cb:c6:4a:49:d5:6e:72:0a:87:4d:5c:0f:6a:bc:a6:ff:e9:b7:
         0a:ee:08:d0:fd:95:43:30:7b:1a:4d:1e:21:eb:05:b4:18:20:
         74:8a:f9:47
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JigV+pCZEZwP+5kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjgzMGY4YzYtYmMyNS00MmJkLTg4NDctZDk4YTZjODY0
ZDgxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YWJiZmE4YTQtN2MyOC00YjUzLTg4ZjUtNmQ3MDE5NGVkNzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvhlE9pimU5In/4LabKA9Xt4YDugQkMQmS4q
HX2Hoq4SI5d9tyRN6oKQfgjp6Nu6lozYUmk0ScqYINdsKsYwxYeR5wooemuvpVx2
DW51STjXwqm2nXc5D5V3NJIQX0gSl4A3KCecC3Kzndc8fgI79+JVVE97n/WRc6s9
tlarmz2jiWpTt+kqqpPwdVt3rOdelo3OXACZD5RDUqsRRx1YFG+RN/kjg2ocg5mf
uc/JNrwjMwPpKtEwkxfMbzVsdet5/IYm+mKZ1PCwsVWwaRaI0rCl9CJBdLcLsIxW
WZUSg6B7KB8oCtKw0r5eITVnlN3yGN1k8LOU/z9SpypUiHntDwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDNm0Z4bE9jb0IbBRWBvXuVr3zjyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ODMw
ZjhjNi1iYzI1LTQyYmQtODg0Ny1kOThhNmM4NjRkODEvNTk0YWQ5Y2UtYTJkZS0z
MzEzLWE2M2EtNDgyZGNjOTExYjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjgzMGY4YzYtYmMyNS00MmJkLTg4
NDctZDk4YTZjODY0ZDgxLzY4MzBmOGM2LWJjMjUtNDJiZC04ODQ3LWQ5OGE2Yzg2
NGQ4MS5jcmwwHwYDVR0jBBgwFoAUUMVUrVoO7KeSlOxW8h92L2A13+EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi82ODMwZjhjNi1iYzI1LTQyYmQtODg0Ny1kOThh
NmM4NjRkODEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL0hAAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHp4473JjLcGLP/61JOqBnQYB7tyj2xpdPRxBX9s3fngPjwBHYnP
YNLC2VqWzdo2kdZudvKpyjAR5Q/JTtcMD2fThyZBeFXwVFJzqnzomlMxyUmepzaA
iTx0iq11noU0a0xvE0Af1JIX8yg2xr8AayKQ9J5pYHaiEoD9Gz0blKFvs2ro6HMg
FI579zXiyHleYhN3DyXu6I3vVqATB2CNuBeZY1kwcGS4SkWFFWAq+7X9VJ5mT/Zk
SkwovDUoQxo0saDI0f5TfOJA2gsEMogflj5uP9xUn3Kt+8vGSknVbnIKh01cD2q8
pv/ptwruCND9lUMwexpNHiHrBbQYIHSK+Uc=
-----END CERTIFICATE-----
Generated at Mon Oct 12 03:30:42 2026 by rpki-client