Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/6404afdd-fca4-31c4-997f-52caba5af345.roa
File:                     6404afdd-fca4-31c4-997f-52caba5af345.roa (raw, json)
Hash identifier:          5rhXPXUspMOzN5re36Teo/AzkBpKDkl/Fa8riqeKZ0E=
Subject key identifier:   97:21:4E:D4:7C:B9:A8:19:56:52:8A:4F:B7:9F:56:25:6E:43:45:B2
Certificate issuer:       /CN=a08a8360-966b-4e4f-9006-479f72f36651
Certificate serial:       010D0C9F4328584F506D66ACC85F2CFB146A2780
Authority key identifier: 3B:6E:53:45:7D:66:F1:B4:28:14:0A:C6:34:36:B8:BB:97:19:D2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/6404afdd-fca4-31c4-997f-52caba5af345.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     400642
IP address blocks:        2602:f488::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:66:ac:c8:5f:2c:fb:14:6a:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a08a8360-966b-4e4f-9006-479f72f36651
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=f4a8fd42-c3c4-44d1-829e-82145a3c6fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:31:b6:41:c8:7e:5c:0f:7b:36:9e:ac:88:
                    df:c3:b0:ca:b8:d4:e6:41:f9:cd:bb:73:c7:14:02:
                    25:c3:f2:ed:a8:96:6c:3b:b4:73:8e:aa:ab:0a:a6:
                    6d:52:1a:b4:d2:2d:e3:b1:6e:6e:43:0f:70:8c:29:
                    c4:ca:15:52:e9:e7:96:b8:d4:85:2f:bc:22:7c:6a:
                    4f:10:87:71:71:03:f9:a2:e4:f7:1d:42:81:58:22:
                    fd:2f:e4:10:33:74:6c:50:f9:88:54:f0:45:b4:0e:
                    b5:25:f1:93:21:d7:68:0c:af:46:cb:e4:ef:75:e4:
                    09:4c:af:99:1c:d7:5e:a9:24:1b:be:5e:4c:c6:b5:
                    ad:f9:f4:5a:c6:73:e6:3b:59:39:89:1a:f8:11:a2:
                    3d:16:7b:d9:82:f4:0b:a6:4d:a9:05:ad:10:d1:c5:
                    a4:7b:d7:37:91:8f:e7:87:55:a0:2d:38:d8:73:55:
                    f3:53:1f:35:a7:50:b4:c9:ff:74:52:43:0e:df:63:
                    31:9e:94:f8:79:f0:26:c3:20:04:99:cc:f6:be:eb:
                    5d:ee:ef:e0:fc:e9:18:e1:0b:59:85:d4:a9:5f:29:
                    c2:0e:1a:1b:c0:d1:3b:3e:2c:a4:95:40:b5:e3:7b:
                    6e:80:48:10:d1:a6:26:8a:4f:01:0c:d3:69:a0:a1:
                    e1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:21:4E:D4:7C:B9:A8:19:56:52:8A:4F:B7:9F:56:25:6E:43:45:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/6404afdd-fca4-31c4-997f-52caba5af345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.crl

            X509v3 Authority Key Identifier:
                keyid:3B:6E:53:45:7D:66:F1:B4:28:14:0A:C6:34:36:B8:BB:97:19:D2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f488::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:97:45:2a:e0:fd:8c:e0:6b:fc:24:17:63:c3:04:f1:a2:f4:
         75:79:d3:ca:a5:e9:5b:08:34:8b:81:72:8c:a8:9a:e0:0c:48:
         a1:97:31:56:f3:f0:24:2e:d3:ca:5e:fb:50:5f:68:29:fe:08:
         f9:35:9e:5b:3d:3e:71:1c:1f:b4:f3:cb:12:8e:cb:13:b2:18:
         02:ba:77:a2:6c:20:eb:03:71:e2:eb:63:af:d6:4b:62:ed:ba:
         90:8a:1a:d8:9b:c8:d0:d1:1d:c2:a1:45:5b:91:82:c2:b4:f4:
         f6:22:65:16:e0:b3:fc:d7:7a:3a:1f:c2:a2:59:ea:49:dd:40:
         11:02:cc:96:3d:5a:39:a2:e3:92:ba:0b:5f:65:cd:e9:5e:9f:
         68:a3:cc:5b:28:d7:55:39:1e:59:d2:24:8f:00:cc:f2:55:0e:
         de:8a:13:d4:85:3d:bf:f6:23:3f:fa:3a:10:7c:53:50:89:e1:
         5e:b4:29:fc:b3:7b:18:1b:4f:5b:67:3e:ae:3f:50:ad:c5:8c:
         64:be:f9:b7:57:7d:e5:73:8f:9d:bc:91:c6:e9:7c:00:8c:53:
         63:ef:7b:31:07:b2:fa:40:9c:ed:27:94:d7:d0:e2:c4:ad:39:
         52:fe:0d:b7:f6:4b:1d:e8:fd:aa:02:0e:47:62:28:ba:39:99:
         84:73:a2:44
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9QbWasyF8s+xRqJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA4YTgzNjAtOTY2Yi00ZTRmLTkwMDYtNDc5ZjcyZjM2
NjUxMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk
ZjRhOGZkNDItYzNjNC00NGQxLTgyOWUtODIxNDVhM2M2ZmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKAxtkHIflwPezaerIjfw7DKuNTmQfnNu3PH
FAIlw/LtqJZsO7RzjqqrCqZtUhq00i3jsW5uQw9wjCnEyhVS6eeWuNSFL7wifGpP
EIdxcQP5ouT3HUKBWCL9L+QQM3RsUPmIVPBFtA61JfGTIddoDK9Gy+TvdeQJTK+Z
HNdeqSQbvl5MxrWt+fRaxnPmO1k5iRr4EaI9FnvZgvQLpk2pBa0Q0cWke9c3kY/n
h1WgLTjYc1XzUx81p1C0yf90UkMO32MxnpT4efAmwyAEmcz2vutd7u/g/OkY4QtZ
hdSpXynCDhobwNE7PiyklUC143tugEgQ0aYmik8BDNNpoKHh4QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJchTtR8uagZVlKKT7efViVuQ0WyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMDhh
ODM2MC05NjZiLTRlNGYtOTAwNi00NzlmNzJmMzY2NTEvNjQwNGFmZGQtZmNhNC0z
MWM0LTk5N2YtNTJjYWJhNWFmMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTA4YTgzNjAtOTY2Yi00ZTRmLTkw
MDYtNDc5ZjcyZjM2NjUxL2EwOGE4MzYwLTk2NmItNGU0Zi05MDA2LTQ3OWY3MmYz
NjY1MS5jcmwwHwYDVR0jBBgwFoAUO25TRX1m8bQoFArGNDa4u5cZ0oEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMDhhODM2MC05NjZiLTRlNGYtOTAwNi00Nzlm
NzJmMzY2NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL0iAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOpdFKuD9jOBr/CQXY8ME8aL0dXnTyqXpWwg0i4FyjKia4AxIoZcx
VvPwJC7Tyl77UF9oKf4I+TWeWz0+cRwftPPLEo7LE7IYArp3omwg6wNx4utjr9ZL
Yu26kIoa2JvI0NEdwqFFW5GCwrT09iJlFuCz/Nd6Oh/ColnqSd1AEQLMlj1aOaLj
kroLX2XN6V6faKPMWyjXVTkeWdIkjwDM8lUO3ooT1IU9v/YjP/o6EHxTUInhXrQp
/LN7GBtPW2c+rj9QrcWMZL75t1d95XOPnbyRxul8AIxTY+97MQey+kCc7SeU19Di
xK05Uv4Nt/ZLHej9qgIOR2IoujmZhHOiRA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 19:47:52 2026 by rpki-client