Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/30a68e61-7dce-3e53-945b-64145c7e5aef.roa
File:                     30a68e61-7dce-3e53-945b-64145c7e5aef.roa (raw, json)
Hash identifier:          W3uirRUk2y3SkDsfCFZrU+DiHKJz190j6savAxVFPfE=
Subject key identifier:   91:01:58:30:C9:76:8E:F2:F9:34:2B:1F:F1:86:33:34:4F:E2:5D:61
Certificate issuer:       /CN=a9586916-68f6-41f9-8be8-415f39b3aff8
Certificate serial:       010D0C9F4328584EBC770524FB2063E2E564A580
Authority key identifier: 5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/30a68e61-7dce-3e53-945b-64145c7e5aef.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     402095
IP address blocks:        2602:f482::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:05:24:fb:20:63:e2:e5:64:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9586916-68f6-41f9-8be8-415f39b3aff8
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=fb059d18-0ad8-4f14-9369-79ccb6f9dda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a1:20:60:60:3c:4c:d8:a9:38:08:3c:d9:6d:
                    39:2a:82:d7:a9:1a:f2:ad:6d:8d:6d:ae:5e:be:9a:
                    df:20:ad:60:9d:ad:63:6d:85:36:b5:8a:62:cf:88:
                    88:bb:e4:2c:f2:bb:a4:cf:86:69:72:2d:80:46:35:
                    c2:8a:52:a5:10:f3:e8:52:ee:3e:9d:a9:cf:6b:7b:
                    bc:76:5b:04:d2:22:a1:3a:34:17:63:6e:2b:da:f8:
                    ec:b1:3d:d3:ef:a8:20:c3:90:ff:8a:91:4d:f4:0b:
                    88:3d:12:8a:39:e3:6c:2c:a2:88:75:20:79:11:45:
                    d8:b9:d6:8a:e4:2d:cf:41:15:4e:02:1a:9c:8d:0c:
                    bb:9a:0a:3b:74:e8:fa:91:23:56:f8:41:21:23:5e:
                    f8:13:36:61:ab:b4:ff:3a:51:07:59:20:50:00:2a:
                    92:9d:7f:f9:43:31:cb:ac:52:d8:bf:67:0a:14:ec:
                    07:78:4f:50:09:fa:ed:58:da:9b:50:68:dc:ae:91:
                    7c:1c:fe:f7:75:6f:ec:2d:3f:3b:8a:d9:45:6f:c8:
                    f6:9b:71:7d:3a:a2:eb:39:52:27:09:70:26:19:5f:
                    59:f6:0b:b7:39:9f:42:50:82:2f:fc:59:ba:c6:15:
                    e4:14:a8:88:3f:f8:32:26:e7:89:7d:b0:15:68:31:
                    d8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:01:58:30:C9:76:8E:F2:F9:34:2B:1F:F1:86:33:34:4F:E2:5D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/30a68e61-7dce-3e53-945b-64145c7e5aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.crl

            X509v3 Authority Key Identifier:
                keyid:5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f482::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:61:c2:eb:6a:1c:50:46:56:ce:be:e0:59:85:f8:bf:6b:b5:
         b5:b7:ed:5e:28:14:97:bf:7c:cd:67:2b:43:dd:41:4d:e6:6b:
         af:f8:02:ac:a3:f4:53:7d:a2:6a:35:66:35:c3:f6:97:22:7e:
         b6:52:6e:62:4f:b7:88:f8:dc:21:da:db:09:aa:ea:1b:ef:9d:
         13:a2:03:60:96:d6:b6:08:ba:48:81:04:12:d2:96:bd:26:34:
         6d:ea:eb:01:df:8b:5c:6e:47:52:3f:83:50:2e:65:03:16:96:
         2d:cc:d3:35:4d:29:7e:b0:d0:51:7f:a3:25:14:3a:4e:dc:57:
         51:82:bb:fe:44:df:9f:1a:18:2a:69:b6:07:ab:a3:b5:6d:cb:
         d6:fb:f2:b6:fc:17:06:93:41:ba:04:d3:2f:39:f8:19:08:83:
         f0:f7:6e:ee:5b:e0:f3:f6:61:db:00:2a:55:74:12:07:65:81:
         74:4f:10:ad:62:ec:0d:ee:7b:a6:8e:ce:94:a7:10:fe:87:21:
         f6:d4:06:71:dd:28:dc:1b:5d:ff:7d:8a:28:40:26:07:ca:ce:
         51:46:9a:8b:6a:19:6a:63:18:12:99:e9:ef:1e:7c:32:00:6e:
         6b:5d:0a:b0:ba:58:fb:fa:7e:6e:15:13:08:07:2e:a5:f3:48:
         1d:ed:fb:04
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE68dwUk+yBj4uVkpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTk1ODY5MTYtNjhmNi00MWY5LThiZTgtNDE1ZjM5YjNh
ZmY4MB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk
ZmIwNTlkMTgtMGFkOC00ZjE0LTkzNjktNzljY2I2ZjlkZGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKEgYGA8TNipOAg82W05KoLXqRryrW2Nba5e
vprfIK1gna1jbYU2tYpiz4iIu+Qs8rukz4Zpci2ARjXCilKlEPPoUu4+nanPa3u8
dlsE0iKhOjQXY24r2vjssT3T76ggw5D/ipFN9AuIPRKKOeNsLKKIdSB5EUXYudaK
5C3PQRVOAhqcjQy7mgo7dOj6kSNW+EEhI174EzZhq7T/OlEHWSBQACqSnX/5QzHL
rFLYv2cKFOwHeE9QCfrtWNqbUGjcrpF8HP73dW/sLT87itlFb8j2m3F9OqLrOVIn
CXAmGV9Z9gu3OZ9CUIIv/Fm6xhXkFKiIP/gyJueJfbAVaDHYxQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJEBWDDJdo7y+TQrH/GGMzRP4l1hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTU4
NjkxNi02OGY2LTQxZjktOGJlOC00MTVmMzliM2FmZjgvMzBhNjhlNjEtN2RjZS0z
ZTUzLTk0NWItNjQxNDVjN2U1YWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTk1ODY5MTYtNjhmNi00MWY5LThi
ZTgtNDE1ZjM5YjNhZmY4L2E5NTg2OTE2LTY4ZjYtNDFmOS04YmU4LTQxNWYzOWIz
YWZmOC5jcmwwHwYDVR0jBBgwFoAUW27CtT6msxuUQRPk/xz8nUwFMIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTU4NjkxNi02OGY2LTQxZjktOGJlOC00MTVm
MzliM2FmZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL0ggAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAP2HC62ocUEZWzr7gWYX4v2u1tbftXigUl798zWcrQ91BTeZrr/gC
rKP0U32iajVmNcP2lyJ+tlJuYk+3iPjcIdrbCarqG++dE6IDYJbWtgi6SIEEEtKW
vSY0berrAd+LXG5HUj+DUC5lAxaWLczTNU0pfrDQUX+jJRQ6TtxXUYK7/kTfnxoY
Kmm2B6ujtW3L1vvytvwXBpNBugTTLzn4GQiD8Pdu7lvg8/Zh2wAqVXQSB2WBdE8Q
rWLsDe57po7OlKcQ/och9tQGcd0o3Btd/32KKEAmB8rOUUaai2oZamMYEpnp7x58
MgBua10KsLpY+/p+bhUTCAcupfNIHe37BA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 08:52:26 2026 by rpki-client