Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/0190728d-5c83-381d-9de9-868e4c22e3d2.roa
File:                     0190728d-5c83-381d-9de9-868e4c22e3d2.roa (raw, json)
Hash identifier:          bwcaPsucbHUscd+MHZ96nYl7AwSTWkiKcDs+8d+VAQc=
Subject key identifier:   B7:64:1A:3F:A2:B1:3F:54:AA:AD:A0:DA:81:04:F4:D1:4B:AF:E4:B4
Certificate issuer:       /CN=e381cbd6-d113-4ae5-805a-aa3e1601cf49
Certificate serial:       010D0C9F4328584F4F07F90D25F64854A8214400
Authority key identifier: 9D:28:82:CC:E4:C3:26:39:6C:08:9D:EC:65:18:25:0E:46:87:B8:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/0190728d-5c83-381d-9de9-868e4c22e3d2.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     40253
IP address blocks:        2602:f494:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:f9:0d:25:f6:48:54:a8:21:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e381cbd6-d113-4ae5-805a-aa3e1601cf49
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=4cd3aa88-b000-4a98-b580-8334c005402e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1a:3e:3d:47:e5:2e:6e:b6:bb:7b:ad:07:b6:
                    ba:07:66:b9:c7:7c:72:16:9e:3f:59:a1:dd:78:08:
                    3f:75:c5:d8:1e:7d:6e:ac:bc:aa:3b:05:72:0a:97:
                    79:c5:ec:d4:77:60:c7:1e:86:a5:8b:f4:5e:38:eb:
                    e1:e0:46:c2:cc:73:5f:36:cb:03:a4:6c:2d:4c:64:
                    c4:ac:99:35:02:68:2b:f1:a4:e2:d8:9f:09:0c:96:
                    df:88:18:8a:ee:d5:4d:c7:56:ac:ad:03:fc:1e:7a:
                    61:81:e2:44:36:be:a7:7b:1b:37:22:fa:41:71:10:
                    60:28:68:d1:21:2c:ab:f8:4c:69:1e:2d:84:a9:58:
                    3d:49:b4:7d:f7:8a:d8:ce:79:00:dd:57:3c:11:63:
                    05:ac:a8:d5:1e:ac:9a:81:0e:01:75:7c:f5:21:c1:
                    84:d7:f8:de:ed:a6:97:03:4e:c9:de:d7:67:f3:26:
                    3e:11:0e:f6:65:48:cf:c4:e2:e7:01:2b:76:ac:43:
                    3d:97:e5:26:bf:8c:8c:6a:7b:25:a0:7e:12:bb:9f:
                    5e:92:1e:16:fd:b6:df:4d:e1:0b:a9:62:a2:cf:b4:
                    e7:12:46:17:b1:b1:d8:e6:51:14:77:bd:19:b2:bc:
                    69:34:22:0f:80:28:7b:a5:04:3b:37:5d:13:69:d9:
                    e8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:64:1A:3F:A2:B1:3F:54:AA:AD:A0:DA:81:04:F4:D1:4B:AF:E4:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/0190728d-5c83-381d-9de9-868e4c22e3d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.crl

            X509v3 Authority Key Identifier:
                keyid:9D:28:82:CC:E4:C3:26:39:6C:08:9D:EC:65:18:25:0E:46:87:B8:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f494:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:af:74:c3:4a:66:08:8b:30:60:44:ac:b7:e6:21:25:47:cf:
         5a:a4:82:f4:b5:58:3a:b2:a6:1c:8e:d6:97:f1:8e:96:80:8e:
         27:05:1d:17:ba:6e:a7:b5:25:be:12:9c:5d:35:79:fb:75:94:
         0a:bb:97:d4:4f:e3:4e:77:a2:11:ee:db:94:df:98:8d:80:3a:
         5d:8d:ef:c5:05:d0:0f:6c:3d:9b:7c:28:51:75:f4:25:a9:2d:
         dc:51:74:d9:31:1b:7c:2f:d1:e9:8b:e3:46:8e:a3:68:85:e6:
         e2:44:3a:76:b7:7d:79:19:bf:4c:eb:39:b7:53:e5:cd:f8:ee:
         9c:e5:5f:54:ea:df:7a:eb:42:c4:a2:07:81:24:26:13:90:a7:
         4e:a0:11:91:52:70:88:60:af:37:09:c1:0e:41:b5:34:9d:ac:
         b7:fc:b4:6e:bb:28:0d:0b:70:47:6e:e9:7c:b1:ff:82:7b:c5:
         c0:a4:ce:b5:98:7d:ea:5a:5a:cd:f9:f8:26:51:17:4e:d4:39:
         a0:3c:bc:18:24:eb:77:b4:aa:28:ae:9c:5e:07:95:40:89:c1:
         d3:58:89:06:fe:f0:b3:35:0d:4d:2f:71:48:67:b9:b6:88:e4:
         24:db:94:fc:20:9e:ad:75:93:c2:93:bb:71:62:d0:16:6d:a2:
         1c:9a:1d:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9PB/kNJfZIVKghRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM4MWNiZDYtZDExMy00YWU1LTgwNWEtYWEzZTE2MDFj
ZjQ5MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
NGNkM2FhODgtYjAwMC00YTk4LWI1ODAtODMzNGMwMDU0MDJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ho+PUflLm62u3utB7a6B2a5x3xyFp4/WaHd
eAg/dcXYHn1urLyqOwVyCpd5xezUd2DHHoali/ReOOvh4EbCzHNfNssDpGwtTGTE
rJk1Amgr8aTi2J8JDJbfiBiK7tVNx1asrQP8HnphgeJENr6nexs3IvpBcRBgKGjR
ISyr+ExpHi2EqVg9SbR994rYznkA3Vc8EWMFrKjVHqyagQ4BdXz1IcGE1/je7aaX
A07J3tdn8yY+EQ72ZUjPxOLnASt2rEM9l+Umv4yMansloH4Su59ekh4W/bbfTeEL
qWKiz7TnEkYXsbHY5lEUd70ZsrxpNCIPgCh7pQQ7N10TadnojwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLdkGj+isT9Uqq2g2oEE9NFLr+S0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lMzgx
Y2JkNi1kMTEzLTRhZTUtODA1YS1hYTNlMTYwMWNmNDkvMDE5MDcyOGQtNWM4My0z
ODFkLTlkZTktODY4ZTRjMjJlM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZTM4MWNiZDYtZDExMy00YWU1LTgw
NWEtYWEzZTE2MDFjZjQ5L2UzODFjYmQ2LWQxMTMtNGFlNS04MDVhLWFhM2UxNjAx
Y2Y0OS5jcmwwHwYDVR0jBBgwFoAUnSiCzOTDJjlsCJ3sZRglDkaHuAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9lMzgxY2JkNi1kMTEzLTRhZTUtODA1YS1hYTNl
MTYwMWNmNDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL0lAAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFGvdMNKZgiLMGBErLfmISVHz1qkgvS1WDqyphyO1pfxjpaAjicF
HRe6bqe1Jb4SnF01eft1lAq7l9RP4053ohHu25TfmI2AOl2N78UF0A9sPZt8KFF1
9CWpLdxRdNkxG3wv0emL40aOo2iF5uJEOna3fXkZv0zrObdT5c347pzlX1Tq33rr
QsSiB4EkJhOQp06gEZFScIhgrzcJwQ5BtTSdrLf8tG67KA0LcEdu6Xyx/4J7xcCk
zrWYfepaWs35+CZRF07UOaA8vBgk63e0qiiunF4HlUCJwdNYiQb+8LM1DU0vcUhn
ubaI5CTblPwgnq11k8KTu3Fi0BZtohyaHTM=
-----END CERTIFICATE-----
Generated at Thu Oct 22 05:54:05 2026 by rpki-client