Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/1134b1f1-ce05-33cb-9558-8520799e6464.roa
File:                     1134b1f1-ce05-33cb-9558-8520799e6464.roa (raw, json)
Hash identifier:          vyAJWYxg2rcXpdt5BzgTNA4EWhXajByObjs2dLELITQ=
Subject key identifier:   2B:C6:66:C2:7F:33:99:68:3D:6D:31:21:95:22:78:BD:00:72:C7:67
Certificate issuer:       /CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8
Certificate serial:       010D0C9F4328584EFC2E6B9FBC724F50BD6F2EC0
Authority key identifier: 84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/1134b1f1-ce05-33cb-9558-8520799e6464.roa
Signing time:             Fri 28 Aug 2026 08:45:45 +0000
ROA not before:           Fri 28 Aug 2026 08:45:45 +0000
ROA not after:            Thu 26 Nov 2026 09:45:45 +0000
asID:                     49592
IP address blocks:        2602:fa0a:50::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:2e:6b:9f:bc:72:4f:50:bd:6f:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8
        Validity
            Not Before: Aug 28 08:45:45 2026 GMT
            Not After : Nov 26 09:45:45 2026 GMT
        Subject: CN=ef3761dd-78cd-4e93-929c-02ada9b3ac7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:bb:35:ca:51:75:6e:4a:d7:1a:b4:34:c1:
                    a8:30:55:85:8e:b3:df:56:bc:84:2e:a0:b3:1f:bd:
                    96:79:ac:bd:2d:e8:27:56:79:23:42:33:8f:11:a7:
                    e6:59:79:da:66:c5:01:e3:e6:15:c0:bb:09:d3:d9:
                    24:33:8f:ec:30:76:78:b1:29:c1:0c:20:ce:07:21:
                    5e:f4:23:41:54:fb:1c:12:6c:7f:5f:9a:1f:c9:05:
                    d0:d6:4e:0c:65:ee:54:64:e7:64:37:1c:3b:b9:9e:
                    85:e1:7d:a0:8a:1e:e6:77:c3:b8:05:06:3c:92:88:
                    4e:ec:72:01:88:81:e2:5c:28:bb:53:34:4e:30:62:
                    34:4a:c4:85:30:b7:78:c0:d3:c7:e5:ed:d4:58:6e:
                    c2:ec:88:23:2d:6b:d7:1a:d3:2f:6e:1a:6b:f3:69:
                    51:41:3a:18:0d:cf:83:cf:01:41:89:67:0f:51:b9:
                    b3:9c:5c:38:52:42:1a:12:8c:bb:82:b2:6b:c8:20:
                    1c:07:f2:91:90:2c:e5:10:17:08:c2:cd:ea:f1:30:
                    d3:4d:a0:0f:92:18:a5:c3:fd:54:55:15:1b:ec:da:
                    f3:f0:8f:8e:42:40:4e:52:f4:e1:05:e7:ae:a5:30:
                    3d:76:a8:29:3c:c1:38:e9:bb:05:24:79:52:7d:25:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C6:66:C2:7F:33:99:68:3D:6D:31:21:95:22:78:BD:00:72:C7:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/1134b1f1-ce05-33cb-9558-8520799e6464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl

            X509v3 Authority Key Identifier:
                keyid:84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa0a:50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2f:8d:25:f0:c0:32:19:f8:6a:d4:6a:a3:5a:e3:5e:17:4c:
         69:20:fe:a5:ab:27:fb:58:9e:07:98:91:9a:11:b3:1e:bc:78:
         70:fe:37:a3:df:38:06:f4:f5:a3:fc:ab:99:ae:ec:66:ac:38:
         80:39:bb:9e:cc:82:07:5d:d8:1e:29:c6:d1:65:54:93:2a:37:
         a8:bb:9b:d5:aa:a1:e2:0d:b1:2a:e2:da:ca:35:52:ef:d8:cc:
         71:3f:d9:c6:e4:64:63:80:1c:ab:f3:d3:4e:cc:10:23:58:b2:
         ab:ea:cc:f7:2a:df:f5:23:23:ec:f1:1c:02:1e:27:3d:46:15:
         75:ff:9e:cb:16:6d:e8:74:59:87:58:e8:3c:49:16:72:43:99:
         29:2e:e0:51:05:b2:38:e1:e5:d3:17:b2:3d:a6:0c:85:0a:aa:
         10:bb:58:ae:3e:9a:f0:fa:ab:11:ad:73:43:9f:1a:f9:3e:87:
         bd:36:73:da:43:52:d9:4c:00:54:27:48:3e:64:48:c0:c3:d2:
         c7:92:e0:8d:5a:e8:b0:a9:df:95:57:af:e0:b1:75:0b:1c:6e:
         b8:a0:30:88:98:96:6a:21:a8:e3:b5:93:bc:e2:a8:69:26:81:
         49:59:1c:6b:77:3c:ab:0d:f3:75:ad:21:ee:c3:2a:20:75:03:
         57:7f:f3:3f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE78LmufvHJPUL1vLsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWU1YjEzYjAtYTk5NC00ODVmLWFkY2EtYTJlYTI3ZmM5
ZGU4MB4XDTI2MDgyODA4NDU0NVoXDTI2MTEyNjA5NDU0NVowLzEtMCsGA1UEAxMk
ZWYzNzYxZGQtNzhjZC00ZTkzLTkyOWMtMDJhZGE5YjNhYzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYK7NcpRdW5K1xq0NMGoMFWFjrPfVryELqCz
H72Weay9LegnVnkjQjOPEafmWXnaZsUB4+YVwLsJ09kkM4/sMHZ4sSnBDCDOByFe
9CNBVPscEmx/X5ofyQXQ1k4MZe5UZOdkNxw7uZ6F4X2gih7md8O4BQY8kohO7HIB
iIHiXCi7UzROMGI0SsSFMLd4wNPH5e3UWG7C7IgjLWvXGtMvbhpr82lRQToYDc+D
zwFBiWcPUbmznFw4UkIaEoy7grJryCAcB/KRkCzlEBcIws3q8TDTTaAPkhilw/1U
VRUb7Nrz8I+OQkBOUvThBeeupTA9dqgpPME46bsFJHlSfSWyaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCvGZsJ/M5loPW0xIZUieL0AcsdnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZTVi
MTNiMC1hOTk0LTQ4NWYtYWRjYS1hMmVhMjdmYzlkZTgvMTEzNGIxZjEtY2UwNS0z
M2NiLTk1NTgtODUyMDc5OWU2NDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWU1YjEzYjAtYTk5NC00ODVmLWFk
Y2EtYTJlYTI3ZmM5ZGU4LzllNWIxM2IwLWE5OTQtNDg1Zi1hZGNhLWEyZWEyN2Zj
OWRlOC5jcmwwHwYDVR0jBBgwFoAUhDSp8l1Fz4TB6iFuF+Mg2Er7APswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85ZTViMTNiMC1hOTk0LTQ4NWYtYWRjYS1hMmVh
MjdmYzlkZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6CgBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH0vjSXwwDIZ+GrUaqNa414XTGkg/qWrJ/tYngeYkZoRsx68eHD+
N6PfOAb09aP8q5mu7GasOIA5u57Mggdd2B4pxtFlVJMqN6i7m9WqoeINsSri2so1
Uu/YzHE/2cbkZGOAHKvz007MECNYsqvqzPcq3/UjI+zxHAIeJz1GFXX/nssWbeh0
WYdY6DxJFnJDmSku4FEFsjjh5dMXsj2mDIUKqhC7WK4+mvD6qxGtc0OfGvk+h702
c9pDUtlMAFQnSD5kSMDD0seS4I1a6LCp35VXr+CxdQscbrigMIiYlmohqOO1k7zi
qGkmgUlZHGt3PKsN83WtIe7DKiB1A1d/8z8=
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:11:44 2026 by rpki-client