Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/bf7ea552-db98-377d-8cc3-9a06a9e6ca01.roa
File:                     bf7ea552-db98-377d-8cc3-9a06a9e6ca01.roa (raw, json)
Hash identifier:          w5XOt39/jkrCTdKsMfJcokf2zNRgT+jXrFOTRp3O2tw=
Subject key identifier:   8C:FA:B5:D7:DB:56:CB:0C:EA:14:E7:89:D8:4E:E8:16:6D:2B:C6:7A
Certificate issuer:       /CN=9eed61a4-093d-432f-9466-2001995b9535
Certificate serial:       010D0C9F4328584F38B27634C7250AB698C17900
Authority key identifier: AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/bf7ea552-db98-377d-8cc3-9a06a9e6ca01.roa
Signing time:             Sat 19 Sep 2026 01:00:12 +0000
ROA not before:           Sat 19 Sep 2026 01:00:12 +0000
ROA not after:            Fri 18 Dec 2026 02:00:12 +0000
asID:                     30307
IP address blocks:        2602:f9b1:20::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:38:b2:76:34:c7:25:0a:b6:98:c1:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eed61a4-093d-432f-9466-2001995b9535
        Validity
            Not Before: Sep 19 01:00:12 2026 GMT
            Not After : Dec 18 02:00:12 2026 GMT
        Subject: CN=d9b2ebe2-6145-494f-bff2-3e50173eeb73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:d0:82:fb:ee:d5:a8:c8:40:e2:c0:05:79:
                    62:33:bf:a3:14:5d:53:9c:e5:0f:53:f6:e4:4a:88:
                    93:19:99:45:fb:75:cb:1d:cb:03:b4:4b:94:62:c1:
                    3a:66:af:6a:69:49:b1:d7:ed:e3:59:e7:18:db:83:
                    d9:59:a4:b7:8d:82:ee:fd:b5:c3:a9:dd:10:bd:8f:
                    93:b0:e0:08:74:ef:33:88:96:cc:a1:e6:cb:59:4b:
                    00:4e:11:e7:4d:3f:c9:9f:77:c2:95:c1:bd:a1:d5:
                    ea:0f:05:6b:35:e1:2d:46:5b:f8:90:fb:8f:52:52:
                    e3:46:fe:b5:17:35:e5:09:6e:bf:e8:89:60:c8:3b:
                    d7:80:bb:90:13:ed:37:66:c8:1a:3b:53:6f:1b:1f:
                    f0:d6:11:ac:d2:9d:26:bb:75:a7:43:16:fd:d8:4d:
                    62:f0:47:c5:aa:45:1f:12:f2:5a:a5:32:26:25:44:
                    81:4d:51:43:a1:4b:2b:6e:7b:c5:5b:80:53:bb:5f:
                    4d:a3:f2:ed:25:21:18:49:20:fd:a0:93:8c:a9:0b:
                    68:de:02:19:f0:d3:e2:81:3f:57:9a:1c:83:59:ca:
                    ff:3a:f9:30:73:aa:44:29:19:ef:65:f5:28:e2:02:
                    24:f3:eb:b7:9b:80:6d:17:f0:36:db:56:a5:1f:27:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FA:B5:D7:DB:56:CB:0C:EA:14:E7:89:D8:4E:E8:16:6D:2B:C6:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/bf7ea552-db98-377d-8cc3-9a06a9e6ca01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9b1:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:de:5c:3a:01:78:a5:63:5b:ce:f0:99:52:6e:ad:53:7a:ab:
         9e:4d:a9:a7:08:c4:53:4f:53:f9:61:d9:b9:a3:0a:05:88:85:
         af:36:eb:d7:d9:67:ec:d3:d3:d1:76:50:c3:4c:b6:a5:1d:75:
         4c:0e:d5:49:b8:c3:98:90:09:b3:5c:cd:32:1d:e0:cc:0a:aa:
         24:86:9d:92:00:4a:37:a2:71:78:85:9c:43:96:82:ea:81:ff:
         58:6d:05:8d:17:41:e4:d8:86:47:60:70:90:fc:32:dc:35:63:
         ed:5b:5b:87:77:e6:c9:0f:fb:32:8a:4d:65:75:16:fc:a4:fc:
         bb:e0:5b:83:28:b5:73:18:6f:d2:d9:3f:03:70:4a:ca:a6:7a:
         63:7e:bc:ae:43:89:7d:34:31:01:b6:1d:ea:be:0b:73:15:ab:
         79:ac:e2:a9:6c:9a:be:d2:50:95:32:73:29:fb:06:45:ba:d8:
         53:56:b6:b9:ef:51:85:6b:55:2f:dc:19:2f:30:8b:a6:60:1b:
         ce:3f:76:a3:e5:18:b6:53:bc:25:a4:cf:74:b1:66:b6:dc:12:
         d4:bc:79:8c:d5:9e:98:2c:d3:d5:f7:63:4d:42:7c:6d:c9:e0:
         75:f7:d5:15:c5:95:7f:6e:78:a1:ea:0c:a1:e0:a0:55:d3:6b:
         b7:60:d6:9e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE84snY0xyUKtpjBeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVlZDYxYTQtMDkzZC00MzJmLTk0NjYtMjAwMTk5NWI5
NTM1MB4XDTI2MDkxOTAxMDAxMloXDTI2MTIxODAyMDAxMlowLzEtMCsGA1UEAxMk
ZDliMmViZTItNjE0NS00OTRmLWJmZjItM2U1MDE3M2VlYjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreHQgvvu1ajIQOLABXliM7+jFF1TnOUPU/bk
SoiTGZlF+3XLHcsDtEuUYsE6Zq9qaUmx1+3jWecY24PZWaS3jYLu/bXDqd0QvY+T
sOAIdO8ziJbMoebLWUsAThHnTT/Jn3fClcG9odXqDwVrNeEtRlv4kPuPUlLjRv61
FzXlCW6/6IlgyDvXgLuQE+03ZsgaO1NvGx/w1hGs0p0mu3WnQxb92E1i8EfFqkUf
EvJapTImJUSBTVFDoUsrbnvFW4BTu19No/LtJSEYSSD9oJOMqQto3gIZ8NPigT9X
mhyDWcr/Ovkwc6pEKRnvZfUo4gIk8+u3m4BtF/A221alHycAdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIz6tdfbVssM6hTnidhO6BZtK8Z6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZWVk
NjFhNC0wOTNkLTQzMmYtOTQ2Ni0yMDAxOTk1Yjk1MzUvYmY3ZWE1NTItZGI5OC0z
NzdkLThjYzMtOWEwNmE5ZTZjYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWVlZDYxYTQtMDkzZC00MzJmLTk0
NjYtMjAwMTk5NWI5NTM1LzllZWQ2MWE0LTA5M2QtNDMyZi05NDY2LTIwMDE5OTVi
OTUzNS5jcmwwHwYDVR0jBBgwFoAUr/3/Su5DhWgen8et4OPoqaDtqJAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85ZWVkNjFhNC0wOTNkLTQzMmYtOTQ2Ni0yMDAx
OTk1Yjk1MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5sQAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFreXDoBeKVjW87wmVJurVN6q55NqacIxFNPU/lh2bmjCgWIha82
69fZZ+zT09F2UMNMtqUddUwO1Um4w5iQCbNczTId4MwKqiSGnZIASjeicXiFnEOW
guqB/1htBY0XQeTYhkdgcJD8Mtw1Y+1bW4d35skP+zKKTWV1Fvyk/LvgW4MotXMY
b9LZPwNwSsqmemN+vK5DiX00MQG2Heq+C3MVq3ms4qlsmr7SUJUycyn7BkW62FNW
trnvUYVrVS/cGS8wi6ZgG84/dqPlGLZTvCWkz3SxZrbcEtS8eYzVnpgs09X3Y01C
fG3J4HX31RXFlX9ueKHqDKHgoFXTa7dg1p4=
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:14:38 2026 by rpki-client