Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/615170f0-6374-35a3-9f46-b8b1811c3add.roa
File:                     615170f0-6374-35a3-9f46-b8b1811c3add.roa (raw, json)
Hash identifier:          63Yj0E+IJoVXvyHGTR7eWb5qr69w3ceAFztEIMbD2xQ=
Subject key identifier:   69:E6:9F:BC:41:7B:01:F5:09:80:1A:B3:BD:AB:BC:1D:8B:9B:4E:C8
Certificate issuer:       /CN=d3f6e139-58be-4d6a-b3c6-398860ef8f16
Certificate serial:       010D0C9F4328584EC20C7104560AA61369DB4A00
Authority key identifier: 1C:8E:2A:B4:36:07:53:B3:D0:76:05:F2:A9:52:2B:31:EC:31:73:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/615170f0-6374-35a3-9f46-b8b1811c3add.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     19700
IP address blocks:        2602:f9d1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/d3f6e139-58be-4d6a-b3c6-398860ef8f16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/d3f6e139-58be-4d6a-b3c6-398860ef8f16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:71:04:56:0a:a6:13:69:db:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f6e139-58be-4d6a-b3c6-398860ef8f16
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=8fa0fb77-73e5-4c23-a7b8-904618f0c56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1d:f1:a6:a0:64:67:c0:7f:b4:05:2f:a3:9d:
                    c1:d4:42:d7:2a:0b:e3:e0:13:01:fe:ec:1d:03:a6:
                    ee:16:7a:a1:b2:42:fa:d7:80:c0:3b:45:f9:d1:70:
                    d8:f7:06:3f:d0:04:ff:bc:95:08:30:e2:92:23:8e:
                    2d:5d:ec:42:ab:55:3f:1c:10:2e:cd:fc:89:f1:1f:
                    54:54:8a:4c:5d:cc:9d:e5:76:04:4c:97:20:7b:e2:
                    fe:83:21:5a:94:13:68:cc:4d:4b:5d:17:c8:08:c6:
                    eb:bf:72:49:e4:a1:42:a4:df:b9:da:86:59:45:6c:
                    dc:45:e8:f2:80:c9:61:17:8f:bf:18:b1:16:60:a3:
                    3d:2e:c7:50:32:56:cd:57:82:e5:f0:ef:ea:c9:6a:
                    f7:36:d2:9e:60:d6:d9:c8:73:fa:c1:6f:57:62:50:
                    e1:a1:96:c2:eb:9a:a9:29:0d:a4:88:75:d4:cd:54:
                    76:2f:70:bb:3d:f8:48:e7:34:55:b9:1a:12:75:11:
                    f6:4b:7a:2b:d3:46:6f:45:4c:2d:86:b0:e9:5d:3c:
                    0c:13:40:71:1c:2a:f9:89:fd:8b:1f:62:2b:41:f6:
                    6c:fa:36:26:52:a4:2a:65:02:6c:58:35:2b:9a:c5:
                    53:1f:45:de:fa:58:cb:96:8c:0e:88:ab:16:9f:f8:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E6:9F:BC:41:7B:01:F5:09:80:1A:B3:BD:AB:BC:1D:8B:9B:4E:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/615170f0-6374-35a3-9f46-b8b1811c3add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/d3f6e139-58be-4d6a-b3c6-398860ef8f16.crl

            X509v3 Authority Key Identifier:
                keyid:1C:8E:2A:B4:36:07:53:B3:D0:76:05:F2:A9:52:2B:31:EC:31:73:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a2:45:bd:1f:4f:93:25:eb:1f:89:8d:4f:17:19:85:f1:f1:
         4b:f1:55:6e:7a:ba:36:fa:b3:7d:2a:1b:99:03:bf:a3:1e:5c:
         62:b4:2e:5b:dd:f5:a1:88:7c:73:25:0f:82:b3:6b:32:9f:99:
         a0:11:90:da:28:4e:61:4e:95:90:9a:da:7d:45:eb:f5:c8:cd:
         8d:23:f8:18:d3:52:fa:be:db:10:51:40:8b:5a:0e:69:4b:44:
         6c:86:ee:da:ee:4e:2d:6b:6e:eb:a4:51:41:b9:dd:eb:71:f4:
         04:de:ff:0c:ad:79:35:24:5d:0c:d7:56:48:f1:e0:84:9b:9e:
         f7:14:f3:2a:2d:a4:ad:75:99:41:cf:e0:1d:02:04:ef:10:71:
         51:a8:ef:32:bf:24:5d:ae:bc:39:bc:fe:e9:b3:9f:b4:36:02:
         94:5c:aa:7f:0a:1b:0f:70:27:15:c2:00:a9:29:32:e6:64:89:
         8b:ed:11:53:2b:a6:86:d1:8a:87:ec:55:19:ed:98:a4:20:cb:
         81:47:b9:cb:67:4f:83:e9:cd:01:c5:a3:27:37:e4:32:21:83:
         be:05:82:3d:2a:f9:f8:45:83:46:f9:f5:6f:6b:dc:35:2d:e5:
         cd:ff:2d:0a:63:ec:ed:6b:11:84:9b:2b:ec:e1:4c:f0:85:96:
         d3:cf:c1:7e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7CDHEEVgqmE2nbSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDNmNmUxMzktNThiZS00ZDZhLWIzYzYtMzk4ODYwZWY4
ZjE2MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
OGZhMGZiNzctNzNlNS00YzIzLWE3YjgtOTA0NjE4ZjBjNTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB3xpqBkZ8B/tAUvo53B1ELXKgvj4BMB/uwd
A6buFnqhskL614DAO0X50XDY9wY/0AT/vJUIMOKSI44tXexCq1U/HBAuzfyJ8R9U
VIpMXcyd5XYETJcge+L+gyFalBNozE1LXRfICMbrv3JJ5KFCpN+52oZZRWzcRejy
gMlhF4+/GLEWYKM9LsdQMlbNV4Ll8O/qyWr3NtKeYNbZyHP6wW9XYlDhoZbC65qp
KQ2kiHXUzVR2L3C7PfhI5zRVuRoSdRH2S3or00ZvRUwthrDpXTwME0BxHCr5if2L
H2IrQfZs+jYmUqQqZQJsWDUrmsVTH0Xe+ljLlowOiKsWn/gMGwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGnmn7xBewH1CYAas72rvB2Lm07IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kM2Y2
ZTEzOS01OGJlLTRkNmEtYjNjNi0zOTg4NjBlZjhmMTYvNjE1MTcwZjAtNjM3NC0z
NWEzLTlmNDYtYjhiMTgxMWMzYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDNmNmUxMzktNThiZS00ZDZhLWIz
YzYtMzk4ODYwZWY4ZjE2L2QzZjZlMTM5LTU4YmUtNGQ2YS1iM2M2LTM5ODg2MGVm
OGYxNi5jcmwwHwYDVR0jBBgwFoAUHI4qtDYHU7PQdgXyqVIrMewxc34wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kM2Y2ZTEzOS01OGJlLTRkNmEtYjNjNi0zOTg4
NjBlZjhmMTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL50QAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAc6JFvR9PkyXrH4mNTxcZhfHxS/FVbnq6NvqzfSobmQO/ox5cYrQu
W931oYh8cyUPgrNrMp+ZoBGQ2ihOYU6VkJrafUXr9cjNjSP4GNNS+r7bEFFAi1oO
aUtEbIbu2u5OLWtu66RRQbnd63H0BN7/DK15NSRdDNdWSPHghJue9xTzKi2krXWZ
Qc/gHQIE7xBxUajvMr8kXa68Obz+6bOftDYClFyqfwobD3AnFcIAqSky5mSJi+0R
UyumhtGKh+xVGe2YpCDLgUe5y2dPg+nNAcWjJzfkMiGDvgWCPSr5+EWDRvn1b2vc
NS3lzf8tCmPs7WsRhJsr7OFM8IWW08/Bfg==
-----END CERTIFICATE-----
Generated at Thu Sep 17 14:57:06 2026 by rpki-client