Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa
File:                     dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa (raw, json)
Hash identifier:          iUN89+tgRhD8GI3T3fFPMfOJMjEqURErLWDIlZFYXR8=
Subject key identifier:   FC:1E:32:82:3D:D4:C2:7E:9B:2C:7F:10:36:C5:52:C6:E3:F4:EE:1F
Certificate issuer:       /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
Certificate serial:       010D0C9F4328584F49740D41DECE96342FE834C0
Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2620:135:7018::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:0d:41:de:ce:96:34:2f:e8:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6d3b9579-2095-4311-9880-6a94ceb29bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3c:35:2e:b3:7a:70:ec:0b:06:0c:17:af:92:
                    64:17:ce:1a:38:60:bc:46:1f:d5:c9:17:76:5a:90:
                    cd:6b:23:7b:4b:d7:cb:c5:58:f0:85:1e:db:c7:c6:
                    73:5b:c4:1c:0d:99:02:3c:cb:7b:b0:61:a2:78:18:
                    3f:88:a0:b1:9a:aa:35:c3:ee:62:c5:ab:f0:69:5d:
                    42:8b:c5:d6:40:8f:79:9c:5c:25:64:eb:99:d4:63:
                    a6:ac:08:5a:17:70:cd:ad:4a:8c:b5:84:87:8c:dc:
                    b9:e2:43:c0:ab:b6:52:a7:15:cd:ad:72:d0:76:a5:
                    73:f5:0a:46:ed:56:c7:20:0d:74:2d:e3:31:7c:67:
                    b6:44:da:32:35:ff:ef:bd:70:d2:a8:68:dd:ff:41:
                    37:f3:25:6b:f3:c4:3c:b8:37:62:80:06:35:08:d1:
                    87:06:26:13:4b:a6:1c:dd:97:43:f0:05:7f:86:15:
                    a7:d4:7b:79:62:0d:ae:a6:43:c9:0e:eb:c1:ac:16:
                    c2:38:79:1d:c2:f7:15:cc:2a:f6:d9:1e:4f:f7:e8:
                    7a:ea:01:0f:b1:b7:40:c3:b1:ef:d8:a6:aa:91:4d:
                    8d:c0:f4:29:1e:2a:65:30:77:1b:68:db:c6:a3:60:
                    eb:70:57:12:91:e3:46:a1:79:85:73:1f:be:45:78:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1E:32:82:3D:D4:C2:7E:9B:2C:7F:10:36:C5:52:C6:E3:F4:EE:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:7018::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d6:a3:60:8b:b4:5b:67:80:6e:56:e7:48:1f:33:46:5e:0e:
         7c:5d:da:27:49:b4:7d:8b:ee:7b:13:a7:12:65:92:10:f4:b8:
         80:14:cf:10:4e:dc:28:84:eb:b1:dd:80:7a:ad:d3:c3:7d:77:
         ab:54:62:bd:d3:ed:ac:bb:09:ef:35:3b:1b:ee:7b:ac:94:4e:
         6b:cf:8f:11:7b:53:10:66:8b:92:e3:33:36:43:49:ec:ab:ae:
         f5:3f:79:cb:32:03:7b:0d:8d:8d:0e:96:8a:a1:e5:f5:dc:26:
         88:07:ca:b9:86:4b:7d:03:a5:e4:da:4c:50:c6:63:f9:f4:40:
         de:e9:9c:09:91:e3:6e:94:4c:44:e2:94:61:ae:ae:cf:84:cc:
         3b:2f:77:61:be:74:b7:f1:bd:9e:b1:65:e6:f1:4c:ff:ab:fa:
         7c:86:25:84:d5:21:7d:e8:30:ef:32:ce:d6:12:60:7a:77:f7:
         f6:bb:7c:7d:df:f4:99:36:2a:bf:7a:17:10:1a:b4:c8:2a:06:
         48:4a:1b:44:c0:50:a1:47:85:2b:51:31:46:0c:f6:0b:75:77:
         3c:16:1e:6c:43:18:4f:75:a1:49:95:66:a4:d7:44:fb:23:40:
         25:2b:cc:ef:57:ec:18:9c:26:1c:95:e9:03:cc:6d:8f:24:78:
         0c:ef:4b:d6
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE9JdA1B3s6WNC/oNMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQxODJhMGQtZDc0NC00NDFiLWE4NTAtZTNmODVhYTNh
YWZiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmQzYjk1NzktMjA5NS00MzExLTk4ODAtNmE5NGNlYjI5YmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDw1LrN6cOwLBgwXr5JkF84aOGC8Rh/VyRd2
WpDNayN7S9fLxVjwhR7bx8ZzW8QcDZkCPMt7sGGieBg/iKCxmqo1w+5ixavwaV1C
i8XWQI95nFwlZOuZ1GOmrAhaF3DNrUqMtYSHjNy54kPAq7ZSpxXNrXLQdqVz9QpG
7VbHIA10LeMxfGe2RNoyNf/vvXDSqGjd/0E38yVr88Q8uDdigAY1CNGHBiYTS6Yc
3ZdD8AV/hhWn1Ht5Yg2upkPJDuvBrBbCOHkdwvcVzCr22R5P9+h66gEPsbdAw7Hv
2KaqkU2NwPQpHiplMHcbaNvGo2DrcFcSkeNGoXmFcx++RXij7QIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFPweMoI91MJ+myx/EDbFUsbj9O4fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4
MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4NWFhM2FhZmIvZGNhNGY2NTEtY2ZmZi0z
Y2FjLThlOWUtNTY5YjdjYTRiYzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQxODJhMGQtZDc0NC00NDFiLWE4
NTAtZTNmODVhYTNhYWZiL2M0MTgyYTBkLWQ3NDQtNDQxYi1hODUwLWUzZjg1YWEz
YWFmYi5jcmwwHwYDVR0jBBgwFoAUK7GR1bTMw7yKfS/LGMgJ/OaZwCIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4
NWFhM2FhZmIuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAJiABNXAY
ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQBj1qNgi7RbZ4BuVudIHzNGXg58XdonSbR9i+57E6cSZZIQ9LiA
FM8QTtwohOux3YB6rdPDfXerVGK90+2suwnvNTsb7nuslE5rz48Re1MQZouS4zM2
Q0nsq671P3nLMgN7DY2NDpaKoeX13CaIB8q5hkt9A6Xk2kxQxmP59EDe6ZwJkeNu
lExE4pRhrq7PhMw7L3dhvnS38b2esWXm8Uz/q/p8hiWE1SF96DDvMs7WEmB6d/f2
u3x93/SZNiq/ehcQGrTIKgZIShtEwFChR4UrUTFGDPYLdXc8Fh5sQxhPdaFJlWak
10T7I0AlK8zvV+wYnCYclekDzG2PJHgM70vW
-----END CERTIFICATE-----
Generated at Wed Oct 7 14:05:08 2026 by rpki-client