Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/bc83aa8b-d3d6-3656-8b2b-e5a4cac2b67a.roa
File:                     bc83aa8b-d3d6-3656-8b2b-e5a4cac2b67a.roa (raw, json)
Hash identifier:          egaR8IhQ3YvRuzAs0ylnHMV6suAp6X4mflxZYl4zjW4=
Subject key identifier:   46:D3:64:73:A6:E9:64:2F:AF:CA:CD:A7:22:54:51:2C:66:B3:7A:58
Certificate issuer:       /CN=2b03a19b-4a04-4de7-a6cb-c014680895df
Certificate serial:       010D0C9F4328584F7FE2E3B9547A257F31F80100
Authority key identifier: 0F:8E:82:FE:86:87:B6:55:31:89:58:EA:25:08:9B:9A:A7:D8:57:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/bc83aa8b-d3d6-3656-8b2b-e5a4cac2b67a.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     19382
IP address blocks:        2602:81b:6001::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/2b03a19b-4a04-4de7-a6cb-c014680895df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/2b03a19b-4a04-4de7-a6cb-c014680895df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:e3:b9:54:7a:25:7f:31:f8:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b03a19b-4a04-4de7-a6cb-c014680895df
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=9e5cd8cf-712a-4e0f-a3af-26a84107053f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:68:4b:9e:12:7b:fd:22:86:c1:71:3b:cd:
                    ee:8c:82:a4:79:92:fe:39:d1:0d:d5:2e:62:25:1a:
                    26:35:81:d9:b0:39:87:16:9c:0b:ca:68:2d:67:ef:
                    11:b3:ec:72:67:46:c5:46:6e:54:ed:5e:46:47:e1:
                    6f:58:e8:54:c5:71:e2:a6:7a:39:46:8c:15:89:24:
                    ff:be:e9:ac:d0:21:b1:f1:c3:d3:46:56:10:47:fc:
                    78:aa:ad:2c:26:b1:44:aa:b8:8f:49:e2:46:2c:35:
                    7c:a3:c1:c8:43:34:50:39:ad:29:b4:8a:77:c3:1c:
                    a3:f7:0e:76:6f:db:b3:04:34:98:11:cc:92:67:3f:
                    ef:7e:44:ba:d7:95:22:6f:fb:6a:99:e4:a7:9d:a7:
                    20:dc:e5:55:9c:dd:c2:59:8f:a5:37:7d:1f:ee:45:
                    e5:4d:4e:8b:83:02:c8:0d:f3:a6:ab:81:44:c9:ef:
                    4c:8b:cf:a7:29:7a:9b:db:74:64:8e:5e:44:bb:75:
                    ba:1d:2b:e3:8e:9c:3c:98:97:1f:6a:17:78:1d:91:
                    e5:56:02:77:53:4a:db:9c:01:05:2f:77:46:0e:23:
                    dd:52:c8:28:27:7a:d2:0b:64:93:a4:86:16:9c:74:
                    6d:97:05:72:24:d7:d8:ec:0e:14:4f:2e:28:0e:d7:
                    8d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D3:64:73:A6:E9:64:2F:AF:CA:CD:A7:22:54:51:2C:66:B3:7A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/bc83aa8b-d3d6-3656-8b2b-e5a4cac2b67a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/2b03a19b-4a04-4de7-a6cb-c014680895df.crl

            X509v3 Authority Key Identifier:
                keyid:0F:8E:82:FE:86:87:B6:55:31:89:58:EA:25:08:9B:9A:A7:D8:57:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81b:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:58:f0:52:70:3f:ad:fc:45:03:bd:b5:00:83:70:fb:01:75:
         b4:7e:19:35:f2:64:67:90:7a:ac:4c:54:88:6a:30:0a:f8:70:
         2b:94:7f:82:af:69:de:e8:bb:09:7c:86:6a:a7:55:74:2f:6f:
         a0:bb:54:58:e0:7b:ec:ab:67:c0:ca:90:25:4d:8c:fc:60:00:
         39:dc:6e:f4:57:d5:95:07:3e:a0:ba:11:24:33:e8:e5:45:86:
         bb:b2:44:d3:7e:e1:ac:87:fe:ec:b4:d4:04:5c:3a:a7:a9:0b:
         f8:90:da:7d:16:5a:ec:81:9b:1c:b7:fa:60:5d:2b:aa:84:ed:
         d2:6e:33:4f:9a:25:a8:03:9e:b7:b5:9c:30:a8:8d:16:2a:51:
         2f:61:69:3d:e6:65:df:13:c6:aa:69:fd:8e:65:32:28:cb:6a:
         07:f9:e1:5b:3f:4d:a8:c5:55:ab:75:71:d3:be:45:ef:f3:98:
         56:2c:ac:44:fb:3b:7b:e2:5b:c0:47:d9:ef:a0:ca:6d:0a:a3:
         44:94:95:1e:c9:ec:30:c3:b0:63:61:57:e2:96:75:fe:93:4d:
         c7:39:34:5d:7a:2f:b5:09:c7:ca:35:2e:d8:7e:2e:45:5c:07:
         37:a3:d2:88:5b:ca:87:0b:f3:df:5c:c1:64:78:a6:87:1c:79:
         c6:97:4f:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9/4uO5VHolfzH4AQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmIwM2ExOWItNGEwNC00ZGU3LWE2Y2ItYzAxNDY4MDg5
NWRmMB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk
OWU1Y2Q4Y2YtNzEyYS00ZTBmLWEzYWYtMjZhODQxMDcwNTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLZoS54Se/0ihsFxO83ujIKkeZL+OdEN1S5i
JRomNYHZsDmHFpwLymgtZ+8Rs+xyZ0bFRm5U7V5GR+FvWOhUxXHipno5RowViST/
vums0CGx8cPTRlYQR/x4qq0sJrFEqriPSeJGLDV8o8HIQzRQOa0ptIp3wxyj9w52
b9uzBDSYEcySZz/vfkS615Uib/tqmeSnnacg3OVVnN3CWY+lN30f7kXlTU6LgwLI
DfOmq4FEye9Mi8+nKXqb23Rkjl5Eu3W6HSvjjpw8mJcfahd4HZHlVgJ3U0rbnAEF
L3dGDiPdUsgoJ3rSC2STpIYWnHRtlwVyJNfY7A4UTy4oDteNnwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEbTZHOm6WQvr8rNpyJUUSxms3pYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYjAz
YTE5Yi00YTA0LTRkZTctYTZjYi1jMDE0NjgwODk1ZGYvYmM4M2FhOGItZDNkNi0z
NjU2LThiMmItZTVhNGNhYzJiNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmIwM2ExOWItNGEwNC00ZGU3LWE2
Y2ItYzAxNDY4MDg5NWRmLzJiMDNhMTliLTRhMDQtNGRlNy1hNmNiLWMwMTQ2ODA4
OTVkZi5jcmwwHwYDVR0jBBgwFoAUD46C/oaHtlUxiVjqJQibmqfYV44wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYjAzYTE5Yi00YTA0LTRkZTctYTZjYi1jMDE0
NjgwODk1ZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIG2AB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFJY8FJwP638RQO9tQCDcPsBdbR+GTXyZGeQeqxMVIhqMAr4cCuU
f4Kvad7ouwl8hmqnVXQvb6C7VFjge+yrZ8DKkCVNjPxgADncbvRX1ZUHPqC6ESQz
6OVFhruyRNN+4ayH/uy01ARcOqepC/iQ2n0WWuyBmxy3+mBdK6qE7dJuM0+aJagD
nre1nDCojRYqUS9haT3mZd8Txqpp/Y5lMijLagf54Vs/TajFVat1cdO+Re/zmFYs
rET7O3viW8BH2e+gym0Ko0SUlR7J7DDDsGNhV+KWdf6TTcc5NF16L7UJx8o1Lth+
LkVcBzej0ohbyocL899cwWR4poccecaXT4Y=
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:20:12 2026 by rpki-client