Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/fd2bc698-ed35-3048-a5b2-88a08f7584a2.roa
File:                     fd2bc698-ed35-3048-a5b2-88a08f7584a2.roa (raw, json)
Hash identifier:          uGZx2xA5Ha1amCbJc3HTK75NWaemIDSRW8jdqtWIUWg=
Subject key identifier:   B8:A7:A7:E3:E7:00:DB:40:6F:8F:3B:8E:F5:1C:F9:9F:AD:76:0A:F3
Certificate issuer:       /CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
Certificate serial:       010D0C9F4328584F11A1402E3E3F49B2D49E0A80
Authority key identifier: FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/fd2bc698-ed35-3048-a5b2-88a08f7584a2.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2607:8d40:f40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:40:2e:3e:3f:49:b2:d4:9e:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=f9106e80-fe8d-491d-8d4d-c3416227f3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:80:5e:c8:47:b7:7c:83:0e:84:fe:69:a5:
                    e9:b9:07:58:ce:50:5d:99:f3:ee:0f:b1:06:d6:82:
                    96:f2:11:9f:50:15:91:75:64:74:ff:3c:b7:a4:ce:
                    14:80:77:e6:de:ea:ca:2f:4d:5c:af:ed:3c:ce:ce:
                    5c:f1:11:24:45:f1:f0:9b:f7:07:26:42:e4:ee:94:
                    14:06:94:57:ee:33:a7:07:1b:d5:a0:89:d8:4d:ff:
                    50:4e:30:77:47:45:99:3f:db:2c:13:87:4a:b5:cd:
                    9a:4f:02:5f:48:fd:8d:e1:89:e5:9f:84:32:2e:4e:
                    2e:7d:d9:2b:aa:8f:ef:3c:5d:a7:ee:38:74:b1:25:
                    eb:02:f3:b4:be:cc:85:f2:b7:04:b7:39:6c:a1:9c:
                    c8:ca:a3:5c:57:3a:a0:bb:41:ad:c5:a6:76:99:ca:
                    54:c8:3e:6f:19:3f:ce:36:9f:50:18:74:ef:b9:2b:
                    7d:12:be:40:95:6b:39:b9:13:e6:a5:7a:54:41:0c:
                    8f:03:63:57:fa:7e:8b:84:fa:77:ef:4b:e1:ea:03:
                    13:fe:83:3d:bd:68:a9:21:10:2c:68:25:6c:88:94:
                    47:90:1d:38:8b:8e:b5:35:bf:48:93:d0:cb:a6:99:
                    72:c0:90:f0:0c:07:d2:f6:7f:ef:48:22:02:b2:b3:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A7:A7:E3:E7:00:DB:40:6F:8F:3B:8E:F5:1C:F9:9F:AD:76:0A:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/fd2bc698-ed35-3048-a5b2-88a08f7584a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8d40:f40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f1:f1:83:e4:45:27:1d:95:85:1e:ff:d0:ca:e5:6c:0f:57:
         98:4f:68:75:73:a8:f4:af:1b:69:a3:49:ab:43:94:0b:56:ec:
         e5:7e:2d:a8:0d:eb:f4:26:d2:d3:ce:94:64:4e:84:39:2f:3a:
         6a:c3:4d:b5:f3:20:67:22:67:0d:b8:97:d9:dd:a1:2b:b7:30:
         0f:15:d7:3c:f9:70:b8:e7:f6:6c:ee:fc:95:d7:74:c7:b3:ff:
         9c:9e:4e:9e:fc:e8:ae:7d:2f:20:e6:92:e3:6a:61:6b:d4:e0:
         93:20:e6:81:6d:43:07:46:ba:d0:44:1d:c1:2d:4b:60:34:97:
         fb:8c:9f:10:b3:43:c1:62:99:24:94:f7:f3:a0:62:d8:eb:63:
         13:59:84:93:a7:41:73:b2:d5:2a:21:f9:1f:a0:1c:a9:6e:44:
         fb:ba:d0:74:23:93:86:81:80:83:d7:b7:2f:e3:f6:f8:88:5c:
         7a:12:5b:ba:05:a1:16:2f:c8:fd:fc:80:9f:47:22:ee:b6:9e:
         31:d7:8d:a9:0f:2f:d1:e6:89:ae:f7:15:32:88:db:fd:06:15:
         f4:ab:d6:2d:a8:ba:c9:dd:e2:0c:45:fc:6c:bf:6a:2e:5b:57:
         be:5b:c3:09:00:82:f9:25:fc:1d:3a:f1:2b:08:80:c7:d9:40:
         ed:8e:42:12
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RoUAuPj9JstSeCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRlMmQ1YWEtNTYwMC00ZTBjLTk1MjUtMjQxODdjMGVh
NjZiMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjkxMDZlODAtZmU4ZC00OTFkLThkNGQtYzM0MTYyMjdmM2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fiAXshHt3yDDoT+aaXpuQdYzlBdmfPuD7EG
1oKW8hGfUBWRdWR0/zy3pM4UgHfm3urKL01cr+08zs5c8REkRfHwm/cHJkLk7pQU
BpRX7jOnBxvVoInYTf9QTjB3R0WZP9ssE4dKtc2aTwJfSP2N4Ynln4QyLk4ufdkr
qo/vPF2n7jh0sSXrAvO0vsyF8rcEtzlsoZzIyqNcVzqgu0GtxaZ2mcpUyD5vGT/O
Np9QGHTvuSt9Er5AlWs5uRPmpXpUQQyPA2NX+n6LhPp370vh6gMT/oM9vWipIRAs
aCVsiJRHkB04i461Nb9Ik9DLpplywJDwDAfS9n/vSCICsrNcQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLinp+PnANtAb487jvUc+Z+tdgrzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZGUy
ZDVhYS01NjAwLTRlMGMtOTUyNS0yNDE4N2MwZWE2NmIvZmQyYmM2OTgtZWQzNS0z
MDQ4LWE1YjItODhhMDhmNzU4NGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWRlMmQ1YWEtNTYwMC00ZTBjLTk1
MjUtMjQxODdjMGVhNjZiL2FkZTJkNWFhLTU2MDAtNGUwYy05NTI1LTI0MTg3YzBl
YTY2Yi5jcmwwHwYDVR0jBBgwFoAU+59lZmjkjRtkcXXXPwUAuz7UHZcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZGUyZDVhYS01NjAwLTRlMGMtOTUyNS0yNDE4
N2MwZWE2NmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeNQA9A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHzx8YPkRScdlYUe/9DK5WwPV5hPaHVzqPSvG2mjSatDlAtW7OV+
LagN6/Qm0tPOlGROhDkvOmrDTbXzIGciZw24l9ndoSu3MA8V1zz5cLjn9mzu/JXX
dMez/5yeTp786K59LyDmkuNqYWvU4JMg5oFtQwdGutBEHcEtS2A0l/uMnxCzQ8Fi
mSSU9/OgYtjrYxNZhJOnQXOy1Soh+R+gHKluRPu60HQjk4aBgIPXty/j9viIXHoS
W7oFoRYvyP38gJ9HIu62njHXjakPL9Hmia73FTKI2/0GFfSr1i2ousnd4gxF/Gy/
ai5bV75bwwkAgvkl/B068SsIgMfZQO2OQhI=
-----END CERTIFICATE-----
Generated at Sat Sep 19 11:46:42 2026 by rpki-client