Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/72833caf-e3b3-36d4-8edd-3f0b7e9884b2.roa
File:                     72833caf-e3b3-36d4-8edd-3f0b7e9884b2.roa (raw, json)
Hash identifier:          /Qa0+nNmaLXThUlpn2gKAcjMXUPwJQXSjFlkXERPF1s=
Subject key identifier:   B3:DD:50:5A:2F:40:13:11:58:51:ED:D7:B5:34:64:10:9C:07:B3:23
Certificate issuer:       /CN=3d89140c-6425-48b5-94d6-472f38ead8f8
Certificate serial:       010D0C9F4328584ED4325CB7D88885AFE7501B60
Authority key identifier: 68:1F:F9:FE:0D:C3:9C:15:38:00:8F:92:4F:AB:39:5C:CE:5A:81:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/72833caf-e3b3-36d4-8edd-3f0b7e9884b2.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     402611
IP address blocks:        2602:f395::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/3d89140c-6425-48b5-94d6-472f38ead8f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/3d89140c-6425-48b5-94d6-472f38ead8f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:5c:b7:d8:88:85:af:e7:50:1b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d89140c-6425-48b5-94d6-472f38ead8f8
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=ca432141-7a52-4114-bc41-74e073f43943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:2b:be:7b:8c:c7:48:0b:c2:cf:a6:79:2f:
                    71:0a:d5:ca:24:a3:61:9e:12:1a:b5:3f:07:50:89:
                    5f:6c:f8:65:50:30:0c:a3:9e:7b:95:c4:70:59:01:
                    d6:f6:83:b5:ca:ab:40:5a:6e:91:67:97:fb:20:34:
                    1e:ff:28:43:44:99:ab:82:11:e5:06:3d:63:f1:6d:
                    f3:a3:57:6a:69:31:b2:1b:3d:cc:8a:12:8f:7c:60:
                    ea:a5:c3:45:63:3c:ca:90:30:86:2d:6a:56:d4:90:
                    bb:0f:57:69:a5:95:fc:ad:ed:1a:9b:0c:3d:17:62:
                    2a:f6:f0:d7:48:10:56:6d:db:3f:a6:88:c8:c3:6e:
                    4f:f2:46:62:e7:6f:45:2e:af:17:3e:a9:2c:79:45:
                    bb:3d:05:5b:fa:ba:63:65:44:63:0e:74:1e:ff:c6:
                    d1:34:5c:cb:7c:df:54:aa:b2:30:cb:f3:4e:af:75:
                    8e:5a:e7:a7:40:2d:fd:f0:6c:1d:25:f0:8e:dc:d5:
                    94:1e:84:46:e0:df:f8:e6:72:e2:2e:28:e3:42:71:
                    e4:61:12:d3:23:b6:1d:30:ee:56:18:19:41:bd:75:
                    bd:a7:59:40:f4:96:3a:9b:a6:91:ca:a6:b6:82:55:
                    eb:f9:89:2f:43:1b:36:ea:ba:3d:46:ca:db:8c:d1:
                    b7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DD:50:5A:2F:40:13:11:58:51:ED:D7:B5:34:64:10:9C:07:B3:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/72833caf-e3b3-36d4-8edd-3f0b7e9884b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/3d89140c-6425-48b5-94d6-472f38ead8f8.crl

            X509v3 Authority Key Identifier:
                keyid:68:1F:F9:FE:0D:C3:9C:15:38:00:8F:92:4F:AB:39:5C:CE:5A:81:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f395::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a2:d6:1a:9c:b8:df:6a:83:c8:b9:8c:dc:c7:9c:84:ba:29:
         5e:38:dc:78:85:0a:75:5c:d3:2f:8e:9c:5e:18:2e:a2:33:a4:
         fe:75:2f:09:1e:01:5b:d4:c2:e6:2c:69:24:d2:63:f0:4b:82:
         4a:8d:69:54:52:07:95:f5:02:fe:ba:07:03:b9:a0:d2:44:36:
         c3:00:ee:ac:17:14:1d:c6:10:49:08:56:d8:7d:b4:fa:4f:d7:
         f1:09:ae:6f:a3:62:3f:9f:91:e7:7b:53:2f:6a:d5:0f:8b:09:
         e6:7c:25:8a:cd:fb:5b:14:9f:a4:72:bf:2f:8a:8b:ec:b9:a4:
         7f:c4:ba:6a:21:b8:da:85:1a:09:9d:ca:78:2e:26:c1:d7:80:
         fa:f4:f4:c4:e3:4b:1a:b8:0d:a0:70:15:12:1f:02:43:ca:1d:
         6b:df:38:a6:84:95:cd:4e:3a:89:af:3d:45:9f:c9:e8:19:59:
         3d:96:fd:3d:fd:98:d3:23:42:e6:77:11:7c:30:9f:d0:fc:28:
         95:e6:ea:fe:0f:ad:fa:fa:04:23:a7:15:6b:a4:bc:a0:4c:82:
         05:b6:e6:75:bd:35:3e:3d:f4:db:53:b9:98:22:c9:2f:09:e1:
         07:e7:99:29:b5:ad:e7:4a:a7:cf:32:d9:28:16:ea:9d:07:fd:
         8e:fe:e0:91
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7UMly32IiFr+dQG2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q4OTE0MGMtNjQyNS00OGI1LTk0ZDYtNDcyZjM4ZWFk
OGY4MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk
Y2E0MzIxNDEtN2E1Mi00MTE0LWJjNDEtNzRlMDczZjQzOTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVwrvnuMx0gLws+meS9xCtXKJKNhnhIatT8H
UIlfbPhlUDAMo557lcRwWQHW9oO1yqtAWm6RZ5f7IDQe/yhDRJmrghHlBj1j8W3z
o1dqaTGyGz3MihKPfGDqpcNFYzzKkDCGLWpW1JC7D1dppZX8re0amww9F2Iq9vDX
SBBWbds/pojIw25P8kZi529FLq8XPqkseUW7PQVb+rpjZURjDnQe/8bRNFzLfN9U
qrIwy/NOr3WOWuenQC398GwdJfCO3NWUHoRG4N/45nLiLijjQnHkYRLTI7YdMO5W
GBlBvXW9p1lA9JY6m6aRyqa2glXr+YkvQxs26ro9RsrbjNG3NwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLPdUFovQBMRWFHt17U0ZBCcB7MjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDg5
MTQwYy02NDI1LTQ4YjUtOTRkNi00NzJmMzhlYWQ4ZjgvNzI4MzNjYWYtZTNiMy0z
NmQ0LThlZGQtM2YwYjdlOTg4NGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q4OTE0MGMtNjQyNS00OGI1LTk0
ZDYtNDcyZjM4ZWFkOGY4LzNkODkxNDBjLTY0MjUtNDhiNS05NGQ2LTQ3MmYzOGVh
ZDhmOC5jcmwwHwYDVR0jBBgwFoAUaB/5/g3DnBU4AI+ST6s5XM5agfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDg5MTQwYy02NDI1LTQ4YjUtOTRkNi00NzJm
MzhlYWQ4ZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgLzlQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAnKLWGpy432qDyLmM3MechLopXjjceIUKdVzTL46cXhguojOk/nUv
CR4BW9TC5ixpJNJj8EuCSo1pVFIHlfUC/roHA7mg0kQ2wwDurBcUHcYQSQhW2H20
+k/X8Qmub6NiP5+R53tTL2rVD4sJ5nwlis37WxSfpHK/L4qL7Lmkf8S6aiG42oUa
CZ3KeC4mwdeA+vT0xONLGrgNoHAVEh8CQ8oda984poSVzU46ia89RZ/J6BlZPZb9
Pf2Y0yNC5ncRfDCf0Pwolebq/g+t+voEI6cVa6S8oEyCBbbmdb01Pj3021O5mCLJ
LwnhB+eZKbWt50qnzzLZKBbqnQf9jv7gkQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:05:51 2026 by rpki-client