Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/e14ddba0-1ef9-3c17-a440-bb43830ccca1.roa
File:                     e14ddba0-1ef9-3c17-a440-bb43830ccca1.roa (raw, json)
Hash identifier:          lfyjsNM2XCY4AZMMt2iYOEqP0eSvis+Wpn3sADTup3U=
Subject key identifier:   B6:D1:A1:AE:6B:A3:E6:47:29:AE:88:08:B0:5A:24:C4:89:8B:39:D0
Certificate issuer:       /CN=0a846bda-a477-4fe0-8f13-997253568b7e
Certificate serial:       010D0C9F4328584F225D1FBB028C472A3E92E080
Authority key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/e14ddba0-1ef9-3c17-a440-bb43830ccca1.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     55201
IP address blocks:        2602:fb37::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:1f:bb:02:8c:47:2a:3e:92:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a846bda-a477-4fe0-8f13-997253568b7e
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=229e886a-440d-4939-8cf4-6a4900699737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:47:83:e2:1e:30:7d:dc:9f:c2:32:ab:d5:32:
                    a3:09:46:0c:46:61:12:f7:4a:87:ee:aa:cf:b5:dc:
                    f5:fe:71:6c:db:3b:ca:fa:2c:90:89:87:4f:1c:bf:
                    57:a8:97:3d:c7:a7:9b:1c:4c:75:e1:e5:a0:1a:61:
                    b7:70:bf:25:3f:d3:e9:bd:d9:8d:df:47:a8:d5:c3:
                    8c:c5:d7:ee:d8:dd:d1:2d:ea:76:39:be:59:85:14:
                    28:0e:ac:68:c2:89:4f:2a:e8:19:62:01:a8:e5:21:
                    73:25:d3:b0:d4:49:29:e1:45:5d:12:47:fc:46:44:
                    b9:f4:7f:fd:48:4c:52:86:92:df:5d:02:3d:f0:bc:
                    60:2f:a5:81:f0:da:2e:1a:66:1f:8e:96:68:09:b7:
                    4e:6a:e0:57:95:5f:d4:30:59:92:99:26:97:0b:72:
                    e4:e5:36:0d:d0:59:4b:9e:b9:6f:6e:46:e8:53:81:
                    d6:d4:f4:e0:5c:b4:2d:59:ee:94:99:b4:0b:95:ac:
                    6c:f3:5c:88:24:8a:e0:d0:5a:ba:85:8c:cb:cd:56:
                    15:b7:56:9c:73:57:a3:75:87:10:9f:06:e9:ed:3a:
                    75:6b:ec:1f:f2:64:f9:53:50:46:1e:34:ca:1b:06:
                    7c:65:db:68:98:11:ef:f2:f7:42:b8:56:27:b8:52:
                    02:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D1:A1:AE:6B:A3:E6:47:29:AE:88:08:B0:5A:24:C4:89:8B:39:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/e14ddba0-1ef9-3c17-a440-bb43830ccca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb37::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:17:b7:94:f3:c6:b3:63:7f:08:69:e4:b6:6f:0f:b5:ff:c6:
         ab:60:72:9f:0f:97:7d:59:6a:88:4c:9a:98:23:6b:fd:84:63:
         7c:ef:9b:31:01:95:72:01:ce:a1:e0:1a:1e:72:48:37:12:ac:
         e7:5b:91:fa:09:f4:3d:22:24:5d:ed:40:21:e3:27:17:a1:25:
         4b:09:e6:f8:a5:e8:e9:d1:47:50:a9:82:14:2b:1e:b9:b1:65:
         3a:e6:88:9a:9f:9a:a0:fd:c7:13:bb:35:55:a5:02:68:33:46:
         c4:68:50:e7:40:72:a9:93:fc:a8:ae:a3:2a:11:46:f0:dc:d0:
         95:df:d6:ab:22:72:2e:aa:cf:90:e3:35:90:2f:bd:04:9a:50:
         4b:3e:a3:c3:9c:52:b2:db:ed:f5:4d:9b:b4:75:29:58:0a:fa:
         a7:5b:63:42:50:de:6f:07:f7:af:b9:53:33:68:10:7c:7c:06:
         bb:a4:74:93:8e:ab:b5:55:81:54:fe:f6:01:8e:4e:ae:f1:9e:
         f4:08:49:89:d3:cc:f1:37:b5:ba:aa:37:4f:5f:a8:ff:d9:a8:
         f7:75:70:30:62:da:79:dd:24:f3:57:86:5f:39:7b:57:e4:36:
         8b:12:2f:e3:0a:24:0f:69:fc:f5:8c:f4:b9:bf:a0:af:cf:ae:
         08:38:4d:cd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8iXR+7AoxHKj6S4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE4NDZiZGEtYTQ3Ny00ZmUwLThmMTMtOTk3MjUzNTY4
YjdlMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
MjI5ZTg4NmEtNDQwZC00OTM5LThjZjQtNmE0OTAwNjk5NzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikeD4h4wfdyfwjKr1TKjCUYMRmES90qH7qrP
tdz1/nFs2zvK+iyQiYdPHL9XqJc9x6ebHEx14eWgGmG3cL8lP9PpvdmN30eo1cOM
xdfu2N3RLep2Ob5ZhRQoDqxowolPKugZYgGo5SFzJdOw1Ekp4UVdEkf8RkS59H/9
SExShpLfXQI98LxgL6WB8NouGmYfjpZoCbdOauBXlV/UMFmSmSaXC3Lk5TYN0FlL
nrlvbkboU4HW1PTgXLQtWe6UmbQLlaxs81yIJIrg0Fq6hYzLzVYVt1acc1ejdYcQ
nwbp7Tp1a+wf8mT5U1BGHjTKGwZ8ZdtomBHv8vdCuFYnuFICzQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLbRoa5ro+ZHKa6ICLBaJMSJiznQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYTg0
NmJkYS1hNDc3LTRmZTAtOGYxMy05OTcyNTM1NjhiN2UvZTE0ZGRiYTAtMWVmOS0z
YzE3LWE0NDAtYmI0MzgzMGNjY2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGE4NDZiZGEtYTQ3Ny00ZmUwLThm
MTMtOTk3MjUzNTY4YjdlLzBhODQ2YmRhLWE0NzctNGZlMC04ZjEzLTk5NzI1MzU2
OGI3ZS5jcmwwHwYDVR0jBBgwFoAU3LrnlLaBpZJ3YNrck1IDjYXwuGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYTg0NmJkYS1hNDc3LTRmZTAtOGYxMy05OTcy
NTM1NjhiN2UuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL7NzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB6F7eU88azY38IaeS2bw+1/8arYHKfD5d9WWqITJqYI2v9hGN875sx
AZVyAc6h4Boeckg3EqznW5H6CfQ9IiRd7UAh4ycXoSVLCeb4pejp0UdQqYIUKx65
sWU65oian5qg/ccTuzVVpQJoM0bEaFDnQHKpk/yorqMqEUbw3NCV39arInIuqs+Q
4zWQL70EmlBLPqPDnFKy2+31TZu0dSlYCvqnW2NCUN5vB/evuVMzaBB8fAa7pHST
jqu1VYFU/vYBjk6u8Z70CEmJ08zxN7W6qjdPX6j/2aj3dXAwYtp53STzV4ZfOXtX
5DaLEi/jCiQPafz1jPS5v6Cvz64IOE3N
-----END CERTIFICATE-----
Generated at Sat Oct 3 10:59:09 2026 by rpki-client