Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/0c9589c4-08c6-3124-a198-9bf001091b1b.roa
File:                     0c9589c4-08c6-3124-a198-9bf001091b1b.roa (raw, json)
Hash identifier:          8angosI7LuBIBYdOWNlwZh74cIPSC39ulMu/qqFBFvY=
Subject key identifier:   06:6F:BD:39:ED:7B:CA:01:F6:EA:F5:D4:EF:15:77:D4:05:A3:89:A7
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584F348273102FF61641157DC1C0
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/0c9589c4-08c6-3124-a198-9bf001091b1b.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     36007
IP address blocks:        2606:3a80:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:73:10:2f:f6:16:41:15:7d:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=f83f16c3-9542-40e1-a40b-dd01397c31af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:76:6b:21:2e:53:02:df:5d:9d:67:a7:23:
                    0c:e3:f5:bf:f5:d7:bc:30:00:5e:b7:11:49:d5:df:
                    c6:68:f5:56:e9:c7:04:e8:57:c0:8a:0a:00:1f:a3:
                    55:40:1f:9a:29:ec:a3:ae:9a:1b:11:18:6a:d6:3a:
                    5f:0c:79:ef:7e:b7:74:92:a3:de:7b:cd:c0:5c:66:
                    85:77:d6:fb:91:44:3e:8e:6d:81:f3:c9:0f:f1:49:
                    03:2d:cb:2c:aa:64:59:6c:5d:da:1c:91:06:60:d0:
                    7b:1e:dc:3b:bc:95:cd:23:c0:ba:a4:ec:e8:d5:55:
                    ce:5f:92:45:38:33:c9:f7:e5:36:4e:4d:86:4b:a5:
                    11:9c:39:dc:fd:8c:31:12:4f:b4:86:2b:5a:a8:5a:
                    4a:80:00:a2:fc:19:f5:b9:21:9c:bd:eb:cb:60:08:
                    e4:f7:d1:4f:38:9e:13:04:f4:4c:29:47:65:ef:d0:
                    f8:70:02:ef:77:47:8b:50:53:6f:35:ef:c4:5b:01:
                    2f:e6:9d:d8:c6:42:8a:17:4d:a9:c2:5d:80:85:7a:
                    52:9a:80:cf:35:9a:4f:19:96:4b:91:90:2b:0e:87:
                    5c:67:6f:8c:c3:fd:c1:87:da:27:9d:2b:9a:9c:eb:
                    f3:f1:ce:10:43:00:33:10:88:d7:ea:ea:44:05:03:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6F:BD:39:ED:7B:CA:01:F6:EA:F5:D4:EF:15:77:D4:05:A3:89:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/0c9589c4-08c6-3124-a198-9bf001091b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3a80:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:48:b5:a1:b2:41:72:51:5b:5c:07:20:d5:10:c1:a5:84:64:
         07:6a:b7:4c:14:03:e6:5f:7c:dc:b3:57:94:99:cd:1c:94:51:
         02:e0:0b:4c:d7:1e:ce:ce:f3:84:5c:89:2f:d5:a8:5d:c3:cd:
         d3:39:28:36:05:8a:f3:48:00:54:c9:6b:52:94:6f:f7:41:ed:
         bc:a6:83:af:8b:87:8d:cf:45:f7:a8:c3:52:7f:a0:b3:47:ab:
         42:46:b1:16:2b:09:b0:5f:1b:59:ab:3b:79:97:93:0d:9f:20:
         ae:c1:71:15:25:38:03:e5:75:e6:56:3d:59:85:30:06:78:9c:
         00:92:de:1f:3f:40:13:1a:7a:ad:84:4f:6c:45:df:b8:d2:b4:
         7f:5f:6d:52:cf:f9:29:f3:4b:37:e1:5c:b7:0b:c8:bb:e4:ce:
         2c:44:27:70:49:9c:64:fc:89:ab:20:9c:64:c6:96:5e:4c:10:
         dc:1a:9a:e6:66:d7:70:b1:7f:7b:31:8b:fc:e5:05:9e:91:b6:
         63:90:5a:8f:53:58:4e:72:2c:ee:ec:0f:f4:7a:e8:3f:e5:ad:
         f8:a4:e5:43:11:2f:0a:99:f5:b3:57:57:4e:5c:1a:0b:04:da:
         d4:fb:42:9a:0b:14:ed:19:d7:e2:c7:54:5a:b5:6c:ec:b5:be:
         a7:bc:5d:5a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE80gnMQL/YWQRV9wcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0
ZmZkMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk
ZjgzZjE2YzMtOTU0Mi00MGUxLWE0MGItZGQwMTM5N2MzMWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ep2ayEuUwLfXZ1npyMM4/W/9de8MABetxFJ
1d/GaPVW6ccE6FfAigoAH6NVQB+aKeyjrpobERhq1jpfDHnvfrd0kqPee83AXGaF
d9b7kUQ+jm2B88kP8UkDLcssqmRZbF3aHJEGYNB7Htw7vJXNI8C6pOzo1VXOX5JF
ODPJ9+U2Tk2GS6URnDnc/YwxEk+0hitaqFpKgACi/Bn1uSGcvevLYAjk99FPOJ4T
BPRMKUdl79D4cALvd0eLUFNvNe/EWwEv5p3YxkKKF02pwl2AhXpSmoDPNZpPGZZL
kZArDodcZ2+Mw/3Bh9onnSuanOvz8c4QQwAzEIjX6upEBQOuDwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAZvvTnte8oB9ur11O8Vd9QFo4mnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj
OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvMGM5NTg5YzQtMDhjNi0z
MTI0LWExOTgtOWJmMDAxMDkxYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm
OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1
NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1
NjA3NTRmZmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY6gAgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB5ItaGyQXJRW1wHINUQwaWEZAdqt0wUA+ZffNyzV5SZzRyUUQLg
C0zXHs7O84RciS/VqF3DzdM5KDYFivNIAFTJa1KUb/dB7bymg6+Lh43PRfeow1J/
oLNHq0JGsRYrCbBfG1mrO3mXkw2fIK7BcRUlOAPldeZWPVmFMAZ4nACS3h8/QBMa
eq2ET2xF37jStH9fbVLP+SnzSzfhXLcLyLvkzixEJ3BJnGT8iasgnGTGll5MENwa
muZm13Cxf3sxi/zlBZ6RtmOQWo9TWE5yLO7sD/R66D/lrfik5UMRLwqZ9bNXV05c
GgsE2tT7QpoLFO0Z1+LHVFq1bOy1vqe8XVo=
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:08:52 2026 by rpki-client