Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ec42ddd-cc23-38a1-a154-30e65583853a.roa
File:                     0ec42ddd-cc23-38a1-a154-30e65583853a.roa (raw, json)
Hash identifier:          zapJObrPzYR63DiM7H8aNhY/0mCVJd+StYjOna/y3vw=
Subject key identifier:   08:22:0D:07:AC:D3:F5:2C:0C:C9:26:DC:32:89:F6:A5:83:39:52:01
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584F2957CE811A8C3EA2686DE740
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ec42ddd-cc23-38a1-a154-30e65583853a.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     198949
IP address blocks:        2602:283:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:ce:81:1a:8c:3e:a2:68:6d:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=0ea943de-de00-489e-be13-1879d076cec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:ed:7f:f4:a6:35:e0:f8:a4:77:b9:c6:90:
                    15:af:63:74:57:cb:67:71:e5:d3:67:a4:2e:6d:9f:
                    9f:cb:3c:95:e9:40:68:f8:85:31:33:15:ea:47:6e:
                    5b:31:3e:6b:dd:80:ca:7b:45:79:f9:b9:e1:65:f1:
                    a0:40:c0:3f:81:cc:23:e4:a6:41:b5:1c:96:bd:98:
                    6e:38:20:7b:d2:73:99:3f:19:fd:ec:ff:32:54:19:
                    a8:02:d6:12:2d:21:8b:d5:e2:71:9c:2f:1b:57:a4:
                    31:b7:9f:aa:c3:3b:28:45:00:44:be:2d:b6:d5:ec:
                    31:ff:08:85:d2:ff:2b:2f:36:7a:31:0e:43:20:97:
                    81:02:61:9f:33:54:9c:d6:24:39:c9:66:25:8f:bb:
                    9a:43:d5:dc:91:e0:45:84:ad:72:0d:d0:0f:d0:0e:
                    67:c5:14:e7:0a:3f:e7:7a:9d:ec:0b:31:bb:e3:72:
                    26:79:0a:90:12:c6:3a:b6:ce:52:86:a7:da:3e:55:
                    f4:9a:8f:85:76:86:8f:ff:d5:91:5e:af:d3:24:8b:
                    aa:32:34:f5:50:c9:93:82:3f:97:17:44:1f:a1:c8:
                    a1:de:2a:c3:6f:a8:a0:d8:db:e0:82:5a:bf:f3:70:
                    0f:c3:15:a8:f3:03:db:aa:4e:e8:f2:21:77:10:dc:
                    61:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:22:0D:07:AC:D3:F5:2C:0C:C9:26:DC:32:89:F6:A5:83:39:52:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ec42ddd-cc23-38a1-a154-30e65583853a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:283:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:5b:b1:ca:ab:fd:df:c1:20:e1:b1:f8:51:de:4a:31:79:2f:
         05:78:27:d1:68:b9:0b:31:e7:0a:a0:f6:cc:62:81:bd:ac:8a:
         52:6e:55:00:1f:30:d0:6a:32:f3:df:83:2f:7c:1a:74:c5:8e:
         7e:cc:5d:03:4c:cd:aa:4d:f3:40:7c:fe:10:91:1d:d2:d8:21:
         bf:9c:e7:19:e5:4a:fd:88:ee:44:06:e0:98:cf:42:7b:f0:11:
         52:03:d6:38:64:eb:63:a6:2c:09:2e:8d:31:69:1a:a9:0c:7f:
         ab:a6:70:fa:5b:60:00:21:61:a9:41:c8:02:99:53:65:c7:9e:
         51:28:2d:5a:9a:f7:53:4f:fe:19:fd:9e:97:2e:15:7c:ba:be:
         1e:5b:8e:34:3f:62:dd:07:80:4c:71:67:e4:89:a3:37:92:6f:
         e4:2a:18:59:04:8f:d2:b7:09:5e:29:36:84:58:1b:32:43:a5:
         47:6d:9e:20:d6:d2:1e:e2:79:4e:8e:4b:dd:ed:b0:17:5c:73:
         a6:ea:4f:4d:c4:e4:85:dd:48:50:03:33:95:bc:89:43:91:45:
         50:ad:45:c5:05:52:8a:a8:4c:ee:e5:f4:1a:b6:99:60:d4:85:
         ec:4e:5e:8c:bb:26:20:9e:90:d0:16:27:e7:ce:80:67:a6:61:
         38:a1:1f:97
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8pV86BGow+omht50AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk
MGVhOTQzZGUtZGUwMC00ODllLWJlMTMtMTg3OWQwNzZjZWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdvtf/SmNeD4pHe5xpAVr2N0V8tnceXTZ6Qu
bZ+fyzyV6UBo+IUxMxXqR25bMT5r3YDKe0V5+bnhZfGgQMA/gcwj5KZBtRyWvZhu
OCB70nOZPxn97P8yVBmoAtYSLSGL1eJxnC8bV6Qxt5+qwzsoRQBEvi221ewx/wiF
0v8rLzZ6MQ5DIJeBAmGfM1Sc1iQ5yWYlj7uaQ9XckeBFhK1yDdAP0A5nxRTnCj/n
ep3sCzG743ImeQqQEsY6ts5ShqfaPlX0mo+FdoaP/9WRXq/TJIuqMjT1UMmTgj+X
F0Qfocih3irDb6ig2Nvgglq/83APwxWo8wPbqk7o8iF3ENxhbwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAgiDQes0/UsDMkm3DKJ9qWDOVIBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvMGVjNDJkZGQtY2MyMy0z
OGExLWExNTQtMzBlNjU1ODM4NTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJgICg4Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASFuxyqv938Eg4bH4Ud5KMXkvBXgn0Wi5CzHnCqD2zGKBvayKUm5V
AB8w0Goy89+DL3wadMWOfsxdA0zNqk3zQHz+EJEd0tghv5znGeVK/YjuRAbgmM9C
e/ARUgPWOGTrY6YsCS6NMWkaqQx/q6Zw+ltgACFhqUHIAplTZceeUSgtWpr3U0/+
Gf2ely4VfLq+HluOND9i3QeATHFn5ImjN5Jv5CoYWQSP0rcJXik2hFgbMkOlR22e
INbSHuJ5To5L3e2wF1xzpupPTcTkhd1IUAMzlbyJQ5FFUK1FxQVSiqhM7uX0GraZ
YNSF7E5ejLsmIJ6Q0BYn586AZ6ZhOKEflw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:53:06 2026 by rpki-client