Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/30aedf31-1c65-3dc0-b886-5ba7ae6e5798.roa
File:                     30aedf31-1c65-3dc0-b886-5ba7ae6e5798.roa (raw, json)
Hash identifier:          RYus8HeWf5C5NFAypfTVQxOLpP1qDgfowFLTQwy75jg=
Subject key identifier:   59:93:B3:2D:A8:1A:6D:1A:12:26:66:E4:02:1C:91:27:01:3D:4B:72
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584F2957B98EA2A7588301D8FAA0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/30aedf31-1c65-3dc0-b886-5ba7ae6e5798.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     396982
IP address blocks:        2602:28c:3002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b9:8e:a2:a7:58:83:01:d8:fa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=e509b6bc-d1c2-4859-afd2-211a2c65f0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:a4:70:da:d3:e2:63:7a:58:70:8d:a7:0e:
                    6d:94:5b:dc:c4:ff:a6:54:64:9e:6e:78:a7:9f:da:
                    0c:d1:71:7e:38:47:1e:4c:c5:e0:2a:ee:b7:42:16:
                    76:eb:54:fe:f2:a3:49:07:6e:fd:83:2b:5b:33:b6:
                    56:09:f6:26:65:b8:fb:98:61:a0:3d:51:d5:10:39:
                    e0:a6:0f:80:f1:3e:02:d9:29:e6:f4:03:80:62:b7:
                    58:97:17:ca:b0:96:50:20:db:2d:f2:20:63:fa:7f:
                    bd:39:2d:82:73:44:0f:7c:45:25:19:04:67:4b:83:
                    15:ae:b4:a0:a4:30:a9:92:4f:32:d9:41:76:d3:ae:
                    e0:92:a0:54:57:8e:ba:5c:82:8c:eb:d8:52:a6:42:
                    13:2a:91:53:09:b6:72:4d:00:57:dd:9b:0c:78:e9:
                    06:bb:1b:63:20:94:9b:89:98:d9:1c:37:b6:f3:19:
                    3e:1f:f9:ee:c7:48:87:39:82:2c:a4:3d:74:28:19:
                    1a:00:b2:53:14:00:cc:74:e8:2f:9c:df:44:0c:20:
                    21:4e:5c:b7:15:fa:6b:6e:3d:88:c5:eb:3f:21:89:
                    be:df:41:1a:ab:8a:26:a7:3d:0c:42:b9:55:df:60:
                    4d:2d:f9:f2:d4:8f:80:05:27:1d:3f:60:26:13:c2:
                    f8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:93:B3:2D:A8:1A:6D:1A:12:26:66:E4:02:1C:91:27:01:3D:4B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/30aedf31-1c65-3dc0-b886-5ba7ae6e5798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:3002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4d:4f:b1:8e:55:9c:e2:3c:3d:bc:00:37:43:64:d0:98:2b:
         0f:2a:4c:e7:b1:e1:97:13:5d:77:07:14:30:38:5b:09:a6:f9:
         82:b8:3e:df:38:6c:d4:76:41:55:ee:c0:91:ef:6d:0f:c1:83:
         10:62:b8:ba:48:70:66:54:92:4f:c7:df:11:55:d0:71:12:28:
         2e:0a:2f:94:44:97:93:c7:b8:83:cc:01:76:26:e1:56:50:ed:
         4d:8b:c9:58:90:85:81:b1:72:c4:ed:41:89:36:28:c2:fa:36:
         92:c1:02:a8:6a:35:dc:1a:23:7a:78:bc:06:19:52:09:ad:3b:
         c6:42:86:19:c7:45:a4:8e:7e:03:1c:cb:2e:15:95:91:dd:43:
         a7:49:16:2e:07:e2:26:41:fb:29:e6:f1:98:5e:be:15:5d:99:
         5d:4d:ea:60:3e:3a:34:7b:63:82:cf:5e:11:9f:f2:3b:cf:b9:
         e1:16:3a:35:65:27:fa:40:de:cb:a1:4d:af:cf:af:c6:1d:70:
         7b:bc:25:10:ab:32:3d:96:77:de:6b:a7:a7:08:df:3e:37:6b:
         e3:bd:66:fe:68:bd:95:f8:b2:07:c3:b9:e7:97:ca:62:bb:77:
         ce:ed:7c:99:6f:5a:65:72:9c:67:e3:e0:a8:44:b8:82:49:f3:
         da:4b:a0:0e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8pV7mOoqdYgwHY+qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk
ZTUwOWI2YmMtZDFjMi00ODU5LWFmZDItMjExYTJjNjVmMGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+KkcNrT4mN6WHCNpw5tlFvcxP+mVGSebnin
n9oM0XF+OEceTMXgKu63QhZ261T+8qNJB279gytbM7ZWCfYmZbj7mGGgPVHVEDng
pg+A8T4C2Snm9AOAYrdYlxfKsJZQINst8iBj+n+9OS2Cc0QPfEUlGQRnS4MVrrSg
pDCpkk8y2UF2067gkqBUV466XIKM69hSpkITKpFTCbZyTQBX3ZsMeOkGuxtjIJSb
iZjZHDe28xk+H/nux0iHOYIspD10KBkaALJTFADMdOgvnN9EDCAhTly3Ffprbj2I
xes/IYm+30Eaq4ompz0MQrlV32BNLfny1I+ABScdP2AmE8L4awIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFmTsy2oGm0aEiZm5AIckScBPUtyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvMzBhZWRmMzEtMWM2NS0z
ZGMwLWI4ODYtNWJhN2FlNmU1Nzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICjDAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGhNT7GOVZziPD28ADdDZNCYKw8qTOex4ZcTXXcHFDA4Wwmm+YK4
Pt84bNR2QVXuwJHvbQ/BgxBiuLpIcGZUkk/H3xFV0HESKC4KL5REl5PHuIPMAXYm
4VZQ7U2LyViQhYGxcsTtQYk2KML6NpLBAqhqNdwaI3p4vAYZUgmtO8ZChhnHRaSO
fgMcyy4VlZHdQ6dJFi4H4iZB+ynm8ZhevhVdmV1N6mA+OjR7Y4LPXhGf8jvPueEW
OjVlJ/pA3suhTa/Pr8YdcHu8JRCrMj2Wd95rp6cI3z43a+O9Zv5ovZX4sgfDueeX
ymK7d87tfJlvWmVynGfj4KhEuIJJ89pLoA4=
-----END CERTIFICATE-----
Generated at Mon Sep 28 07:02:54 2026 by rpki-client