Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/636fe0db-3c8f-3e91-84e9-2f562e12be8e.roa
File:                     636fe0db-3c8f-3e91-84e9-2f562e12be8e.roa (raw, json)
Hash identifier:          sgl8/JrLFWXS/jarPBEgivCfwUE4213bAzUIDKMqJbE=
Subject key identifier:   C4:07:74:DE:3F:95:3B:DC:58:93:D2:1E:BF:2A:0C:A0:9F:BF:A6:9C
Certificate issuer:       /CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Certificate serial:       010D0C9F4328584F1E2CF767B394F78A9D166800
Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/636fe0db-3c8f-3e91-84e9-2f562e12be8e.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     51844
IP address blocks:        2602:fb00:e5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:f7:67:b3:94:f7:8a:9d:16:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=9c65be0c-48db-45d0-ab8f-5ace5c14c891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:33:b6:ae:47:50:fd:b2:d2:d3:00:ed:60:68:
                    d9:11:92:c2:85:9c:9f:57:43:33:95:9e:8e:24:26:
                    fe:e6:c2:e9:aa:20:2b:16:69:bb:b1:49:8e:36:58:
                    6f:54:4a:5e:46:49:c9:98:66:93:21:e8:31:9f:2b:
                    fe:a0:60:e6:28:b8:d9:68:58:bb:66:3b:dc:00:46:
                    96:1a:a6:1b:8b:4f:94:d4:e9:60:9e:31:18:59:50:
                    6f:df:ca:ba:39:10:ee:ee:37:4d:82:61:10:f7:2f:
                    d7:b2:e1:78:cb:ab:dd:31:26:9a:4e:2f:21:8f:53:
                    6b:ee:20:dc:be:57:c0:54:09:50:85:5c:5e:bf:bc:
                    a6:b9:64:5b:3d:d8:67:df:a3:af:5d:ec:09:97:81:
                    5b:b1:dc:8f:5e:6e:b2:7a:d8:05:e4:0a:2a:ab:d6:
                    75:52:ae:b9:88:40:ee:2d:37:db:92:b7:b2:cc:03:
                    1c:bd:34:7a:be:f3:9e:be:3d:99:f7:fc:9c:94:1d:
                    fc:0a:f2:52:ce:b4:34:00:be:19:ed:b0:bf:a1:88:
                    59:16:85:16:23:d0:9b:95:d9:f1:c6:23:eb:ec:7e:
                    ae:28:4c:2a:48:4b:30:6b:c1:f9:74:2a:cd:5c:56:
                    80:f1:70:1d:b3:1e:5c:7e:b6:cb:78:39:b1:79:49:
                    5a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:07:74:DE:3F:95:3B:DC:58:93:D2:1E:BF:2A:0C:A0:9F:BF:A6:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/636fe0db-3c8f-3e91-84e9-2f562e12be8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl

            X509v3 Authority Key Identifier:
                keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb00:e5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:fa:5f:2f:66:03:dd:2b:99:33:ee:23:1d:d6:99:4c:63:ae:
         29:6b:1e:a7:b5:55:4c:e8:9a:59:07:87:60:91:3d:2d:43:cc:
         ba:55:ea:ba:bb:ad:74:b6:d5:e0:30:c7:24:cd:cb:a4:82:9f:
         d7:08:45:44:51:52:02:98:a0:85:04:99:ae:49:bb:85:e6:ff:
         c4:f5:b5:7d:ac:a7:ef:f5:d3:cd:3c:f5:53:e0:89:29:c0:02:
         de:ed:22:e0:ba:05:5e:00:79:d1:5c:2d:d4:89:bb:d3:cd:2b:
         58:80:09:db:c9:bd:12:d1:72:66:28:08:28:eb:17:0d:fd:82:
         68:71:01:bc:b2:b8:31:41:92:f4:4f:c8:5e:28:5f:cf:1e:55:
         e3:a1:fe:47:ed:3e:a7:16:40:ab:da:76:9e:69:9e:93:63:cb:
         f8:66:4b:5b:0a:ec:a5:54:0b:9f:8f:c9:97:06:01:8d:fc:7f:
         6a:c0:db:88:f7:a7:8f:af:bb:66:8f:cc:71:1c:36:15:28:2f:
         46:02:3a:b3:56:49:f4:ed:c9:8c:87:43:6f:2f:93:11:92:09:
         81:34:5e:42:ba:53:46:3b:ea:4f:67:29:cb:6a:c2:44:50:17:
         d6:ef:ad:55:03:ac:ef:6d:a6:d2:f5:b5:d7:2d:20:fb:bb:8f:
         05:07:14:b7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8eLPdns5T3ip0WaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDA2ZDExNzQtNGJmNC00NjViLTlmMGItMTA5MTYzM2U2
NzE3MB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk
OWM2NWJlMGMtNDhkYi00NWQwLWFiOGYtNWFjZTVjMTRjODkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzO2rkdQ/bLS0wDtYGjZEZLChZyfV0MzlZ6O
JCb+5sLpqiArFmm7sUmONlhvVEpeRknJmGaTIegxnyv+oGDmKLjZaFi7ZjvcAEaW
GqYbi0+U1OlgnjEYWVBv38q6ORDu7jdNgmEQ9y/XsuF4y6vdMSaaTi8hj1Nr7iDc
vlfAVAlQhVxev7ymuWRbPdhn36OvXewJl4FbsdyPXm6yetgF5Aoqq9Z1Uq65iEDu
LTfbkreyzAMcvTR6vvOevj2Z9/yclB38CvJSzrQ0AL4Z7bC/oYhZFoUWI9Cbldnx
xiPr7H6uKEwqSEswa8H5dCrNXFaA8XAdsx5cfrbLeDmxeUlaewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMQHdN4/lTvcWJPSHr8qDKCfv6acMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZk
MTE3NC00YmY0LTQ2NWItOWYwYi0xMDkxNjMzZTY3MTcvNjM2ZmUwZGItM2M4Zi0z
ZTkxLTg0ZTktMmY1NjJlMTJiZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDA2ZDExNzQtNGJmNC00NjViLTlm
MGItMTA5MTYzM2U2NzE3L2QwNmQxMTc0LTRiZjQtNDY1Yi05ZjBiLTEwOTE2MzNl
NjcxNy5jcmwwHwYDVR0jBBgwFoAU9jj3atiqgLwTOxXzDa4QNzLQ0McwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZkMTE3NC00YmY0LTQ2NWItOWYwYi0xMDkx
NjMzZTY3MTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7AADl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACT6Xy9mA90rmTPuIx3WmUxjrilrHqe1VUzomlkHh2CRPS1DzLpV
6rq7rXS21eAwxyTNy6SCn9cIRURRUgKYoIUEma5Ju4Xm/8T1tX2sp+/108089VPg
iSnAAt7tIuC6BV4AedFcLdSJu9PNK1iACdvJvRLRcmYoCCjrFw39gmhxAbyyuDFB
kvRPyF4oX88eVeOh/kftPqcWQKvadp5pnpNjy/hmS1sK7KVUC5+PyZcGAY38f2rA
24j3p4+vu2aPzHEcNhUoL0YCOrNWSfTtyYyHQ28vkxGSCYE0XkK6U0Y76k9nKctq
wkRQF9bvrVUDrO9tptL1tdctIPu7jwUHFLc=
-----END CERTIFICATE-----
Generated at Tue Oct 13 12:59:24 2026 by rpki-client