Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/137d7fa7-0cb6-336f-a1d4-c72889789e34.roa
File:                     137d7fa7-0cb6-336f-a1d4-c72889789e34.roa (raw, json)
Hash identifier:          WtE2hiecXNOH97t0MXmO2s+iUCqhj6QHHjRX8pcaz0c=
Subject key identifier:   60:6B:D8:8E:B3:7F:FA:BC:B8:E4:AC:D2:39:AC:CB:52:23:F6:A4:0D
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584F4974584F08C38C29435E8800
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/137d7fa7-0cb6-336f-a1d4-c72889789e34.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2601:5000:3000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:58:4f:08:c3:8c:29:43:5e:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ec30d3f4-c170-479f-a310-b8c9fafc558f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e9:b2:26:a4:30:29:67:15:dd:e9:41:a3:42:
                    ec:3e:d0:a8:d6:dc:76:c7:10:5b:2f:af:b9:7b:77:
                    6e:12:1d:a7:56:5d:70:23:67:ca:38:c6:da:23:29:
                    8f:eb:44:5b:07:b2:2e:20:11:02:91:78:dd:e9:a6:
                    9b:91:0d:90:6a:39:ee:e8:17:c3:2b:b3:ec:7e:97:
                    27:03:de:d8:f7:14:1a:d4:55:ff:c1:c1:fe:5c:88:
                    56:0b:a0:a9:a6:27:e3:bf:2c:89:9b:6e:76:ca:99:
                    76:a9:17:f6:a5:e3:8a:15:46:c0:80:87:08:db:b0:
                    d0:ba:2d:fc:e0:ff:b6:38:ed:f9:f8:2f:90:d6:e7:
                    4d:51:53:b9:14:ee:be:3b:13:5d:0d:27:54:1c:cf:
                    e9:49:d3:b7:fb:18:1d:77:b2:b6:01:c7:c0:61:ed:
                    6f:ba:cc:63:18:69:14:9a:4a:93:6e:4c:b2:14:5e:
                    80:ab:35:70:b0:35:ba:78:0c:23:81:7c:a1:36:ee:
                    a9:ee:2c:5b:85:a4:7e:f4:ce:e0:b2:4d:20:f4:34:
                    7f:12:78:be:77:d6:11:cf:bb:af:6c:d2:8f:e0:15:
                    bd:9c:3b:2e:c2:af:4f:c0:54:48:53:2c:c4:5c:18:
                    15:5c:0e:bc:dd:24:c9:e0:3c:ff:25:db:40:91:6e:
                    a1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6B:D8:8E:B3:7F:FA:BC:B8:E4:AC:D2:39:AC:CB:52:23:F6:A4:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/137d7fa7-0cb6-336f-a1d4-c72889789e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:5000:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:2a:bc:b0:a3:91:02:ef:b9:9f:eb:40:41:30:7f:94:9e:c4:
         ad:fd:d1:c6:93:13:5b:36:a4:76:08:07:7e:bb:5c:dd:e5:43:
         2a:f5:67:17:93:4c:e1:5d:4f:80:78:71:cd:ed:fb:ae:54:55:
         cb:3b:1f:aa:23:c1:3d:e0:41:76:3f:1e:7f:e3:15:fe:ec:5d:
         de:b5:17:14:19:76:2e:de:82:61:6c:5c:aa:e9:d3:91:35:de:
         47:96:95:e9:86:cd:d7:0b:a4:62:7a:b3:e5:a8:fe:22:32:36:
         11:fc:20:fe:9e:9b:c7:8e:10:8b:82:91:7e:60:26:77:e1:5f:
         86:bb:2e:11:fe:2e:97:1d:1b:f6:47:b1:6c:3f:9a:ed:6b:0c:
         7e:70:43:ce:d4:c6:e8:78:1b:e6:65:45:3e:b6:55:3a:5c:1b:
         da:ee:2d:d4:c9:69:b4:54:8c:09:96:4d:06:3f:71:39:f7:a2:
         b3:4e:fc:35:aa:4c:12:99:84:ff:35:30:d3:ff:85:9c:f5:a0:
         04:a6:4b:39:66:a5:d2:66:ad:c9:52:e0:07:7c:84:0d:46:d6:
         8d:44:ed:16:64:1a:84:72:3f:22:4e:9b:d7:ed:23:7f:9f:e7:
         a8:98:aa:28:ca:3d:bb:3f:70:f8:ad:76:f5:df:76:d0:7b:a7:
         5c:f9:d7:f4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdFhPCMOMKUNeiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0
MGRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZWMzMGQzZjQtYzE3MC00NzlmLWEzMTAtYjhjOWZhZmM1NThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+myJqQwKWcV3elBo0LsPtCo1tx2xxBbL6+5
e3duEh2nVl1wI2fKOMbaIymP60RbB7IuIBECkXjd6aabkQ2Qajnu6BfDK7Psfpcn
A97Y9xQa1FX/wcH+XIhWC6CppifjvyyJm252ypl2qRf2peOKFUbAgIcI27DQui38
4P+2OO35+C+Q1udNUVO5FO6+OxNdDSdUHM/pSdO3+xgdd7K2AcfAYe1vusxjGGkU
mkqTbkyyFF6AqzVwsDW6eAwjgXyhNu6p7ixbhaR+9M7gsk0g9DR/Eni+d9YRz7uv
bNKP4BW9nDsuwq9PwFRIUyzEXBgVXA683STJ4Dz/JdtAkW6hOQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGBr2I6zf/q8uOSs0jmsy1Ij9qQNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThh
OGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvMTM3ZDdmYTctMGNiNi0z
MzZmLWExZDQtYzcyODg5Nzg5ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE4YThhZTQtYmU2Mi00ZWYwLTlk
YzctNGM0ZDgyNmE0MGRmLzYxOGE4YWU0LWJlNjItNGVmMC05ZGM3LTRjNGQ4MjZh
NDBkZi5jcmwwHwYDVR0jBBgwFoAUlz5X9TGBsVJSZ9MGK6XxSki+o3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRk
ODI2YTQwZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgFQADAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEApyq8sKORAu+5n+tAQTB/lJ7Erf3RxpMTWzakdggHfrtc3eVDKvVn
F5NM4V1PgHhxze37rlRVyzsfqiPBPeBBdj8ef+MV/uxd3rUXFBl2Lt6CYWxcqunT
kTXeR5aV6YbN1wukYnqz5aj+IjI2Efwg/p6bx44Qi4KRfmAmd+FfhrsuEf4ulx0b
9kexbD+a7WsMfnBDztTG6Hgb5mVFPrZVOlwb2u4t1MlptFSMCZZNBj9xOfeis078
NapMEpmE/zUw0/+FnPWgBKZLOWal0matyVLgB3yEDUbWjUTtFmQahHI/Ik6b1+0j
f5/nqJiqKMo9uz9w+K129d920HunXPnX9A==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:54:00 2026 by rpki-client