Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/66dd72c0-5379-38a2-89af-5967055d3006.roa
File:                     66dd72c0-5379-38a2-89af-5967055d3006.roa (raw, json)
Hash identifier:          bQuNQBaY12zdVOFcnDPQng8FG/hAyJSpOKbSkakXrHY=
Subject key identifier:   3D:28:D3:5B:9C:DE:2A:DF:47:A6:78:94:7D:B9:7A:82:9A:8A:6D:9F
Certificate issuer:       /CN=79e9b329-e246-44a9-83eb-07fbccf4f7e0
Certificate serial:       010D0C9F4328584F225CFE4B376BB6EE34D2E280
Authority key identifier: 98:D3:AB:23:1F:74:45:7D:49:5C:ED:49:0F:4C:50:B7:CA:C7:6F:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/66dd72c0-5379-38a2-89af-5967055d3006.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     394230
IP address blocks:        2602:fd3f::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/79e9b329-e246-44a9-83eb-07fbccf4f7e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/79e9b329-e246-44a9-83eb-07fbccf4f7e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5c:fe:4b:37:6b:b6:ee:34:d2:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e9b329-e246-44a9-83eb-07fbccf4f7e0
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=4c5cdf67-105c-402a-872e-19d1229890be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b8:0f:c5:a3:33:6b:54:2a:5f:27:b9:5f:9a:
                    80:7b:22:5a:b4:a8:ee:73:01:0a:93:44:e3:aa:2e:
                    ff:bd:15:83:63:fc:25:37:99:f0:3b:13:55:0f:6b:
                    72:18:df:c0:63:62:6a:5f:d5:97:a0:ca:a1:e9:9a:
                    eb:0b:79:02:df:50:32:fa:97:1f:73:11:dc:9f:01:
                    a5:90:4b:d9:4e:4a:5c:34:17:0f:62:13:41:16:c2:
                    46:37:2e:bc:a5:5e:8e:70:fd:0d:c1:37:65:59:d1:
                    0b:bc:3c:49:5d:d2:ad:a1:10:0d:ea:e0:70:70:51:
                    69:21:79:63:18:8a:66:ad:8e:3f:c5:8f:49:c2:b2:
                    cc:4d:ac:61:37:0b:61:56:93:17:f8:3f:77:13:4c:
                    93:9f:b4:5e:1e:16:02:a2:14:e2:08:f1:90:fc:8b:
                    c9:f8:c7:f2:6f:e6:d8:9d:14:40:f9:25:98:36:5c:
                    aa:e8:8b:23:57:0e:18:f6:39:a6:f2:57:50:ac:d4:
                    0f:21:e5:55:ff:16:6d:db:c2:a1:74:b5:ed:4b:ac:
                    ba:ac:d1:3e:d8:57:7c:70:ff:d4:92:5d:99:a9:bd:
                    d1:34:a7:fb:26:fe:17:18:62:60:72:65:51:6e:b8:
                    28:57:50:c8:da:11:d2:66:70:b1:fb:65:93:fa:37:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:28:D3:5B:9C:DE:2A:DF:47:A6:78:94:7D:B9:7A:82:9A:8A:6D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/66dd72c0-5379-38a2-89af-5967055d3006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/79e9b329-e246-44a9-83eb-07fbccf4f7e0.crl

            X509v3 Authority Key Identifier:
                keyid:98:D3:AB:23:1F:74:45:7D:49:5C:ED:49:0F:4C:50:B7:CA:C7:6F:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd3f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:1b:89:e0:bc:c7:63:56:70:9d:35:27:cf:43:29:3c:6a:c9:
         e4:b4:5b:53:87:44:68:20:d2:ba:b4:48:a5:30:3e:04:7e:99:
         e2:9a:46:e3:aa:45:89:1f:a3:6f:66:d9:29:ff:b5:15:e2:bc:
         43:3b:fb:3d:e6:1a:b0:92:19:8d:e5:be:c5:67:fe:19:a6:0f:
         1b:3b:ee:42:4c:4e:2a:84:c9:0f:73:61:87:ab:18:eb:6b:9a:
         aa:bd:44:10:7d:36:a5:ff:69:a7:3d:ff:08:03:99:17:08:e7:
         75:41:48:aa:90:1d:ce:e2:08:e7:3b:e7:e0:a9:ed:bc:ed:f8:
         4c:d6:6f:a7:7f:59:36:02:fe:f3:90:93:92:c2:26:be:70:b0:
         1a:02:3f:d7:7c:33:31:9d:51:0d:cd:db:d7:44:70:c3:b4:a4:
         02:cf:a4:8e:78:0d:9c:0e:7f:12:22:13:e5:1f:99:31:ad:4b:
         a4:b5:86:28:8d:6d:22:da:bb:99:57:47:98:b9:d7:1b:8c:8d:
         e3:70:1c:e1:7b:83:5a:28:0d:5b:1b:9c:49:ac:f3:66:7c:ef:
         55:6c:b5:e3:f0:d3:cc:7b:94:bc:47:1e:08:3b:fa:02:cb:9e:
         33:0b:82:ea:99:81:8c:41:c9:8e:30:7f:2d:d4:37:c0:fe:7f:
         8e:c7:d4:e8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8iXP5LN2u27jTS4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzllOWIzMjktZTI0Ni00NGE5LTgzZWItMDdmYmNjZjRm
N2UwMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
NGM1Y2RmNjctMTA1Yy00MDJhLTg3MmUtMTlkMTIyOTg5MGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7gPxaMza1QqXye5X5qAeyJatKjucwEKk0Tj
qi7/vRWDY/wlN5nwOxNVD2tyGN/AY2JqX9WXoMqh6ZrrC3kC31Ay+pcfcxHcnwGl
kEvZTkpcNBcPYhNBFsJGNy68pV6OcP0NwTdlWdELvDxJXdKtoRAN6uBwcFFpIXlj
GIpmrY4/xY9JwrLMTaxhNwthVpMX+D93E0yTn7ReHhYCohTiCPGQ/IvJ+Mfyb+bY
nRRA+SWYNlyq6IsjVw4Y9jmm8ldQrNQPIeVV/xZt28KhdLXtS6y6rNE+2Fd8cP/U
kl2Zqb3RNKf7Jv4XGGJgcmVRbrgoV1DI2hHSZnCx+2WT+jci+QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFD0o01uc3irfR6Z4lH25eoKaim2fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83OWU5
YjMyOS1lMjQ2LTQ0YTktODNlYi0wN2ZiY2NmNGY3ZTAvNjZkZDcyYzAtNTM3OS0z
OGEyLTg5YWYtNTk2NzA1NWQzMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzllOWIzMjktZTI0Ni00NGE5LTgz
ZWItMDdmYmNjZjRmN2UwLzc5ZTliMzI5LWUyNDYtNDRhOS04M2ViLTA3ZmJjY2Y0
ZjdlMC5jcmwwHwYDVR0jBBgwFoAUmNOrIx90RX1JXO1JD0xQt8rHb3AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83OWU5YjMyOS1lMjQ2LTQ0YTktODNlYi0wN2Zi
Y2NmNGY3ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9PwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACRuJ4LzHY1ZwnTUnz0MpPGrJ5LRbU4dEaCDSurRIpTA+BH6Z4ppG
46pFiR+jb2bZKf+1FeK8Qzv7PeYasJIZjeW+xWf+GaYPGzvuQkxOKoTJD3Nhh6sY
62uaqr1EEH02pf9ppz3/CAOZFwjndUFIqpAdzuII5zvn4KntvO34TNZvp39ZNgL+
85CTksImvnCwGgI/13wzMZ1RDc3b10Rww7SkAs+kjngNnA5/EiIT5R+ZMa1LpLWG
KI1tItq7mVdHmLnXG4yN43Ac4XuDWigNWxucSazzZnzvVWy14/DTzHuUvEceCDv6
AsueMwuC6pmBjEHJjjB/LdQ3wP5/jsfU6A==
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:41:27 2026 by rpki-client