Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/9019d858-2100-336c-b9a0-7cdba25bcf29.roa
File:                     9019d858-2100-336c-b9a0-7cdba25bcf29.roa (raw, json)
Hash identifier:          FXb39rlyzUshd8nxdN6DqnzqQQnBDyQXOhmEs9nEyDc=
Subject key identifier:   F5:42:37:79:8D:79:82:73:9B:C4:B9:0A:1A:D2:75:48:6C:E2:90:A0
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584EED521CF1DCDFB16C8305F980
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/9019d858-2100-336c-b9a0-7cdba25bcf29.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2606:3dc0:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:1c:f1:dc:df:b1:6c:83:05:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=0e7e2c78-eb37-40ad-9b7f-ae4c8f88115f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c7:8c:bb:f3:f9:d1:67:09:40:94:93:f9:c8:
                    b8:7d:75:53:09:8e:5c:c0:b1:1a:c1:dc:b2:c8:50:
                    bd:da:85:6e:ff:65:6b:65:40:b7:a5:12:f5:37:4a:
                    af:48:30:bb:3b:35:2d:6d:f3:56:36:1a:b7:cf:5b:
                    d9:e8:57:d1:19:1b:6a:a3:d2:29:74:56:90:81:fd:
                    c0:3b:73:09:2f:1e:be:14:3a:f1:aa:cd:93:3f:7f:
                    46:02:98:23:65:ea:7a:cc:d4:ae:38:b4:61:6f:0b:
                    15:8f:c0:03:05:e3:7e:42:ca:72:b3:9f:9e:36:e5:
                    b4:59:59:85:25:1e:32:5a:ac:ef:47:48:73:df:56:
                    00:be:30:db:f4:af:cd:87:ce:b0:4c:3f:f7:7a:15:
                    92:82:9d:37:48:50:7b:f6:2e:f3:f7:d2:e8:ac:2e:
                    04:1a:32:72:7e:9c:bf:52:52:8e:b0:0c:dd:66:d2:
                    96:0c:54:d3:98:a1:56:00:89:6e:e9:8a:0b:3b:ff:
                    33:4f:5e:fd:c1:28:4a:2c:0e:19:f0:a0:e4:06:58:
                    38:bc:b4:a5:a6:c2:8f:f0:bc:32:7d:85:5a:63:12:
                    c7:bd:5a:e9:a2:9f:77:37:64:3b:0a:8e:2c:31:b3:
                    3a:88:7a:09:13:85:83:60:22:12:f3:f0:c1:e1:0b:
                    11:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:42:37:79:8D:79:82:73:9B:C4:B9:0A:1A:D2:75:48:6C:E2:90:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/9019d858-2100-336c-b9a0-7cdba25bcf29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3dc0:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a9:fa:ca:a0:58:2f:29:25:99:36:fa:e5:2b:e4:47:e1:3e:
         c6:54:0d:4a:62:17:29:15:04:73:4f:e0:c7:ab:21:d2:4a:b6:
         1b:7d:ab:be:55:41:a2:4d:49:2f:29:54:f8:b4:58:6f:fa:29:
         a0:ed:ab:7d:ad:37:57:91:82:86:0a:09:e3:33:8c:c7:b1:37:
         87:26:85:5f:09:ef:3d:22:47:94:a5:15:ba:6c:85:4e:22:70:
         08:9f:3e:ad:8d:90:e2:e9:2f:01:af:ab:9e:c6:1e:83:cd:52:
         c2:47:ca:15:01:89:c9:4a:d9:87:c2:a7:97:3f:22:b0:65:f5:
         52:61:17:88:39:be:0f:4d:c7:e3:be:8b:aa:b9:24:5a:eb:48:
         8b:58:a9:be:bb:da:ab:f1:6d:5b:3a:c5:b7:c2:db:c1:58:a1:
         b5:bc:de:58:a0:a9:7b:7e:18:85:50:45:47:cf:4d:db:b8:30:
         c1:15:fa:a8:c2:8d:e6:38:62:af:72:97:5f:21:1e:2d:47:7a:
         23:42:f8:57:da:38:2d:37:fb:35:67:7c:03:a9:91:03:5e:99:
         5c:4e:f5:4d:fd:f2:10:e4:61:d9:2c:dc:5e:f4:89:7b:d3:dc:
         99:b4:91:c4:60:b3:f9:d2:5d:f9:63:04:d6:d0:75:3f:3b:d9:
         85:b8:db:3a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7tUhzx3N+xbIMF+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmMjlhMTYtZTdiMS00MGM4LTg3YmMtMzRlMmM1NjI0
ODYyMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
MGU3ZTJjNzgtZWIzNy00MGFkLTliN2YtYWU0YzhmODgxMTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8eMu/P50WcJQJST+ci4fXVTCY5cwLEawdyy
yFC92oVu/2VrZUC3pRL1N0qvSDC7OzUtbfNWNhq3z1vZ6FfRGRtqo9IpdFaQgf3A
O3MJLx6+FDrxqs2TP39GApgjZep6zNSuOLRhbwsVj8ADBeN+Qspys5+eNuW0WVmF
JR4yWqzvR0hz31YAvjDb9K/Nh86wTD/3ehWSgp03SFB79i7z99LorC4EGjJyfpy/
UlKOsAzdZtKWDFTTmKFWAIlu6YoLO/8zT179wShKLA4Z8KDkBlg4vLSlpsKP8Lwy
fYVaYxLHvVrpop93N2Q7Co4sMbM6iHoJE4WDYCIS8/DB4QsRxwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPVCN3mNeYJzm8S5ChrSdUhs4pCgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWYy
OWExNi1lN2IxLTQwYzgtODdiYy0zNGUyYzU2MjQ4NjIvOTAxOWQ4NTgtMjEwMC0z
MzZjLWI5YTAtN2NkYmEyNWJjZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmMjlhMTYtZTdiMS00MGM4LTg3
YmMtMzRlMmM1NjI0ODYyL2Q5ZjI5YTE2LWU3YjEtNDBjOC04N2JjLTM0ZTJjNTYy
NDg2Mi5jcmwwHwYDVR0jBBgwFoAU2/qD/m2Wzcxs3joVtCCYnWPXtjMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWYyOWExNi1lN2IxLTQwYzgtODdiYy0zNGUy
YzU2MjQ4NjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgY9wCAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAl6n6yqBYLyklmTb65SvkR+E+xlQNSmIXKRUEc0/gx6sh0kq2G32r
vlVBok1JLylU+LRYb/opoO2rfa03V5GChgoJ4zOMx7E3hyaFXwnvPSJHlKUVumyF
TiJwCJ8+rY2Q4ukvAa+rnsYeg81SwkfKFQGJyUrZh8Knlz8isGX1UmEXiDm+D03H
476LqrkkWutIi1ipvrvaq/FtWzrFt8LbwVihtbzeWKCpe34YhVBFR89N27gwwRX6
qMKN5jhir3KXXyEeLUd6I0L4V9o4LTf7NWd8A6mRA16ZXE71Tf3yEORh2SzcXvSJ
e9PcmbSRxGCz+dJd+WME1tB1PzvZhbjbOg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:32:37 2026 by rpki-client