Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa
File:                     b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa (raw, json)
Hash identifier:          2tl4XVeL5K4e9RpRK7lwOQP5TKjA38l6ieor90jgLIc=
Subject key identifier:   DA:83:67:B1:46:E4:08:13:F2:71:0B:EA:F7:AC:1D:2E:84:9C:62:AE
Certificate issuer:       /CN=e97da778-a1f6-4dad-9d0a-d3a070010373
Certificate serial:       010D0C9F4328584F497409BF99A860C28CD82ECB
Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21538
IP address blocks:        2602:fc30:a4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:09:bf:99:a8:60:c2:8c:d8:2e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b48b853a-f467-4ac9-a88f-4b421d92f43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:ea:e7:67:86:06:5d:15:18:cd:b8:fb:65:
                    fb:86:20:46:6b:44:f8:79:9c:3f:ad:25:a0:18:5b:
                    17:b2:5a:a6:50:d8:65:3e:53:f8:ba:b9:85:54:7a:
                    19:a9:05:a2:92:dd:d7:89:88:c4:51:cd:91:d9:bd:
                    7d:49:db:32:df:9f:4f:36:1a:a8:b2:43:ba:ce:3f:
                    ed:fb:75:77:18:41:c0:58:86:de:59:db:23:79:a6:
                    ab:43:bc:ef:49:41:08:0a:3a:dc:ee:00:01:ff:cb:
                    32:c5:51:52:f0:b3:94:34:ec:1a:a5:82:b3:ac:77:
                    04:0d:33:12:8f:77:9d:fa:59:3e:bb:ef:80:b5:19:
                    37:22:8c:e3:ba:4c:b4:b0:2e:11:b7:7e:ef:19:0c:
                    97:0d:d6:02:ae:f7:d1:68:15:91:81:58:b5:f1:1b:
                    de:8e:54:6c:7d:5f:7e:83:91:a7:11:c4:43:32:fa:
                    11:75:87:05:40:2a:1c:75:dd:d6:42:ab:67:a1:08:
                    35:49:1e:50:95:be:ab:a6:f8:1e:e4:5a:6a:34:2d:
                    37:72:80:12:c3:48:9a:9b:e6:e6:08:dd:4a:16:25:
                    30:46:09:be:c1:88:b3:f1:43:fc:71:c0:04:20:d2:
                    80:6d:f4:e0:b4:70:43:31:05:4c:ea:4e:9a:35:d3:
                    be:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:83:67:B1:46:E4:08:13:F2:71:0B:EA:F7:AC:1D:2E:84:9C:62:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl

            X509v3 Authority Key Identifier:
                keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc30:a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:09:c3:b6:2b:ff:d0:36:c4:81:7c:2a:63:9d:aa:38:e4:a1:
         7e:3e:da:ac:d5:65:3f:62:7f:d3:0c:1b:5a:fb:d2:30:c6:5d:
         d6:7b:27:83:da:81:cc:8e:a5:37:a3:8a:c0:76:9b:88:a1:4d:
         cd:45:3d:c2:1e:a3:67:c3:5e:89:5c:84:35:0c:80:67:2c:67:
         b0:e7:28:f3:da:c7:b3:8f:38:75:ee:f6:e3:80:48:70:39:04:
         35:46:64:18:9d:df:65:63:a9:c4:b5:2f:25:16:3a:dc:88:d3:
         1c:ed:e1:ea:72:ef:34:23:b8:fc:71:a8:96:87:00:9e:75:d1:
         90:8a:17:34:fb:7d:ec:5f:e2:ae:88:91:15:87:9a:ce:a2:6a:
         a3:8d:76:4e:8b:ee:e2:60:41:51:06:f9:28:2a:82:ac:64:83:
         0c:cc:2e:37:b9:10:ad:c8:09:89:08:c5:c2:92:a8:f0:a7:fa:
         84:7f:1e:a2:9a:6e:03:ed:d4:36:7a:c0:96:eb:f2:4e:b9:77:
         d1:9c:ae:e6:83:41:ec:02:d1:52:97:9c:68:4f:57:2a:5b:87:
         5a:ad:84:a9:95:80:19:bd:cd:a7:59:a3:0f:e9:ed:65:50:d5:
         90:58:9b:65:24:f4:41:37:87:71:95:88:26:1d:58:b4:49:47:
         5b:2f:4d:e7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdAm/mahgwozYLsswDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk3ZGE3NzgtYTFmNi00ZGFkLTlkMGEtZDNhMDcwMDEw
MzczMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjQ4Yjg1M2EtZjQ2Ny00YWM5LWE4OGYtNGI0MjFkOTJmNDNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ3q52eGBl0VGM24+2X7hiBGa0T4eZw/rSWg
GFsXslqmUNhlPlP4urmFVHoZqQWikt3XiYjEUc2R2b19Sdsy359PNhqoskO6zj/t
+3V3GEHAWIbeWdsjeaarQ7zvSUEICjrc7gAB/8syxVFS8LOUNOwapYKzrHcEDTMS
j3ed+lk+u++AtRk3Iozjuky0sC4Rt37vGQyXDdYCrvfRaBWRgVi18RvejlRsfV9+
g5GnEcRDMvoRdYcFQCocdd3WQqtnoQg1SR5Qlb6rpvge5FpqNC03coASw0iam+bm
CN1KFiUwRgm+wYiz8UP8ccAEINKAbfTgtHBDMQVM6k6aNdO+6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNqDZ7FG5AgT8nEL6vesHS6EnGKuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdk
YTc3OC1hMWY2LTRkYWQtOWQwYS1kM2EwNzAwMTAzNzMvYjhlZjM5YmEtOGEzMS0z
ODlhLWEyZTgtNWM1ZWIzYmRkM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk3ZGE3NzgtYTFmNi00ZGFkLTlk
MGEtZDNhMDcwMDEwMzczL2U5N2RhNzc4LWExZjYtNGRhZC05ZDBhLWQzYTA3MDAx
MDM3My5jcmwwHwYDVR0jBBgwFoAUMuC2ppBpQiEgQL1KkOWS4I8ee6owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdkYTc3OC1hMWY2LTRkYWQtOWQwYS1kM2Ew
NzAwMTAzNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8MACk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFEJw7Yr/9A2xIF8KmOdqjjkoX4+2qzVZT9if9MMG1r70jDGXdZ7
J4PagcyOpTejisB2m4ihTc1FPcIeo2fDXolchDUMgGcsZ7DnKPPax7OPOHXu9uOA
SHA5BDVGZBid32VjqcS1LyUWOtyI0xzt4epy7zQjuPxxqJaHAJ510ZCKFzT7fexf
4q6IkRWHms6iaqONdk6L7uJgQVEG+SgqgqxkgwzMLje5EK3ICYkIxcKSqPCn+oR/
HqKabgPt1DZ6wJbr8k65d9GcruaDQewC0VKXnGhPVypbh1qthKmVgBm9zadZow/p
7WVQ1ZBYm2Uk9EE3h3GViCYdWLRJR1svTec=
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:33:01 2026 by rpki-client