Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/689b6d84-5481-319d-a444-836935fcee29.roa
File:                     689b6d84-5481-319d-a444-836935fcee29.roa (raw, json)
Hash identifier:          49mxD0uSdAcjgFtQOFW8z97tn8vHUlf3AVxba2207hI=
Subject key identifier:   06:1E:1E:D5:D8:07:45:DB:D8:84:AC:65:68:B5:D7:D8:58:7D:2C:83
Certificate issuer:       /CN=17624d03-2126-49cd-8e8c-c3d5089ac686
Certificate serial:       010D0C9F4328584ECBD1DFEAF842655CB0BC6E40
Authority key identifier: 32:7C:86:31:15:EB:0A:82:29:D2:0E:0B:64:46:E7:84:0F:73:57:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/689b6d84-5481-319d-a444-836935fcee29.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     14923
IP address blocks:        2602:f92b::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:df:ea:f8:42:65:5c:b0:bc:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17624d03-2126-49cd-8e8c-c3d5089ac686
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=0b0b22d4-636d-4560-95b3-5a5fbaf2eda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:ec:c3:66:26:24:22:c1:4c:58:92:3f:9e:
                    6f:6b:93:93:c6:26:cd:5d:2c:94:0d:a8:d9:3c:e1:
                    dd:a9:3b:be:d9:d9:09:dc:80:83:e4:37:ce:8a:90:
                    84:87:30:b8:94:2d:0f:18:af:79:c3:13:49:6f:7e:
                    78:eb:fb:08:e3:01:9f:48:83:32:44:ac:58:e6:5f:
                    cf:56:6d:2e:38:7a:36:ca:90:18:d7:34:8e:16:17:
                    7a:11:a7:25:40:1c:ee:ad:c5:ea:8d:37:86:43:ee:
                    0e:80:a4:d1:ee:a0:e7:40:e1:3b:5b:a2:7c:3c:36:
                    c4:4f:f4:69:9f:ba:1d:96:ac:3e:ff:53:1d:4a:19:
                    7a:7d:d4:42:a6:d6:95:c7:c9:f2:9c:76:8d:88:c3:
                    db:20:fa:04:59:71:2c:8a:c0:5f:45:4e:65:f1:70:
                    86:9d:82:40:59:4b:54:ee:c7:56:31:eb:48:3d:82:
                    ed:e9:eb:11:ce:a4:d3:ac:91:4d:58:81:aa:81:ec:
                    dc:db:89:eb:0b:9b:aa:33:67:99:63:b6:90:d3:ac:
                    a1:6f:2e:df:b0:5e:f6:9d:36:e5:39:bc:55:cb:c4:
                    a7:08:4a:16:bf:c3:7f:ed:1e:a2:66:9b:34:a1:36:
                    e3:08:99:9d:34:5c:f7:47:d7:62:b8:b3:0d:a0:c2:
                    fc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1E:1E:D5:D8:07:45:DB:D8:84:AC:65:68:B5:D7:D8:58:7D:2C:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/689b6d84-5481-319d-a444-836935fcee29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.crl

            X509v3 Authority Key Identifier:
                keyid:32:7C:86:31:15:EB:0A:82:29:D2:0E:0B:64:46:E7:84:0F:73:57:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6f:24:57:7c:0b:cd:c3:68:d2:63:7b:c0:10:34:d2:0d:61:
         1d:b1:9a:6c:76:cc:93:83:ff:81:91:2f:fb:5d:8c:88:de:5f:
         ed:0c:4e:fe:49:6d:4e:0d:c7:fb:26:e2:80:ec:77:f1:a7:6a:
         1a:4c:f2:fd:ad:f7:46:99:91:28:09:b4:6f:e8:62:1d:5c:dc:
         45:35:5d:b6:5a:01:e7:64:1b:71:98:a0:80:b0:89:f2:34:ff:
         9c:57:f0:c4:58:23:86:14:e6:a7:b5:3b:41:fc:07:a1:29:ca:
         79:d3:fd:38:6f:86:2c:53:ee:0c:d1:6d:b2:b2:5b:4e:fe:16:
         a6:ae:1a:7b:67:58:cc:cc:7e:23:9d:fe:38:03:20:23:1b:08:
         dd:2b:2a:59:8e:3a:7a:dc:47:bd:66:6c:51:b0:d5:b8:52:50:
         6b:b3:1d:f4:7f:dc:8c:dd:92:2d:09:2b:d8:1c:00:37:f1:a3:
         38:9a:e0:22:ce:d1:9c:23:db:8e:d3:91:18:cc:b1:e8:32:97:
         53:c4:12:8f:7b:f3:6d:cc:ea:d3:29:4e:2a:8a:93:0a:a6:70:
         80:7a:d3:8a:73:f1:d7:53:b9:69:aa:93:61:54:6d:04:ab:ab:
         2a:1f:4d:61:89:bc:e4:f1:62:91:e5:1d:3d:22:f2:17:5d:55:
         ed:8a:47:82
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7L0d/q+EJlXLC8bkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc2MjRkMDMtMjEyNi00OWNkLThlOGMtYzNkNTA4OWFj
Njg2MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
MGIwYjIyZDQtNjM2ZC00NTYwLTk1YjMtNWE1ZmJhZjJlZGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSjsw2YmJCLBTFiSP55va5OTxibNXSyUDajZ
POHdqTu+2dkJ3ICD5DfOipCEhzC4lC0PGK95wxNJb3546/sI4wGfSIMyRKxY5l/P
Vm0uOHo2ypAY1zSOFhd6EaclQBzurcXqjTeGQ+4OgKTR7qDnQOE7W6J8PDbET/Rp
n7odlqw+/1MdShl6fdRCptaVx8nynHaNiMPbIPoEWXEsisBfRU5l8XCGnYJAWUtU
7sdWMetIPYLt6esRzqTTrJFNWIGqgezc24nrC5uqM2eZY7aQ06yhby7fsF72nTbl
ObxVy8SnCEoWv8N/7R6iZps0oTbjCJmdNFz3R9diuLMNoML8dQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAYeHtXYB0Xb2ISsZWi119hYfSyDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xNzYy
NGQwMy0yMTI2LTQ5Y2QtOGU4Yy1jM2Q1MDg5YWM2ODYvNjg5YjZkODQtNTQ4MS0z
MTlkLWE0NDQtODM2OTM1ZmNlZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTc2MjRkMDMtMjEyNi00OWNkLThl
OGMtYzNkNTA4OWFjNjg2LzE3NjI0ZDAzLTIxMjYtNDljZC04ZThjLWMzZDUwODlh
YzY4Ni5jcmwwHwYDVR0jBBgwFoAUMnyGMRXrCoIp0g4LZEbnhA9zV6cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xNzYyNGQwMy0yMTI2LTQ5Y2QtOGU4Yy1jM2Q1
MDg5YWM2ODYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5KwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAYW8kV3wLzcNo0mN7wBA00g1hHbGabHbMk4P/gZEv+12MiN5f7QxO
/kltTg3H+ybigOx38adqGkzy/a33RpmRKAm0b+hiHVzcRTVdtloB52QbcZiggLCJ
8jT/nFfwxFgjhhTmp7U7QfwHoSnKedP9OG+GLFPuDNFtsrJbTv4Wpq4ae2dYzMx+
I53+OAMgIxsI3SsqWY46etxHvWZsUbDVuFJQa7Md9H/cjN2SLQkr2BwAN/GjOJrg
Is7RnCPbjtORGMyx6DKXU8QSj3vzbczq0ylOKoqTCqZwgHrTinPx11O5aaqTYVRt
BKurKh9NYYm85PFikeUdPSLyF11V7YpHgg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 15:09:15 2026 by rpki-client