Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/2aad301a-fb8f-39e6-9c9b-9f96f0e577fd.roa
File:                     2aad301a-fb8f-39e6-9c9b-9f96f0e577fd.roa (raw, json)
Hash identifier:          umqWgH9h9QGRgS/zRucvgfLryBh7m8mn5ST5zDlP+WU=
Subject key identifier:   30:03:56:05:06:40:5B:3B:DE:BD:01:80:97:32:6A:16:C3:70:00:41
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584F4976C474077CEB9BA850C3F0
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/2aad301a-fb8f-39e6-9c9b-9f96f0e577fd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     63150
IP address blocks:        2602:f988:c0::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:c4:74:07:7c:eb:9b:a8:50:c3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=908f9649-792f-4d87-bf10-3ac3c3c809a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e7:03:6b:d9:ce:e0:a9:d9:b8:53:28:0b:78:
                    6f:f6:b8:d7:f2:47:d7:03:cb:79:91:53:a8:22:0a:
                    ff:9e:cc:40:84:72:79:3e:30:92:d1:7d:63:73:88:
                    d1:58:ef:c2:9b:8c:40:bf:61:71:61:5f:ee:99:fb:
                    27:09:89:29:93:80:7a:0d:3d:8b:1d:e4:52:fd:f4:
                    28:c3:cc:65:3d:c9:b3:f1:c6:ec:2d:54:42:ad:38:
                    91:1f:09:74:96:ef:ff:8d:ca:ab:8d:a8:08:fa:65:
                    f3:c2:ca:ac:66:4e:94:74:60:77:4e:e5:57:4b:6b:
                    d9:d6:3d:03:23:55:ad:b3:5b:1d:b4:4e:44:b6:1e:
                    41:ad:dd:8c:28:68:b7:53:0f:a5:12:30:38:8b:87:
                    e3:bc:04:46:1c:10:d9:d7:b9:48:92:e3:8c:6f:cb:
                    c6:a9:06:d8:e8:40:a1:a6:b5:5c:36:36:98:77:73:
                    b0:b0:5a:44:94:a9:bc:c4:11:62:88:c3:f0:da:e9:
                    7e:63:ee:65:1a:f8:10:74:46:f1:c6:a2:f5:ec:85:
                    40:b6:bb:d4:82:52:e9:d5:20:0e:ae:d6:50:ef:8f:
                    a2:57:f5:9c:5e:28:d6:2c:97:30:3e:05:de:12:33:
                    26:f9:b0:0d:64:c8:da:60:10:da:55:17:23:12:d4:
                    63:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:03:56:05:06:40:5B:3B:DE:BD:01:80:97:32:6A:16:C3:70:00:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/2aad301a-fb8f-39e6-9c9b-9f96f0e577fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:1e:53:67:5f:f1:23:e1:e7:74:36:42:c0:a1:09:25:f3:b8:
         ac:9b:26:d3:63:f2:e2:cf:97:bc:fd:27:d4:75:96:59:bf:90:
         08:b8:c5:fe:ba:ff:a4:dc:14:83:cf:57:6e:46:be:e9:ba:38:
         b3:14:f7:ea:66:2b:64:18:1d:52:2a:b2:5f:76:92:f1:fa:e0:
         b5:b0:39:ea:f0:8f:f9:2a:fe:57:8f:e4:61:1c:5f:32:5c:96:
         3d:9d:ca:ed:89:63:43:fc:66:19:de:e3:92:f4:4a:b0:dd:7c:
         e4:3d:f3:28:8e:3d:db:6e:33:1f:99:05:5f:99:4c:34:21:bc:
         ad:52:80:15:03:dd:ea:f5:84:21:d7:f2:28:48:03:8b:7b:f3:
         df:66:e8:71:98:2e:67:b0:2a:36:60:81:4c:c2:04:dc:b7:04:
         4e:9a:07:bf:7e:6c:19:c4:a3:fd:82:90:1e:41:56:82:bf:fb:
         3d:25:51:4d:11:9f:f6:4d:17:37:2e:aa:2e:93:61:18:85:5d:
         19:32:d5:dd:26:0e:80:be:2b:10:76:9d:ac:71:d8:3d:d5:85:
         e4:f5:fd:db:de:ad:cd:e3:57:e6:ff:ad:79:8b:57:74:74:5f:
         cc:64:42:03:d6:8c:9a:c5:64:49:bf:54:56:1f:35:04:f8:f0:
         8e:ed:82:5b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdsR0B3zrm6hQw/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMThhOTI4ZWItNDhhNS00NTYwLWEyMTctMzZjYjFlYTMy
NjQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTA4Zjk2NDktNzkyZi00ZDg3LWJmMTAtM2FjM2MzYzgwOWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+cDa9nO4KnZuFMoC3hv9rjX8kfXA8t5kVOo
Igr/nsxAhHJ5PjCS0X1jc4jRWO/Cm4xAv2FxYV/umfsnCYkpk4B6DT2LHeRS/fQo
w8xlPcmz8cbsLVRCrTiRHwl0lu//jcqrjagI+mXzwsqsZk6UdGB3TuVXS2vZ1j0D
I1Wts1sdtE5Eth5Brd2MKGi3Uw+lEjA4i4fjvARGHBDZ17lIkuOMb8vGqQbY6ECh
prVcNjaYd3OwsFpElKm8xBFiiMPw2ul+Y+5lGvgQdEbxxqL17IVAtrvUglLp1SAO
rtZQ74+iV/WcXijWLJcwPgXeEjMm+bANZMjaYBDaVRcjEtRjBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDADVgUGQFs73r0BgJcyahbDcABBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xOGE5
MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNiMWVhMzI2NDgvMmFhZDMwMWEtZmI4Zi0z
OWU2LTljOWItOWY5NmYwZTU3N2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMThhOTI4ZWItNDhhNS00NTYwLWEy
MTctMzZjYjFlYTMyNjQ4LzE4YTkyOGViLTQ4YTUtNDU2MC1hMjE3LTM2Y2IxZWEz
MjY0OC5jcmwwHwYDVR0jBBgwFoAU9H6x3C6P5f0Uj3qixMZGdbQwqzgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xOGE5MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNi
MWVhMzI2NDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL5iADA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD8eU2df8SPh53Q2QsChCSXzuKybJtNj8uLPl7z9J9R1llm/kAi4
xf66/6TcFIPPV25Gvum6OLMU9+pmK2QYHVIqsl92kvH64LWwOerwj/kq/leP5GEc
XzJclj2dyu2JY0P8Zhne45L0SrDdfOQ98yiOPdtuMx+ZBV+ZTDQhvK1SgBUD3er1
hCHX8ihIA4t7899m6HGYLmewKjZggUzCBNy3BE6aB79+bBnEo/2CkB5BVoK/+z0l
UU0Rn/ZNFzcuqi6TYRiFXRky1d0mDoC+KxB2naxx2D3VheT1/dverc3jV+b/rXmL
V3R0X8xkQgPWjJrFZEm/VFYfNQT48I7tgls=
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:24:39 2026 by rpki-client