Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1b63046d-f519-3f13-a304-7091d7eabb92.roa
File:                     1b63046d-f519-3f13-a304-7091d7eabb92.roa (raw, json)
Hash identifier:          SnZtS+Gs58a6OY3lv3uW3lUENrUVgpBEVgboXFA5gYw=
Subject key identifier:   64:D6:4E:EB:3C:61:F0:7B:26:F3:CD:72:37:94:98:C7:8C:D1:07:96
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F4328584F49767A27E2382E831CF98F40
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1b63046d-f519-3f13-a304-7091d7eabb92.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     53727
IP address blocks:        2602:f982:200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:7a:27:e2:38:2e:83:1c:f9:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5845b7ad-d01b-4be3-881f-085e538dd7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:45:6e:43:ab:9c:ab:8f:14:ee:7c:c9:cf:
                    58:14:6f:38:e2:18:cf:c5:b2:7a:d1:bb:fa:b2:39:
                    da:8b:c3:3b:c9:67:ee:f5:4d:6c:af:b2:65:a6:89:
                    ed:63:c4:cb:b8:06:2d:f2:d0:3d:e8:74:e3:7e:18:
                    35:f1:ed:97:26:c8:7d:9d:ac:0a:cc:90:2e:4d:27:
                    0d:d7:c0:35:dd:c8:d6:73:e9:f4:46:40:a6:25:ea:
                    13:a9:12:5f:10:eb:fd:fe:91:30:9f:cf:07:14:11:
                    d1:97:5f:b1:71:f5:04:d9:b9:60:86:59:17:2f:73:
                    58:b7:8f:b6:d5:49:fd:2c:c7:32:b7:46:c3:6e:f4:
                    91:2b:72:ef:e6:53:09:06:63:a2:70:1f:b3:81:20:
                    c9:d7:8b:3f:ff:8d:b3:24:76:15:5f:a3:3b:19:e7:
                    d4:7b:bf:51:88:38:85:97:e9:27:63:81:3d:56:fa:
                    d4:34:8a:d8:80:55:d8:ea:8c:82:a8:cf:c4:7f:4e:
                    b1:6a:96:59:fa:bc:2b:25:18:ef:26:cc:b9:88:b1:
                    be:97:ac:97:d2:5a:7c:3f:a9:44:ce:9b:b3:17:63:
                    dd:0c:d9:10:83:6e:15:e9:7e:a0:34:af:c2:72:ce:
                    28:5c:c9:dc:51:ae:b0:b9:13:35:03:a2:8c:d7:6d:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D6:4E:EB:3C:61:F0:7B:26:F3:CD:72:37:94:98:C7:8C:D1:07:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1b63046d-f519-3f13-a304-7091d7eabb92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:5b:98:cd:9c:61:91:2b:0a:ef:93:8f:17:56:ce:f8:ac:7c:
         42:be:d9:15:b3:20:39:76:ab:8e:64:57:e1:01:e8:81:c1:80:
         47:67:c0:da:0f:97:88:75:ec:cd:8a:68:60:74:5c:da:49:7a:
         58:09:b0:89:8f:b4:11:e1:60:52:a1:bc:b3:d8:c8:0d:d4:b5:
         9a:53:c0:ea:59:11:b2:67:6b:1e:67:8d:e2:50:dc:30:34:15:
         b9:84:28:e8:61:fb:c6:2d:db:03:ad:c6:be:31:ed:35:83:6f:
         c5:0f:91:ac:e0:d8:8c:01:1c:12:d9:7a:86:6d:97:ce:17:12:
         2c:34:3a:55:40:38:ea:fa:d1:4a:0b:0c:7a:f9:5b:59:8e:0a:
         8e:29:da:4a:a2:06:c9:77:cd:67:af:9c:4e:a4:aa:3c:97:3a:
         5e:b4:ec:fd:e4:cb:80:22:6a:b4:6c:3e:e2:06:16:78:89:a4:
         9a:97:79:98:cf:84:c0:09:37:cc:01:66:5f:f3:e0:2b:fc:53:
         2b:90:ef:6e:80:c0:a0:ad:71:9a:ee:d4:02:dc:17:91:0d:4c:
         3d:09:63:a1:9c:e9:6f:4b:71:a0:9a:05:7b:53:76:ee:e8:b0:
         fe:2a:ef:55:7e:cc:5b:9d:12:92:01:6c:3d:a2:84:2a:85:d1:
         8f:7f:3a:64
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jdnon4jgugxz5j0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3
MmYzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTg0NWI3YWQtZDAxYi00YmUzLTg4MWYtMDg1ZTUzOGRkN2U0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzJFbkOrnKuPFO58yc9YFG844hjPxbJ60bv6
sjnai8M7yWfu9U1sr7JlpontY8TLuAYt8tA96HTjfhg18e2XJsh9nawKzJAuTScN
18A13cjWc+n0RkCmJeoTqRJfEOv9/pEwn88HFBHRl1+xcfUE2blghlkXL3NYt4+2
1Un9LMcyt0bDbvSRK3Lv5lMJBmOicB+zgSDJ14s//42zJHYVX6M7GefUe79RiDiF
l+knY4E9VvrUNIrYgFXY6oyCqM/Ef06xapZZ+rwrJRjvJsy5iLG+l6yX0lp8P6lE
zpuzF2PdDNkQg24V6X6gNK/Ccs4oXMncUa6wuRM1A6KM122IUQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGTWTus8YfB7JvPNcjeUmMeM0QeWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj
ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvMWI2MzA0NmQtZjUxOS0z
ZjEzLWEzMDQtNzA5MWQ3ZWFiYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz
MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4
NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh
ZjVhODcyZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL5ggIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEBbmM2cYZErCu+TjxdWzvisfEK+2RWzIDl2q45kV+EB6IHBgEdn
wNoPl4h17M2KaGB0XNpJelgJsImPtBHhYFKhvLPYyA3UtZpTwOpZEbJnax5njeJQ
3DA0FbmEKOhh+8Yt2wOtxr4x7TWDb8UPkazg2IwBHBLZeoZtl84XEiw0OlVAOOr6
0UoLDHr5W1mOCo4p2kqiBsl3zWevnE6kqjyXOl607P3ky4AiarRsPuIGFniJpJqX
eZjPhMAJN8wBZl/z4Cv8UyuQ726AwKCtcZru1ALcF5ENTD0JY6Gc6W9LcaCaBXtT
du7osP4q71V+zFudEpIBbD2ihCqF0Y9/OmQ=
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:18:10 2026 by rpki-client