Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/7ae25aaa-ff29-34bf-b2ee-061fd027830d.roa
File:                     7ae25aaa-ff29-34bf-b2ee-061fd027830d.roa (raw, json)
Hash identifier:          nOuv1LMdopgfq+sx9xf6Dd5x0KgJTZHGqgEH1/vvMGM=
Subject key identifier:   52:01:30:E0:4F:01:92:66:F3:7B:6D:BD:CD:13:3F:B3:E5:F5:A9:FB
Certificate issuer:       /CN=84facd9b-9eda-4887-bc69-899a3c3aec64
Certificate serial:       010D0C9F4328584F49896F0C026134480F0AA200
Authority key identifier: C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/7ae25aaa-ff29-34bf-b2ee-061fd027830d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     63183
IP address blocks:        2602:f7fc:f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:6f:0c:02:61:34:48:0f:0a:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84facd9b-9eda-4887-bc69-899a3c3aec64
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0a6d0d3f-0d9d-4fbb-8391-cb276c28c083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:19:4e:06:2d:eb:d6:f4:d7:1a:9e:be:2d:dd:
                    63:5b:24:c1:3a:66:e4:d7:f3:2f:b0:ac:4b:93:e4:
                    48:6c:0b:6b:de:8a:ac:3c:3d:6b:98:41:f3:d5:dc:
                    02:ad:8a:20:31:b2:4f:1b:f7:1b:35:d2:86:b0:ad:
                    ce:73:5b:ea:80:4f:8f:38:df:e7:8f:08:e9:d7:cf:
                    41:00:7a:fc:5c:1a:79:3d:59:c9:23:26:9d:de:1f:
                    7e:3a:08:25:f5:d5:4a:c2:78:6b:8c:bc:c0:00:bd:
                    4f:31:4b:6f:21:f7:d2:c7:b8:bd:d1:5f:b3:a0:06:
                    82:a0:cd:9c:db:a9:ff:e6:e2:75:98:49:c9:d7:b7:
                    d4:0a:ba:11:f0:fc:54:1d:0b:bd:eb:67:a8:ad:fd:
                    aa:53:dd:43:66:61:7f:43:7d:28:09:90:16:1a:38:
                    1e:27:b0:b4:fd:f1:ac:33:88:83:b4:eb:42:61:2a:
                    a6:9f:43:c1:d4:51:e0:fa:12:55:7d:e7:37:ce:6d:
                    56:92:6e:51:2d:67:ea:3d:77:80:64:9f:5d:48:e4:
                    69:49:1d:cf:2d:d2:d6:1d:6f:2b:21:79:1c:51:95:
                    3d:b3:d8:e1:dc:48:16:8a:55:5e:1c:c7:93:07:38:
                    45:df:38:05:c5:94:54:b8:e0:04:d4:e1:60:16:4d:
                    4d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:01:30:E0:4F:01:92:66:F3:7B:6D:BD:CD:13:3F:B3:E5:F5:A9:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/7ae25aaa-ff29-34bf-b2ee-061fd027830d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl

            X509v3 Authority Key Identifier:
                keyid:C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7fc:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:bd:72:93:35:53:17:e5:a3:53:6c:3e:8d:89:5d:8c:78:ea:
         a5:52:d4:9e:25:73:5f:8c:35:25:d9:ae:12:d1:7e:88:bc:ca:
         54:45:59:12:f8:f2:12:50:47:0a:69:1e:42:84:d4:44:61:7b:
         81:82:8f:36:b9:23:92:35:50:d5:ab:1e:96:1f:f1:2d:fa:7d:
         b7:f1:44:72:df:c7:1b:43:8f:fa:52:67:33:02:62:b2:3d:d2:
         1a:aa:e5:c2:66:93:04:d5:1b:26:fd:ed:6c:fd:9f:d0:e5:53:
         14:99:42:d9:99:99:84:d2:bd:d1:2f:ce:22:d2:a5:95:95:77:
         45:f4:40:ce:55:7f:17:cc:60:2f:38:97:da:ae:99:3c:cf:f7:
         03:09:c5:40:6d:44:4c:e0:57:5f:5b:60:aa:4e:fe:27:65:a8:
         ea:20:2e:f8:db:a8:45:89:0b:dc:b8:fe:61:d4:f5:2d:a8:dd:
         2a:af:de:2b:de:b5:d6:0a:b0:14:0f:ca:93:a4:d9:09:37:1f:
         40:4c:5b:1a:59:3e:ff:91:c6:3d:1d:05:a8:66:96:eb:35:ea:
         55:2d:ef:d4:61:f6:08:40:14:16:e3:e3:cc:f5:9e:86:7b:2d:
         f6:91:2c:d3:ad:69:8b:4b:3a:c8:fd:3b:7d:76:54:dd:63:7b:
         49:12:2e:6b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JiW8MAmE0SA8KogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRmYWNkOWItOWVkYS00ODg3LWJjNjktODk5YTNjM2Fl
YzY0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MGE2ZDBkM2YtMGQ5ZC00ZmJiLTgzOTEtY2IyNzZjMjhjMDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghlOBi3r1vTXGp6+Ld1jWyTBOmbk1/MvsKxL
k+RIbAtr3oqsPD1rmEHz1dwCrYogMbJPG/cbNdKGsK3Oc1vqgE+PON/njwjp189B
AHr8XBp5PVnJIyad3h9+Oggl9dVKwnhrjLzAAL1PMUtvIffSx7i90V+zoAaCoM2c
26n/5uJ1mEnJ17fUCroR8PxUHQu962eorf2qU91DZmF/Q30oCZAWGjgeJ7C0/fGs
M4iDtOtCYSqmn0PB1FHg+hJVfec3zm1Wkm5RLWfqPXeAZJ9dSORpSR3PLdLWHW8r
IXkcUZU9s9jh3EgWilVeHMeTBzhF3zgFxZRUuOAE1OFgFk1NgQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFIBMOBPAZJm83ttvc0TP7Pl9an7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NGZh
Y2Q5Yi05ZWRhLTQ4ODctYmM2OS04OTlhM2MzYWVjNjQvN2FlMjVhYWEtZmYyOS0z
NGJmLWIyZWUtMDYxZmQwMjc4MzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODRmYWNkOWItOWVkYS00ODg3LWJj
NjktODk5YTNjM2FlYzY0Lzg0ZmFjZDliLTllZGEtNDg4Ny1iYzY5LTg5OWEzYzNh
ZWM2NC5jcmwwHwYDVR0jBBgwFoAUyJfqnZJmzajpDpFjsQBwX4mB5owwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84NGZhY2Q5Yi05ZWRhLTQ4ODctYmM2OS04OTlh
M2MzYWVjNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3/A8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQb1ykzVTF+WjU2w+jYldjHjqpVLUniVzX4w1JdmuEtF+iLzKVEVZ
EvjyElBHCmkeQoTURGF7gYKPNrkjkjVQ1aselh/xLfp9t/FEct/HG0OP+lJnMwJi
sj3SGqrlwmaTBNUbJv3tbP2f0OVTFJlC2ZmZhNK90S/OItKllZV3RfRAzlV/F8xg
LziX2q6ZPM/3AwnFQG1ETOBXX1tgqk7+J2Wo6iAu+NuoRYkL3Lj+YdT1LajdKq/e
K9611gqwFA/Kk6TZCTcfQExbGlk+/5HGPR0FqGaW6zXqVS3v1GH2CEAUFuPjzPWe
hnst9pEs061pi0s6yP07fXZU3WN7SRIuaw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 02:39:31 2026 by rpki-client