Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/e3c634ea-d307-3a70-8f54-c97cd86ffb87.roa
File:                     e3c634ea-d307-3a70-8f54-c97cd86ffb87.roa (raw, json)
Hash identifier:          rwOBdP/RTbryQXtzq/Yo4VxSUcUpaP0oYrmFS5+ujMo=
Subject key identifier:   45:C8:9C:20:0D:9C:8E:27:E5:8B:D6:F5:91:CA:35:CE:2D:70:59:C9
Certificate issuer:       /CN=843d051d-a734-4f3d-9544-a5ed8b60c976
Certificate serial:       010D0C9F4328584E69A4B3C2CB6DD0FF38521680
Authority key identifier: FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/e3c634ea-d307-3a70-8f54-c97cd86ffb87.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     35930
IP address blocks:        2602:faa2::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:b3:c2:cb:6d:d0:ff:38:52:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=843d051d-a734-4f3d-9544-a5ed8b60c976
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=69aded32-c537-442d-beed-4ae036a9c6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4d:ec:3c:49:b3:6b:8a:ef:6d:b6:ce:49:b5:
                    4e:b0:51:54:cc:68:e4:b1:87:8c:e8:3e:cd:a9:89:
                    78:46:a2:56:fb:b4:a8:75:f7:a1:e5:c8:09:33:3b:
                    c2:30:e6:8a:bf:07:41:6d:34:48:b5:31:75:79:0c:
                    43:8f:a3:8d:29:51:6e:c0:0a:60:19:94:16:18:ff:
                    18:40:7f:83:1b:71:a4:9e:ee:aa:dc:16:61:4b:25:
                    ee:8f:1f:2b:e1:37:ca:15:9a:a5:72:02:bc:2b:0c:
                    6a:50:07:1d:ba:b5:d2:ec:7b:8d:05:3d:0a:a4:0b:
                    bb:6c:08:82:48:3d:4c:48:cf:12:86:10:06:07:12:
                    e1:ee:06:2e:6b:60:42:ed:e4:64:ad:10:81:f9:7c:
                    91:a1:2d:56:7e:5b:a6:14:36:2a:0b:6b:51:34:e6:
                    d6:5f:01:5f:9b:51:db:61:22:24:0d:44:73:1b:9a:
                    dc:52:0b:cc:02:6d:51:6f:01:36:1f:c3:c5:64:be:
                    61:42:36:92:e2:e8:90:c1:59:3d:24:65:04:05:fc:
                    b0:b3:c2:54:bc:3f:54:8f:05:9c:d6:40:1b:4e:13:
                    82:da:fb:a9:6e:a9:e9:f7:a7:e3:e7:0b:0a:43:a6:
                    2c:74:50:c1:e7:45:8e:ef:17:4f:74:12:54:17:21:
                    07:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C8:9C:20:0D:9C:8E:27:E5:8B:D6:F5:91:CA:35:CE:2D:70:59:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/e3c634ea-d307-3a70-8f54-c97cd86ffb87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl

            X509v3 Authority Key Identifier:
                keyid:FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa2::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:38:fb:65:2d:9f:cc:62:9f:55:1d:ff:3d:19:25:71:41:0d:
         a5:c9:b1:5d:24:00:b7:00:da:d9:31:98:0d:21:df:89:ed:53:
         4c:87:b3:69:69:3e:d2:1a:7c:18:93:07:15:af:73:66:5e:78:
         3e:69:0a:d6:6b:c7:97:cb:ca:25:21:1d:7f:1d:67:fa:0b:8a:
         c8:54:1c:22:ae:f9:54:49:ae:e9:bb:5d:33:1b:7f:5a:f3:9f:
         09:a7:6b:ec:fa:98:57:62:ee:0b:85:94:f9:aa:e6:93:f2:a4:
         96:ba:4a:31:86:e3:6b:52:b9:f2:90:e2:8a:95:c9:7c:71:a4:
         fe:6b:e1:3d:33:e2:91:40:17:76:9e:a6:f6:6f:13:b4:c8:da:
         9e:84:b3:e9:78:2e:76:52:e9:68:eb:f7:f2:94:52:85:e9:fb:
         55:9b:2d:6e:d2:63:76:00:f4:f4:e4:2c:c9:21:21:bb:22:77:
         5b:de:ce:ab:45:26:80:85:aa:a5:1f:f0:64:99:65:79:6d:98:
         f1:0e:10:cc:1d:4a:8a:60:55:1a:2d:63:84:14:7d:47:1e:39:
         1c:ec:e6:ba:4f:59:6f:c2:68:16:60:01:38:4c:6f:cd:57:8a:
         68:07:a0:d4:0d:33:24:0c:eb:0a:45:04:06:e2:ba:90:ab:d9:
         88:3f:e9:22
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5ppLPCy23Q/zhSFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQzZDA1MWQtYTczNC00ZjNkLTk1NDQtYTVlZDhiNjBj
OTc2MB4XDTI2MDcwNjIxMDAxM1oXDTI2MTAwNDIxMDAxM1owLzEtMCsGA1UEAxMk
NjlhZGVkMzItYzUzNy00NDJkLWJlZWQtNGFlMDM2YTljNmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU3sPEmza4rvbbbOSbVOsFFUzGjksYeM6D7N
qYl4RqJW+7Sodfeh5cgJMzvCMOaKvwdBbTRItTF1eQxDj6ONKVFuwApgGZQWGP8Y
QH+DG3Gknu6q3BZhSyXujx8r4TfKFZqlcgK8KwxqUAcdurXS7HuNBT0KpAu7bAiC
SD1MSM8ShhAGBxLh7gYua2BC7eRkrRCB+XyRoS1WflumFDYqC2tRNObWXwFfm1Hb
YSIkDURzG5rcUgvMAm1RbwE2H8PFZL5hQjaS4uiQwVk9JGUEBfyws8JUvD9UjwWc
1kAbThOC2vupbqnp96fj5wsKQ6YsdFDB50WO7xdPdBJUFyEHRwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEXInCANnI4n5YvW9ZHKNc4tcFnJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NDNk
MDUxZC1hNzM0LTRmM2QtOTU0NC1hNWVkOGI2MGM5NzYvZTNjNjM0ZWEtZDMwNy0z
YTcwLThmNTQtYzk3Y2Q4NmZmYjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODQzZDA1MWQtYTczNC00ZjNkLTk1
NDQtYTVlZDhiNjBjOTc2Lzg0M2QwNTFkLWE3MzQtNGYzZC05NTQ0LWE1ZWQ4YjYw
Yzk3Ni5jcmwwHwYDVR0jBBgwFoAU/P4/8CP0pCKPdZ+tIz+BmXBCtJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NDNkMDUxZC1hNzM0LTRmM2QtOTU0NC1hNWVk
OGI2MGM5NzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6ogAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAezj7ZS2fzGKfVR3/PRklcUENpcmxXSQAtwDa2TGYDSHfie1TTIez
aWk+0hp8GJMHFa9zZl54PmkK1mvHl8vKJSEdfx1n+guKyFQcIq75VEmu6btdMxt/
WvOfCadr7PqYV2LuC4WU+armk/KklrpKMYbja1K58pDiipXJfHGk/mvhPTPikUAX
dp6m9m8TtMjanoSz6XgudlLpaOv38pRShen7VZstbtJjdgD09OQsySEhuyJ3W97O
q0UmgIWqpR/wZJlleW2Y8Q4QzB1KimBVGi1jhBR9Rx45HOzmuk9Zb8JoFmABOExv
zVeKaAeg1A0zJAzrCkUEBuK6kKvZiD/pIg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:35 2026 by rpki-client