Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/e635d76f-d2d0-3af9-a38c-c806ec850321.roa
File:                     e635d76f-d2d0-3af9-a38c-c806ec850321.roa (raw, json)
Hash identifier:          XbNNzGEQFny2RmjfvTM6oKXlTsVA4sJL1Vg/1/bsPDI=
Subject key identifier:   FD:C9:25:2E:DE:2C:5D:4E:EA:D3:9F:A1:F4:75:87:E2:DA:E4:DE:95
Certificate issuer:       /CN=f95a39d1-400d-423a-89c4-37f7f1a145f2
Certificate serial:       010D0C9F4328584F49773B2E0A7DC3F641971F80
Authority key identifier: 45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/e635d76f-d2d0-3af9-a38c-c806ec850321.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397335
IP address blocks:        2620:68:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:3b:2e:0a:7d:c3:f6:41:97:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95a39d1-400d-423a-89c4-37f7f1a145f2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=74b584dc-0164-408b-bf06-f307bb441e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:41:c1:e0:b2:cb:6a:3b:88:f7:ef:3a:1d:
                    97:c1:5d:97:58:af:02:1c:90:bc:5c:88:19:07:bb:
                    62:a1:f3:52:8f:fd:57:5b:8c:30:b8:43:d7:7b:dc:
                    3a:57:c4:7b:87:aa:c7:85:62:e2:6c:90:1c:8e:31:
                    bf:22:d6:b6:e6:f4:4a:47:d5:71:16:06:93:52:e8:
                    4e:9a:f7:ba:ed:08:06:3d:4c:d8:dc:cd:eb:8d:cf:
                    18:73:37:bd:43:a6:22:1f:c2:de:7f:fd:85:cd:29:
                    fb:a4:31:3a:95:e5:40:90:f4:9e:d3:6b:ef:7c:ec:
                    21:2e:21:8b:cb:8b:a1:55:69:21:7c:de:05:45:6a:
                    73:fa:83:6a:eb:9a:18:73:23:43:c9:52:1d:c4:31:
                    61:96:49:98:70:b2:e9:e5:93:43:f7:79:77:ff:2f:
                    cc:bf:54:c0:04:b4:8e:52:a4:91:42:80:87:7e:22:
                    ce:0b:1a:fb:94:96:13:ea:ad:78:fa:a4:8e:67:7f:
                    8a:ee:18:c6:2b:08:b5:ec:48:ff:af:af:50:05:f6:
                    73:5e:4f:14:b8:ce:53:0d:fd:ce:5a:81:7d:e2:dd:
                    46:c4:14:75:a3:03:95:fb:aa:9f:f4:1f:59:aa:e2:
                    09:bd:65:c5:b9:36:d6:5e:59:93:db:b8:c0:34:cd:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C9:25:2E:DE:2C:5D:4E:EA:D3:9F:A1:F4:75:87:E2:DA:E4:DE:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/e635d76f-d2d0-3af9-a38c-c806ec850321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl

            X509v3 Authority Key Identifier:
                keyid:45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:68:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7f:47:23:f1:18:73:eb:f3:7e:d5:78:bd:2d:47:f8:3a:7f:
         dd:0c:f2:d9:54:20:08:3c:f9:d4:63:0d:7e:8c:46:67:91:7d:
         1d:90:75:d4:d6:1e:15:f5:13:0d:9d:ce:91:11:45:55:ba:6f:
         33:ba:a3:5d:c7:f3:49:2b:f6:40:a5:7d:48:7a:aa:05:0e:3e:
         de:79:b3:f5:c2:a5:5a:c7:42:10:d4:60:5b:e3:39:19:d5:4a:
         8c:85:81:a6:bd:bb:7c:2a:b2:e3:ec:a5:6c:f0:8f:46:02:f2:
         19:cb:14:6f:71:e6:f9:e4:a9:df:bd:d8:af:b2:61:49:c7:67:
         2d:53:f5:18:6b:d3:52:9a:10:51:bb:0b:83:02:f5:07:28:d1:
         ab:a9:96:6e:72:1d:66:95:e9:fc:ff:fe:4b:13:1f:45:c5:d3:
         b3:e9:44:97:1a:f4:f8:2d:9c:b5:ba:1a:8a:aa:00:c8:33:43:
         8f:5c:ab:58:21:0f:2d:a9:73:e3:37:2c:bf:12:f8:57:a5:8a:
         64:2a:ce:3c:bf:cb:4e:f9:88:ce:8b:46:ed:ad:ce:f8:7b:0f:
         0f:0d:e6:12:ad:c8:fd:1f:a2:2f:b3:ca:e3:e1:2b:b6:4e:54:
         42:ca:86:d1:4f:df:ce:35:ab:31:07:ba:29:5e:3b:88:9c:36:
         85:88:50:3e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdzsuCn3D9kGXH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1YTM5ZDEtNDAwZC00MjNhLTg5YzQtMzdmN2YxYTE0
NWYyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzRiNTg0ZGMtMDE2NC00MDhiLWJmMDYtZjMwN2JiNDQxZTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEJBweCyy2o7iPfvOh2XwV2XWK8CHJC8XIgZ
B7tiofNSj/1XW4wwuEPXe9w6V8R7h6rHhWLibJAcjjG/Ita25vRKR9VxFgaTUuhO
mve67QgGPUzY3M3rjc8Ycze9Q6YiH8Lef/2FzSn7pDE6leVAkPSe02vvfOwhLiGL
y4uhVWkhfN4FRWpz+oNq65oYcyNDyVIdxDFhlkmYcLLp5ZND93l3/y/Mv1TABLSO
UqSRQoCHfiLOCxr7lJYT6q14+qSOZ3+K7hjGKwi17Ej/r69QBfZzXk8UuM5TDf3O
WoF94t1GxBR1owOV+6qf9B9ZquIJvWXFuTbWXlmT27jANM06/QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP3JJS7eLF1O6tOfofR1h+La5N6VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVh
MzlkMS00MDBkLTQyM2EtODljNC0zN2Y3ZjFhMTQ1ZjIvZTYzNWQ3NmYtZDJkMC0z
YWY5LWEzOGMtYzgwNmVjODUwMzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1YTM5ZDEtNDAwZC00MjNhLTg5
YzQtMzdmN2YxYTE0NWYyL2Y5NWEzOWQxLTQwMGQtNDIzYS04OWM0LTM3ZjdmMWEx
NDVmMi5jcmwwHwYDVR0jBBgwFoAURY6JtDIFjVgZin8jAUv2Hx3NRHUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVhMzlkMS00MDBkLTQyM2EtODljNC0zN2Y3
ZjFhMTQ1ZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAaCAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABB/RyPxGHPr837VeL0tR/g6f90M8tlUIAg8+dRjDX6MRmeRfR2Q
ddTWHhX1Ew2dzpERRVW6bzO6o13H80kr9kClfUh6qgUOPt55s/XCpVrHQhDUYFvj
ORnVSoyFgaa9u3wqsuPspWzwj0YC8hnLFG9x5vnkqd+92K+yYUnHZy1T9Rhr01Ka
EFG7C4MC9Qco0auplm5yHWaV6fz//ksTH0XF07PpRJca9PgtnLW6GoqqAMgzQ49c
q1ghDy2pc+M3LL8S+FelimQqzjy/y075iM6LRu2tzvh7Dw8N5hKtyP0foi+zyuPh
K7ZOVELKhtFP3841qzEHuileO4icNoWIUD4=
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:32:58 2026 by rpki-client