Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/e2a1a584-7a2b-3de6-b958-b278af8fceec.roa
File:                     e2a1a584-7a2b-3de6-b958-b278af8fceec.roa (raw, json)
Hash identifier:          3NA/+hmX36oourjZp+fPYFgOGpcAIuKlXxjAanuNgEs=
Subject key identifier:   C9:D0:3F:96:93:CC:66:DE:2A:AA:8A:1A:08:72:21:6E:FE:C0:95:FF
Certificate issuer:       /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial:       010D0C9F4328584F59CB8BE13429A36694A36400
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/e2a1a584-7a2b-3de6-b958-b278af8fceec.roa
Signing time:             Wed 30 Sep 2026 21:32:31 +0000
ROA not before:           Wed 30 Sep 2026 21:32:31 +0000
ROA not after:            Tue 29 Dec 2026 22:32:31 +0000
asID:                     897
IP address blocks:        2620:ab:a006::/48 maxlen: 48
                          2620:ab:a007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:cb:8b:e1:34:29:a3:66:94:a3:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
        Validity
            Not Before: Sep 30 21:32:31 2026 GMT
            Not After : Dec 29 22:32:31 2026 GMT
        Subject: CN=79ec2ef8-2dc8-4989-abd1-ec5825ecfbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:84:75:58:7f:92:99:a8:d1:a5:38:9b:b4:
                    e5:9e:c1:61:49:8e:f9:03:e8:b0:0c:7d:d2:63:f1:
                    6d:c9:f3:ad:95:cf:65:97:cd:7c:fe:a0:75:64:41:
                    b8:d5:27:4c:8e:01:a7:de:fd:cb:55:11:e0:ea:dd:
                    e6:07:0e:f4:bd:1d:f9:9a:63:09:de:e6:cc:f4:f2:
                    16:af:5e:7d:a7:6d:15:fb:db:43:02:8b:6c:1f:78:
                    f3:85:58:7c:33:b7:7d:6d:e5:e3:81:80:ed:0d:09:
                    b4:81:55:f8:04:18:64:41:5b:c3:17:43:56:37:3f:
                    04:1e:91:4a:0f:0a:b2:ca:68:4d:be:a1:00:8a:65:
                    0e:ed:64:50:6d:63:26:5a:89:2c:8d:01:82:f5:d2:
                    58:29:70:ec:42:38:e5:01:67:bb:ac:b7:f3:bf:96:
                    a3:19:f7:d7:12:24:26:c9:30:04:a5:da:a4:00:57:
                    4c:a4:79:ae:f1:4d:37:93:47:94:43:09:ac:4b:aa:
                    46:26:87:df:c8:2f:51:68:7f:bb:28:12:ef:80:44:
                    a4:2c:58:9b:8e:4c:57:da:28:a4:98:8d:e3:76:ef:
                    a7:ba:a3:17:26:de:3f:cf:ba:af:2b:a3:b7:7d:bd:
                    ed:50:38:50:6a:1f:fb:83:20:fc:cd:1a:96:8a:c5:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D0:3F:96:93:CC:66:DE:2A:AA:8A:1A:08:72:21:6E:FE:C0:95:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/e2a1a584-7a2b-3de6-b958-b278af8fceec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ab:a006::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:41:35:33:4f:52:39:e5:af:3d:a5:2d:3d:cd:66:a6:50:
         db:58:7b:c5:22:5b:4f:70:41:bc:bb:15:b6:51:44:07:e1:00:
         80:54:c2:9e:81:dc:6d:f9:85:ed:20:82:19:80:c3:ef:f3:46:
         4a:c3:59:22:01:e7:05:2b:5d:4a:ce:6c:5f:87:9a:62:a9:7b:
         b1:bb:d1:6f:3e:ff:79:05:4d:1a:d0:04:61:3f:71:78:f2:2f:
         9f:78:b0:ce:df:d1:14:8f:e4:ea:95:16:e4:8c:81:94:6c:8f:
         5c:56:e1:71:35:f0:25:09:3a:80:1b:f8:be:10:53:a7:e6:4a:
         8e:25:83:d2:a0:3f:7a:74:bc:76:90:13:a3:e0:6a:cd:b0:e7:
         09:c9:c1:5a:16:e6:08:27:d2:11:8c:f8:f4:7e:20:77:c1:a2:
         d9:11:5e:37:1d:40:bd:75:49:da:b7:51:d9:77:4f:d5:fb:fd:
         04:bc:19:9e:db:90:11:e1:ce:35:c3:cd:71:c8:7d:6c:06:9f:
         9b:f9:04:7f:60:14:00:8f:c7:c0:4f:d0:2a:e4:ac:c5:93:d4:
         dd:66:9b:df:f8:8f:c2:65:52:34:a5:e7:e4:62:63:65:c4:b7:
         86:a8:b2:49:f7:29:52:98:c8:51:5b:84:48:4f:c8:82:36:74:
         62:39:7b:f3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Zy4vhNCmjZpSjZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzliNmIyZmMtMzQyMi00NmU3LWI2MzctN2I4ZGNiODRi
ZmYxMB4XDTI2MDkzMDIxMzIzMVoXDTI2MTIyOTIyMzIzMVowLzEtMCsGA1UEAxMk
NzllYzJlZjgtMmRjOC00OTg5LWFiZDEtZWM1ODI1ZWNmYmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlROEdVh/kpmo0aU4m7TlnsFhSY75A+iwDH3S
Y/FtyfOtlc9ll818/qB1ZEG41SdMjgGn3v3LVRHg6t3mBw70vR35mmMJ3ubM9PIW
r159p20V+9tDAotsH3jzhVh8M7d9beXjgYDtDQm0gVX4BBhkQVvDF0NWNz8EHpFK
DwqyymhNvqEAimUO7WRQbWMmWoksjQGC9dJYKXDsQjjlAWe7rLfzv5ajGffXEiQm
yTAEpdqkAFdMpHmu8U03k0eUQwmsS6pGJoffyC9RaH+7KBLvgESkLFibjkxX2iik
mI3jdu+nuqMXJt4/z7qvK6O3fb3tUDhQah/7gyD8zRqWisVzTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMnQP5aTzGbeKqqKGghyIW7+wJX/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zOWI2
YjJmYy0zNDIyLTQ2ZTctYjYzNy03YjhkY2I4NGJmZjEvZTJhMWE1ODQtN2EyYi0z
ZGU2LWI5NTgtYjI3OGFmOGZjZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzliNmIyZmMtMzQyMi00NmU3LWI2
MzctN2I4ZGNiODRiZmYxLzM5YjZiMmZjLTM0MjItNDZlNy1iNjM3LTdiOGRjYjg0
YmZmMS5jcmwwHwYDVR0jBBgwFoAU9Xm1K1wSfAvIzQB1QiwV/G+mN3MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zOWI2YjJmYy0zNDIyLTQ2ZTctYjYzNy03Yjhk
Y2I4NGJmZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAq6AG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAESyQTUzT1I55a89pS09zWamUNtYe8UiW09wQby7FbZRRAfhAIBU
wp6B3G35he0gghmAw+/zRkrDWSIB5wUrXUrObF+HmmKpe7G70W8+/3kFTRrQBGE/
cXjyL594sM7f0RSP5OqVFuSMgZRsj1xW4XE18CUJOoAb+L4QU6fmSo4lg9KgP3p0
vHaQE6Pgas2w5wnJwVoW5ggn0hGM+PR+IHfBotkRXjcdQL11Sdq3Udl3T9X7/QS8
GZ7bkBHhzjXDzXHIfWwGn5v5BH9gFACPx8BP0CrkrMWT1N1mm9/4j8JlUjSl5+Ri
Y2XEt4aoskn3KVKYyFFbhEhPyII2dGI5e/M=
-----END CERTIFICATE-----
Generated at Thu Oct 1 13:50:14 2026 by rpki-client