Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/1ee9ff1c-58ce-34e3-8434-ab9a8a4f4e19.roa
File:                     1ee9ff1c-58ce-34e3-8434-ab9a8a4f4e19.roa (raw, json)
Hash identifier:          2pFzy58Bt9vnK7NqZ2N6NN6mac4bPADJBJuabUkQ/iY=
Subject key identifier:   2F:00:08:74:92:64:67:F0:0D:C8:44:D5:4A:F3:49:DC:DF:E0:89:26
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F4328584F4975C073C8E4C89B38808400
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/1ee9ff1c-58ce-34e3-8434-ab9a8a4f4e19.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46474
IP address blocks:        2602:819:e004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:c0:73:c8:e4:c8:9b:38:80:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=469cd09e-5cdc-411d-a0ec-8015f176472c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:9d:69:02:2c:68:e3:e8:9f:c2:33:84:b1:
                    5c:6f:e9:06:a8:db:d9:f3:ac:c6:67:e8:34:93:f2:
                    45:3f:ce:db:09:f8:ee:4e:de:dd:92:6a:18:2c:f3:
                    10:cf:91:b5:10:b7:bd:9b:ef:aa:11:6a:d3:a7:22:
                    28:cb:39:46:97:2d:59:a8:f4:ed:ca:c7:73:8a:ad:
                    9c:7d:4b:68:f4:7d:c4:cb:fe:a9:4e:68:a6:eb:b0:
                    9a:e3:48:0a:18:3d:18:c2:65:51:94:ae:30:33:e6:
                    f2:03:7f:9b:76:dc:2e:bf:80:d5:04:01:90:bd:8c:
                    f0:93:26:f0:f1:f8:68:f7:38:fb:37:d6:07:e1:3c:
                    29:bc:28:79:2b:b4:11:18:db:35:5d:3e:b9:2d:63:
                    18:55:8d:40:71:c0:86:c6:46:10:31:ab:ea:d7:c4:
                    20:83:a1:75:1d:89:6f:10:7f:d2:49:34:2c:2a:7b:
                    5e:6b:b1:10:15:9d:fb:70:93:20:bb:42:f8:46:12:
                    71:14:dc:e5:53:bf:52:6e:76:87:c3:ac:62:53:24:
                    a0:db:c0:80:69:18:2f:96:08:8a:72:81:09:ed:35:
                    9c:2c:40:6e:b4:52:9a:5b:86:37:e5:f2:15:bb:a2:
                    86:b4:f9:fc:a0:58:5c:78:96:fa:9d:62:84:c6:bb:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:00:08:74:92:64:67:F0:0D:C8:44:D5:4A:F3:49:DC:DF:E0:89:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/1ee9ff1c-58ce-34e3-8434-ab9a8a4f4e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:e004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:54:d1:7f:15:a8:ce:21:d4:25:60:74:d9:83:d8:00:08:1d:
         2f:39:be:1a:6b:51:a8:54:7b:74:1f:74:84:59:57:f7:80:42:
         ad:06:0e:38:40:61:79:b8:42:39:6b:04:e6:84:c8:66:b8:61:
         44:8c:a8:3d:f4:4f:be:e0:7f:3d:5c:17:04:02:a4:9f:22:fa:
         77:60:b3:43:48:d5:4b:58:22:32:78:9b:a4:c4:ca:c4:da:5f:
         83:05:a7:ef:3e:4a:0f:75:e1:e2:d9:34:54:60:91:6c:5b:96:
         45:e7:91:00:43:53:18:1c:bd:9a:d7:2f:da:1e:fd:12:ff:30:
         5a:42:ce:4a:2c:1c:7f:74:11:0d:99:9a:17:6a:6e:ef:56:35:
         44:14:36:51:f0:fb:05:a6:b5:8b:dd:c1:5f:80:a7:42:fa:21:
         10:15:23:e7:9a:bd:d4:fc:13:15:a6:d7:75:e6:1b:cd:e6:2a:
         84:19:9d:e3:16:f4:6b:7b:7e:e6:78:21:4f:06:f1:39:c0:a4:
         c6:46:fa:a8:23:51:1d:c1:73:6f:f3:7c:ee:2d:1e:0e:06:ba:
         84:14:00:0b:df:22:64:06:73:bc:34:e2:fd:ff:cf:aa:17:0f:
         f0:20:67:98:f8:8c:0d:d6:c1:a6:63:1b:f0:6c:60:d9:3a:c8:
         15:e5:bd:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdcBzyOTImziAhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjNmNTMyM2YtOGJlYS00OGM2LWFhMDMtOTQ5MjU1ZGQx
OTk3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDY5Y2QwOWUtNWNkYy00MTFkLWEwZWMtODAxNWYxNzY0NzJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseidaQIsaOPon8IzhLFcb+kGqNvZ86zGZ+g0
k/JFP87bCfjuTt7dkmoYLPMQz5G1ELe9m++qEWrTpyIoyzlGly1ZqPTtysdziq2c
fUto9H3Ey/6pTmim67Ca40gKGD0YwmVRlK4wM+byA3+bdtwuv4DVBAGQvYzwkybw
8fho9zj7N9YH4TwpvCh5K7QRGNs1XT65LWMYVY1AccCGxkYQMavq18Qgg6F1HYlv
EH/SSTQsKntea7EQFZ37cJMgu0L4RhJxFNzlU79SbnaHw6xiUySg28CAaRgvlgiK
coEJ7TWcLEButFKaW4Y35fIVu6KGtPn8oFhceJb6nWKExrvJSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC8ACHSSZGfwDchE1UrzSdzf4IkmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iM2Y1
MzIzZi04YmVhLTQ4YzYtYWEwMy05NDkyNTVkZDE5OTcvMWVlOWZmMWMtNThjZS0z
NGUzLTg0MzQtYWI5YThhNGY0ZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjNmNTMyM2YtOGJlYS00OGM2LWFh
MDMtOTQ5MjU1ZGQxOTk3L2IzZjUzMjNmLThiZWEtNDhjNi1hYTAzLTk0OTI1NWRk
MTk5Ny5jcmwwHwYDVR0jBBgwFoAUU4ELix9UHi+CHErdwD5wsGKV7F0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iM2Y1MzIzZi04YmVhLTQ4YzYtYWEwMy05NDky
NTVkZDE5OTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIGeAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACdU0X8VqM4h1CVgdNmD2AAIHS85vhprUahUe3QfdIRZV/eAQq0G
DjhAYXm4QjlrBOaEyGa4YUSMqD30T77gfz1cFwQCpJ8i+ndgs0NI1UtYIjJ4m6TE
ysTaX4MFp+8+Sg914eLZNFRgkWxblkXnkQBDUxgcvZrXL9oe/RL/MFpCzkosHH90
EQ2Zmhdqbu9WNUQUNlHw+wWmtYvdwV+Ap0L6IRAVI+eavdT8ExWm13XmG83mKoQZ
neMW9Gt7fuZ4IU8G8TnApMZG+qgjUR3Bc2/zfO4tHg4GuoQUAAvfImQGc7w04v3/
z6oXD/AgZ5j4jA3WwaZjG/BsYNk6yBXlvX4=
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:28:50 2026 by rpki-client