Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/962fe831-74b4-3132-b53a-d6f8bebd969d.roa
File:                     962fe831-74b4-3132-b53a-d6f8bebd969d.roa (raw, json)
Hash identifier:          TnjfFyw9l1Zo1+vgiNMrbHuIv24iptHBle+bgw9eKjw=
Subject key identifier:   EC:79:B9:E8:5F:B0:30:C3:30:57:9E:D9:BA:22:03:46:75:30:CF:94
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F4972E82921DE7FFFAC0F72C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/962fe831-74b4-3132-b53a-d6f8bebd969d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10796
IP address blocks:        2603:807e:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:e8:29:21:de:7f:ff:ac:0f:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6aecfa48-3884-4c0d-ada1-017a8c8fd36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:55:a4:05:52:a0:f6:ce:ec:27:e5:cb:ab:
                    93:63:1f:90:e9:45:d8:9e:4f:fb:6f:3f:99:39:b6:
                    50:4c:ce:8c:e3:71:54:8c:22:45:92:8c:ba:cd:1f:
                    36:5f:68:e6:9e:bc:f9:79:13:b9:26:62:a5:c8:14:
                    18:2f:60:59:83:2c:ea:7a:e5:64:43:7b:d7:cd:5a:
                    06:e8:a5:9d:66:df:55:9c:1d:0f:39:7b:6c:a7:de:
                    ae:90:66:8c:9a:5c:da:35:69:48:23:e2:6f:ad:b9:
                    74:66:af:ea:0f:d2:53:72:c2:46:80:06:c8:87:fb:
                    a4:78:bc:73:04:1f:7a:93:50:e5:3a:dc:04:8d:5a:
                    f4:1e:69:f7:6b:2e:ee:c1:08:8d:5b:d3:c0:91:d7:
                    e0:e6:1a:91:b6:bd:04:92:ba:74:9a:39:00:41:36:
                    1e:43:c7:cc:bf:1c:db:ad:e1:be:fd:52:e8:12:19:
                    27:5b:5c:18:37:36:0a:1c:50:3a:d3:e6:fa:39:f6:
                    15:8e:13:cf:c3:b4:cb:c4:44:01:e2:21:2b:00:8c:
                    fe:6d:cd:e0:75:ad:20:e4:97:91:cf:17:1a:71:44:
                    1a:fd:e2:d2:b3:bc:d5:7f:51:6e:2b:16:3c:f5:8b:
                    10:55:47:52:4b:99:3d:ea:e8:a7:17:00:d9:8d:cc:
                    d7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:79:B9:E8:5F:B0:30:C3:30:57:9E:D9:BA:22:03:46:75:30:CF:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/962fe831-74b4-3132-b53a-d6f8bebd969d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:807e:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:21:df:c9:1d:c6:34:a1:ce:08:76:21:d3:05:18:b9:f6:dd:
         9e:e0:9c:e3:3e:25:62:1e:06:23:31:65:18:7e:80:8b:0a:0d:
         f2:65:8a:08:55:17:a1:36:8c:2d:2e:bd:49:0c:4f:4e:ea:06:
         32:fb:ea:78:21:a5:76:12:3b:31:2c:06:59:78:35:f6:1e:12:
         d3:79:4c:d0:eb:97:d6:07:86:cf:69:d3:9b:d5:12:f1:32:38:
         6b:6e:dc:9c:c9:fc:75:7c:4d:5c:10:96:52:e4:7e:0f:9e:3a:
         42:65:3c:66:38:89:b6:4a:51:b1:eb:98:71:c5:b5:5b:6d:f6:
         76:e4:ad:fc:b2:bf:5a:e7:ce:b2:b1:88:41:dd:70:e4:0d:6b:
         cc:c3:e8:c0:0d:3b:34:db:2b:10:14:33:7a:10:01:a0:b2:5d:
         34:a6:62:17:ee:ee:51:7b:36:e7:c8:1e:c0:b7:ea:fc:82:a0:
         e5:f6:40:24:65:cb:d4:f4:7e:38:40:72:e3:6a:63:aa:5c:54:
         dd:77:fc:6c:0a:aa:f1:09:bb:5d:bc:41:68:34:ad:89:8a:c2:
         52:d7:b0:ac:65:30:19:8c:d0:70:b9:46:6f:7f:1c:3a:c1:df:
         af:9a:92:0c:19:84:5b:c8:cb:c3:53:ec:cc:67:bf:5f:99:ae:
         f4:b6:e2:b5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JcugpId5//6wPcsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmFlY2ZhNDgtMzg4NC00YzBkLWFkYTEtMDE3YThjOGZkMzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJVVpAVSoPbO7Cfly6uTYx+Q6UXYnk/7bz+Z
ObZQTM6M43FUjCJFkoy6zR82X2jmnrz5eRO5JmKlyBQYL2BZgyzqeuVkQ3vXzVoG
6KWdZt9VnB0POXtsp96ukGaMmlzaNWlII+Jvrbl0Zq/qD9JTcsJGgAbIh/ukeLxz
BB96k1DlOtwEjVr0Hmn3ay7uwQiNW9PAkdfg5hqRtr0Ekrp0mjkAQTYeQ8fMvxzb
reG+/VLoEhknW1wYNzYKHFA60+b6OfYVjhPPw7TLxEQB4iErAIz+bc3gda0g5JeR
zxcacUQa/eLSs7zVf1FuKxY89YsQVUdSS5k96uinFwDZjczXTwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOx5uehfsDDDMFee2boiA0Z1MM+UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTYyZmU4MzEtNzRiNC0z
MTMyLWI1M2EtZDZmOGJlYmQ5NjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgOAfgEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJiHfyR3GNKHOCHYh0wUYufbdnuCc4z4lYh4GIzFlGH6AiwoN8mWK
CFUXoTaMLS69SQxPTuoGMvvqeCGldhI7MSwGWXg19h4S03lM0OuX1geGz2nTm9US
8TI4a27cnMn8dXxNXBCWUuR+D546QmU8ZjiJtkpRseuYccW1W232duSt/LK/WufO
srGIQd1w5A1rzMPowA07NNsrEBQzehABoLJdNKZiF+7uUXs258gewLfq/IKg5fZA
JGXL1PR+OEBy42pjqlxU3Xf8bAqq8Qm7XbxBaDStiYrCUtewrGUwGYzQcLlGb38c
OsHfr5qSDBmEW8jLw1PszGe/X5mu9LbitQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:58:08 2026 by rpki-client