Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/293f1574-042b-3086-8ed0-fa8956f04343.roa
File:                     293f1574-042b-3086-8ed0-fa8956f04343.roa (raw, json)
Hash identifier:          WxK//xlr9q9IbsyUI8/6xvlfvmYcB+FGMeQEaCXI5Lo=
Subject key identifier:   4F:90:53:21:74:9F:8F:10:28:6D:35:9F:61:23:3C:6D:AE:56:E6:7C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973C9FA420A608410BE1C80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/293f1574-042b-3086-8ed0-fa8956f04343.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        2001:569:c00c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:c9:fa:42:0a:60:84:10:be:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9ba03bf8-f91c-4157-865a-6979c4e1bf20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ea:b8:17:b2:1f:69:19:dc:d8:19:04:02:98:
                    33:fe:f0:42:b5:71:70:5d:20:df:1b:4f:61:55:c4:
                    fc:bf:82:76:4b:cb:30:95:c6:8e:00:0d:2e:cf:22:
                    fe:25:bb:62:3e:89:6d:da:a4:88:71:da:b7:a4:fe:
                    ff:23:35:32:c1:b5:76:a7:31:fa:8f:f4:41:75:b2:
                    ed:24:97:89:91:08:a9:07:53:f0:52:1b:fd:14:a5:
                    24:36:e0:0f:f0:88:9f:55:2e:7a:53:44:61:23:b7:
                    28:30:47:29:68:20:52:a7:dc:ad:1f:db:a1:b1:1e:
                    e4:c0:a6:2f:84:1d:20:2e:7d:fa:dc:26:49:7d:ce:
                    18:53:e8:45:cf:bd:8d:f4:cd:b6:63:73:15:e2:46:
                    52:07:5a:de:07:e4:da:81:18:2d:1f:71:8d:7b:eb:
                    8d:5b:14:b5:11:86:45:b8:91:80:05:59:e5:da:4e:
                    3d:5d:31:14:2c:ac:e0:1f:de:72:47:d9:8c:64:62:
                    cb:fe:55:b8:82:f2:f2:b9:f7:08:e2:6e:f0:01:da:
                    bb:6b:ad:6d:fa:bd:55:c2:d1:73:07:86:91:e5:02:
                    fd:9d:93:e7:5d:50:26:8f:08:6e:33:51:17:d0:2c:
                    2f:ac:04:fd:20:0b:1c:f3:8a:4e:81:32:76:23:80:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:90:53:21:74:9F:8F:10:28:6D:35:9F:61:23:3C:6D:AE:56:E6:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/293f1574-042b-3086-8ed0-fa8956f04343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:569:c00c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:23:52:73:d1:49:34:9a:61:0c:6d:ee:c1:d4:da:e0:78:e5:
         58:62:dc:dc:e9:8a:c2:60:a0:7e:8f:7e:da:ad:16:45:53:5a:
         76:43:37:5d:63:ee:4c:da:27:fb:eb:92:6e:5f:74:ef:9d:b4:
         69:93:10:54:7a:bb:0c:fc:ed:87:95:85:43:fe:d3:cf:90:81:
         33:e9:16:f5:61:c3:17:86:6d:29:c5:e3:e3:b3:cc:5f:bf:96:
         22:6f:e3:0c:71:b6:bb:18:70:f1:39:7e:28:89:9e:2f:04:93:
         84:f3:e9:c4:0e:9f:b3:f0:78:d5:d2:04:a1:7d:e2:4f:bc:4a:
         85:04:15:d5:68:80:70:49:75:7d:70:dc:cf:42:f4:fd:04:3d:
         82:62:44:db:38:71:65:eb:55:5a:08:b0:2b:e6:99:6d:3f:24:
         8c:2d:68:ad:7f:54:88:6a:8c:c8:2e:60:1e:35:ec:d5:73:b9:
         c8:5f:95:31:f2:3f:78:12:fa:a4:60:9d:12:c1:48:78:a0:f4:
         3a:dc:61:9d:dd:c7:ed:10:e4:c9:b0:7f:fe:16:2e:a1:97:4f:
         d8:f7:e3:b1:4d:25:d9:97:19:4e:e2:97:ed:11:4b:82:86:bc:
         c7:74:6c:43:62:e9:7d:cd:96:57:8c:00:0a:22:a1:21:55:ee:
         44:42:60:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc8n6QgpghBC+HIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWJhMDNiZjgtZjkxYy00MTU3LTg2NWEtNjk3OWM0ZTFiZjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuq4F7IfaRnc2BkEApgz/vBCtXFwXSDfG09h
VcT8v4J2S8swlcaOAA0uzyL+JbtiPolt2qSIcdq3pP7/IzUywbV2pzH6j/RBdbLt
JJeJkQipB1PwUhv9FKUkNuAP8IifVS56U0RhI7coMEcpaCBSp9ytH9uhsR7kwKYv
hB0gLn363CZJfc4YU+hFz72N9M22Y3MV4kZSB1reB+TagRgtH3GNe+uNWxS1EYZF
uJGABVnl2k49XTEULKzgH95yR9mMZGLL/lW4gvLyufcI4m7wAdq7a61t+r1VwtFz
B4aR5QL9nZPnXVAmjwhuM1EX0CwvrAT9IAsc84pOgTJ2I4CgBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE+QUyF0n48QKG01n2EjPG2uVuZ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjkzZjE1NzQtMDQyYi0z
MDg2LThlZDAtZmE4OTU2ZjA0MzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFacAM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGkjUnPRSTSaYQxt7sHU2uB45Vhi3NzpisJgoH6PftqtFkVTWnZD
N11j7kzaJ/vrkm5fdO+dtGmTEFR6uwz87YeVhUP+08+QgTPpFvVhwxeGbSnF4+Oz
zF+/liJv4wxxtrsYcPE5fiiJni8Ek4Tz6cQOn7PweNXSBKF94k+8SoUEFdVogHBJ
dX1w3M9C9P0EPYJiRNs4cWXrVVoIsCvmmW0/JIwtaK1/VIhqjMguYB417NVzuchf
lTHyP3gS+qRgnRLBSHig9DrcYZ3dx+0Q5Mmwf/4WLqGXT9j347FNJdmXGU7il+0R
S4KGvMd0bENi6X3NlleMAAoioSFV7kRCYHM=
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:37:35 2026 by rpki-client