Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dee88f5f-56a7-311a-b481-95eb3fb841c0.roa
File:                     dee88f5f-56a7-311a-b481-95eb3fb841c0.roa (raw, json)
Hash identifier:          jEAsQ6Ma26iJjbQrWDjcMXZjEijvj+/rqAxZ3IOucNw=
Subject key identifier:   C2:07:67:ED:CA:25:BF:31:D1:CE:51:12:4B:C7:41:7D:E5:EC:7C:C4
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973FCA9F67C8047A273AD20
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dee88f5f-56a7-311a-b481-95eb3fb841c0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        2607:fe88:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:fc:a9:f6:7c:80:47:a2:73:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cbeab95a-0684-4806-b6a9-9e909df9af8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:c4:42:3b:59:a5:d5:88:70:63:1e:13:3a:
                    03:15:8b:2b:42:31:a1:a2:c7:93:4b:3f:4b:3d:ca:
                    2b:ba:68:60:d6:f9:ca:55:28:d3:3d:25:e6:54:81:
                    17:ca:64:c7:9f:3a:37:6a:de:e3:48:91:f8:2a:45:
                    8a:97:45:3b:d4:eb:e7:5a:c4:aa:b0:43:ea:5f:88:
                    a0:36:4e:75:e5:3c:1d:ad:2e:ce:2f:05:7d:17:74:
                    f5:c6:d5:ed:3a:04:4d:ea:3f:46:47:5c:7a:11:5a:
                    fd:df:07:b5:b6:d3:da:91:73:24:23:7a:24:19:9a:
                    59:36:67:85:a7:90:a4:5b:0e:ba:b1:f8:97:10:7c:
                    a0:96:09:25:50:d9:2a:02:a9:80:8b:fa:65:f4:93:
                    25:2b:50:e2:44:39:e5:ce:09:bb:b6:d1:36:5e:c1:
                    9d:03:72:11:dd:fa:1c:60:cf:af:4e:7b:bf:86:5e:
                    21:e2:fe:d0:88:52:91:41:75:37:0d:f1:10:21:e6:
                    54:aa:cf:4a:b4:ec:1c:6a:5b:e9:16:f8:e7:27:d4:
                    6c:33:55:22:80:a6:6e:f5:10:11:36:e0:22:2b:3d:
                    c0:ea:5d:3f:b3:aa:f3:f2:49:d9:b5:bc:f0:e7:8a:
                    28:87:51:c9:8b:e6:08:81:a3:95:0a:ef:af:f7:91:
                    a7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:07:67:ED:CA:25:BF:31:D1:CE:51:12:4B:C7:41:7D:E5:EC:7C:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dee88f5f-56a7-311a-b481-95eb3fb841c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe88:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ad:f8:d1:f2:1b:f1:fa:9b:63:f2:18:e9:1a:eb:25:45:84:
         d2:cf:22:32:af:37:7a:4e:3c:8f:4a:a8:a0:32:ab:50:46:81:
         dd:8c:87:d2:33:f6:34:b0:ce:cf:a9:a9:47:06:a4:2b:b0:ac:
         50:12:fe:e1:c0:58:68:d5:bc:cd:77:0f:2c:b6:3e:de:7d:d9:
         d0:b5:1d:cd:81:da:78:47:99:b7:de:5d:4b:77:08:b4:67:c7:
         cd:a2:91:f1:b1:1e:58:d0:f3:7c:0e:81:62:ba:c8:be:2c:9e:
         04:93:a4:a3:3a:fc:39:73:40:88:58:12:d3:ec:07:7e:ec:26:
         ad:dd:37:d7:e7:ec:b9:e4:47:83:aa:52:c1:3e:ac:da:53:36:
         87:50:90:79:62:1c:54:85:ce:17:fc:48:ce:1a:fc:40:01:b3:
         74:fa:55:cb:2a:a6:7b:63:9b:42:27:f9:5b:ad:03:ae:df:f2:
         61:c8:a0:8c:e4:fb:ae:2f:3f:8e:e1:7f:e4:88:6c:96:2f:2d:
         02:3d:e6:ef:ce:47:a9:79:94:55:af:e6:10:e5:b0:34:ee:7b:
         6b:c5:ce:f4:78:bc:5b:f7:75:18:66:b3:97:09:0c:93:7e:84:
         00:a7:6a:1e:1c:65:6a:b0:52:00:80:a6:44:69:cb:50:18:34:
         8d:86:6f:5e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jc/yp9nyAR6JzrSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2JlYWI5NWEtMDY4NC00ODA2LWI2YTktOWU5MDlkZjlhZjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyrEQjtZpdWIcGMeEzoDFYsrQjGhoseTSz9L
Pcorumhg1vnKVSjTPSXmVIEXymTHnzo3at7jSJH4KkWKl0U71OvnWsSqsEPqX4ig
Nk515TwdrS7OLwV9F3T1xtXtOgRN6j9GR1x6EVr93we1ttPakXMkI3okGZpZNmeF
p5CkWw66sfiXEHyglgklUNkqAqmAi/pl9JMlK1DiRDnlzgm7ttE2XsGdA3IR3foc
YM+vTnu/hl4h4v7QiFKRQXU3DfEQIeZUqs9KtOwcalvpFvjnJ9RsM1UigKZu9RAR
NuAiKz3A6l0/s6rz8knZtbzw54ooh1HJi+YIgaOVCu+v95GniwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMIHZ+3KJb8x0c5REkvHQX3l7HzEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGVlODhmNWYtNTZhNy0z
MTFhLWI0ODEtOTVlYjNmYjg0MWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgf+iEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAX6340fIb8fqbY/IY6RrrJUWE0s8iMq83ek48j0qooDKrUEaB3YyH
0jP2NLDOz6mpRwakK7CsUBL+4cBYaNW8zXcPLLY+3n3Z0LUdzYHaeEeZt95dS3cI
tGfHzaKR8bEeWNDzfA6BYrrIviyeBJOkozr8OXNAiFgS0+wHfuwmrd031+fsueRH
g6pSwT6s2lM2h1CQeWIcVIXOF/xIzhr8QAGzdPpVyyqme2ObQif5W60Drt/yYcig
jOT7ri8/juF/5Ihsli8tAj3m785HqXmUVa/mEOWwNO57a8XO9Hi8W/d1GGazlwkM
k36EAKdqHhxlarBSAICmRGnLUBg0jYZvXg==
-----END CERTIFICATE-----
Generated at Sat Oct 3 11:14:34 2026 by rpki-client