Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5388c196-7e94-302f-b906-613c5acde318.roa
File:                     5388c196-7e94-302f-b906-613c5acde318.roa (raw, json)
Hash identifier:          4ZkOKhiJ7s/8s9L9qxiPH3r9kZoGMhLZTfqckc8YtBo=
Subject key identifier:   0E:19:32:55:A9:D6:82:68:32:C7:89:D2:1E:C7:01:58:E8:B6:E0:0D
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F4328584F549D57329BAF1A0A125ACF80
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5388c196-7e94-302f-b906-613c5acde318.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     399122
IP address blocks:        2602:fcd5:a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:57:32:9b:af:1a:0a:12:5a:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=643e425b-d6b1-42f2-96bf-6da922854edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:bf:0a:a4:c1:24:34:fa:d0:8a:43:d5:f5:
                    38:ee:0f:e5:9b:2c:71:df:19:a8:6a:fc:fb:80:5a:
                    0b:80:b6:f4:2e:f6:6c:f6:c7:98:5b:3b:b2:41:05:
                    e4:45:42:82:f4:07:6d:84:19:e9:8e:db:73:1b:b6:
                    44:2e:a3:aa:10:b2:00:12:28:82:b5:63:81:06:03:
                    f6:6a:4f:ed:c9:ef:52:24:a7:64:90:58:40:e3:75:
                    12:19:a0:ce:1e:78:93:f7:7b:05:21:4d:05:c4:60:
                    4a:31:c5:f0:1a:54:c8:60:68:01:24:a4:84:3f:1a:
                    11:f3:a2:37:d1:8e:0c:29:c9:1e:fd:12:26:cc:68:
                    2a:12:49:6a:0b:37:8b:0d:d0:f9:c9:df:88:11:0a:
                    41:0b:57:49:a7:02:a2:12:8e:2a:36:4a:98:b8:9e:
                    f0:e7:8b:c3:97:7f:02:0a:75:a7:80:45:44:6a:d4:
                    de:33:74:2b:66:c9:0d:8f:78:9e:88:dc:d9:ae:f8:
                    b2:a9:2e:a3:32:c0:25:99:a6:4b:9d:4b:8e:3c:93:
                    07:94:67:bc:8d:00:1c:1d:fc:c1:08:87:66:97:72:
                    f4:d8:0a:47:ae:13:cb:0d:41:a9:7a:8d:f1:a2:c0:
                    50:0c:69:a4:0f:50:b7:d9:4b:6c:08:06:4f:69:7f:
                    53:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:19:32:55:A9:D6:82:68:32:C7:89:D2:1E:C7:01:58:E8:B6:E0:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5388c196-7e94-302f-b906-613c5acde318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:17:03:87:83:4e:66:61:1c:2c:c2:74:8e:e1:fe:41:91:0f:
         19:7e:ac:a7:bb:dd:37:3b:8a:2a:09:90:1c:8a:71:d6:66:09:
         46:82:ab:11:e5:fe:da:3d:f2:05:d2:5c:c1:94:ac:37:06:ce:
         67:93:e4:eb:1a:8f:84:0c:f9:3a:3f:ed:06:d0:bb:4f:7c:f0:
         9a:42:e7:8d:f4:fd:bb:b2:9e:f2:44:86:ba:c4:36:80:f4:e1:
         b5:3b:c5:d8:7d:ad:2c:88:22:79:59:f7:a9:d7:a0:b3:14:81:
         26:fe:72:00:58:ef:33:84:d6:02:2c:9c:22:db:a9:08:94:c4:
         45:5a:b1:01:ad:3f:17:f5:e9:dd:8a:76:71:41:2a:4d:f1:29:
         c5:fe:5b:c7:49:97:4e:0a:4e:34:70:9d:80:ac:08:64:f7:a9:
         17:04:8b:d3:04:b4:b1:64:26:19:bf:e5:f0:16:bf:9b:4d:76:
         35:f7:eb:cc:1c:0c:55:ae:3c:51:47:d2:d4:73:2f:7d:c7:48:
         04:0e:c7:bd:07:42:18:6b:04:40:c1:4e:3f:52:cc:95:4b:e6:
         21:77:65:fb:5b:70:98:a4:65:55:5a:72:18:1d:d7:9d:bc:ee:
         66:65:b3:1d:cb:20:e4:78:79:61:de:b7:de:db:af:62:4d:78:
         d1:0d:4f:ec
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9UnVcym68aChJaz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTYyNjE4NzgtNWVmNC00Zjk5LThkMDktYjZkMjQ5MzQ0
NGM1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
NjQzZTQyNWItZDZiMS00MmYyLTk2YmYtNmRhOTIyODU0ZWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW+/CqTBJDT60IpD1fU47g/lmyxx3xmoavz7
gFoLgLb0LvZs9seYWzuyQQXkRUKC9AdthBnpjttzG7ZELqOqELIAEiiCtWOBBgP2
ak/tye9SJKdkkFhA43USGaDOHniT93sFIU0FxGBKMcXwGlTIYGgBJKSEPxoR86I3
0Y4MKcke/RImzGgqEklqCzeLDdD5yd+IEQpBC1dJpwKiEo4qNkqYuJ7w54vDl38C
CnWngEVEatTeM3QrZskNj3ieiNzZrviyqS6jMsAlmaZLnUuOPJMHlGe8jQAcHfzB
CIdml3L02ApHrhPLDUGpeo3xosBQDGmkD1C32UtsCAZPaX9THwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA4ZMlWp1oJoMseJ0h7HAVjotuANMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2
MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQyNDkzNDQ0YzUvNTM4OGMxOTYtN2U5NC0z
MDJmLWI5MDYtNjEzYzVhY2RlMzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTYyNjE4NzgtNWVmNC00Zjk5LThk
MDktYjZkMjQ5MzQ0NGM1L2E2MjYxODc4LTVlZjQtNGY5OS04ZDA5LWI2ZDI0OTM0
NDRjNS5jcmwwHwYDVR0jBBgwFoAU5DgAsivRHURmtzlG/z1FUty+3BowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQy
NDkzNDQ0YzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL81QAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGUXA4eDTmZhHCzCdI7h/kGRDxl+rKe73Tc7iioJkByKcdZmCUaC
qxHl/to98gXSXMGUrDcGzmeT5Osaj4QM+To/7QbQu0988JpC5430/buynvJEhrrE
NoD04bU7xdh9rSyIInlZ96nXoLMUgSb+cgBY7zOE1gIsnCLbqQiUxEVasQGtPxf1
6d2KdnFBKk3xKcX+W8dJl04KTjRwnYCsCGT3qRcEi9MEtLFkJhm/5fAWv5tNdjX3
68wcDFWuPFFH0tRzL33HSAQOx70HQhhrBEDBTj9SzJVL5iF3ZftbcJikZVVachgd
15287mZlsx3LIOR4eWHet97br2JNeNENT+w=
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:58:51 2026 by rpki-client