Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3a54cfd6-2753-3926-8778-b5bccb05925a.roa
File:                     3a54cfd6-2753-3926-8778-b5bccb05925a.roa (raw, json)
Hash identifier:          vfzn2z5xc48V4TqV3TAV2oQJQmeBRZnUSIpoT66vQ84=
Subject key identifier:   E4:F0:29:44:8F:53:C5:3C:57:6F:DF:1C:3B:50:99:FD:53:A6:A8:BA
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584E5A49FE930E3A88CB975B11C0
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3a54cfd6-2753-3926-8778-b5bccb05925a.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2602:fdaa:b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:fe:93:0e:3a:88:cb:97:5b:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=bc41e569-7c8c-4272-9a32-b020cd151368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:3f:4a:36:4d:64:5a:38:5d:25:2f:2a:c6:
                    ae:12:ca:f6:24:73:32:8e:c2:87:28:bc:3c:44:22:
                    98:4e:d7:84:1b:15:6a:8d:23:c5:a1:8a:4e:08:0c:
                    6f:d1:76:2f:57:af:43:f4:b2:86:f7:6e:cf:b1:39:
                    82:50:42:db:09:83:c1:34:1c:83:c0:a0:18:87:03:
                    b1:f6:ae:65:b2:5e:9f:3f:69:91:41:ee:1c:73:70:
                    c1:02:68:a0:d4:30:60:7c:8f:ce:5e:20:07:5d:95:
                    8b:3f:ec:f2:5e:46:2d:e0:ad:47:91:21:93:db:fa:
                    6c:e7:83:7b:d5:b4:f6:3c:af:e9:89:8f:a1:2b:5c:
                    8a:3b:22:b4:a3:4c:ef:94:7e:0c:0d:bc:f6:a5:44:
                    78:ca:46:fa:64:60:f9:ac:02:27:44:30:33:45:c6:
                    1f:a5:3b:72:4d:0a:8f:3b:38:9b:a3:ff:df:f6:8d:
                    8e:c0:2d:33:f6:de:95:02:b3:d0:62:48:fc:52:5c:
                    3f:c7:4f:60:9d:7f:39:3f:23:06:b5:76:27:55:30:
                    d6:e6:5e:97:da:f2:73:95:48:c9:d4:1c:a0:f1:34:
                    28:d1:d1:39:61:84:a0:9d:2e:d3:de:2c:f0:6b:c7:
                    c7:1b:35:10:77:78:bb:2e:a0:be:86:65:27:b9:aa:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F0:29:44:8F:53:C5:3C:57:6F:DF:1C:3B:50:99:FD:53:A6:A8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3a54cfd6-2753-3926-8778-b5bccb05925a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:b0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ed:f1:6e:75:85:9f:38:bf:83:dc:48:37:19:e1:aa:0b:9e:
         78:d4:5b:f3:ac:10:24:c7:56:82:9e:52:72:4a:12:19:42:0a:
         b6:6d:6f:e8:81:28:bf:aa:5a:4b:23:8e:55:13:e7:5d:b1:4e:
         55:5e:de:f6:a6:f3:d5:f3:4a:bd:00:ab:c7:b4:50:c5:b5:0f:
         85:95:bc:5a:87:40:be:80:71:a0:dc:8b:d7:da:8e:ed:fb:b0:
         ee:ce:23:b8:0d:b6:dc:c2:14:00:77:bc:d4:2e:d2:3f:0a:c6:
         be:01:94:e7:b7:89:39:29:4b:68:4f:ef:88:31:97:d5:33:fd:
         7c:c4:ae:2d:00:1d:de:fa:f1:e4:bd:ce:c0:79:28:4a:7d:76:
         7d:d8:cb:78:37:f7:3c:f4:24:72:8c:f1:f4:87:47:77:64:67:
         98:02:c3:43:52:c2:8f:31:80:41:6c:76:ad:ae:f8:a4:c5:e5:
         2c:2c:ca:42:d9:69:24:30:94:2b:ee:f0:79:17:7f:4f:ef:e7:
         7e:15:04:5a:0c:2c:c0:ef:7b:dc:e3:21:71:43:9d:21:fb:13:
         2a:47:56:9c:d0:f5:6b:49:a0:05:69:91:6f:f5:91:db:e1:9d:
         f7:bf:42:45:eb:44:51:b8:2f:79:df:57:14:fe:94:7f:e5:ba:
         07:4c:06:00
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5aSf6TDjqIy5dbEcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx
ZDQxMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
YmM0MWU1NjktN2M4Yy00MjcyLTlhMzItYjAyMGNkMTUxMzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwU/SjZNZFo4XSUvKsauEsr2JHMyjsKHKLw8
RCKYTteEGxVqjSPFoYpOCAxv0XYvV69D9LKG927PsTmCUELbCYPBNByDwKAYhwOx
9q5lsl6fP2mRQe4cc3DBAmig1DBgfI/OXiAHXZWLP+zyXkYt4K1HkSGT2/ps54N7
1bT2PK/piY+hK1yKOyK0o0zvlH4MDbz2pUR4ykb6ZGD5rAInRDAzRcYfpTtyTQqP
Ozibo//f9o2OwC0z9t6VArPQYkj8Ulw/x09gnX85PyMGtXYnVTDW5l6X2vJzlUjJ
1Byg8TQo0dE5YYSgnS7T3izwa8fHGzUQd3i7LqC+hmUnuaptVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOTwKUSPU8U8V2/fHDtQmf1Tpqi6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2
ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvM2E1NGNmZDYtMjc1My0z
OTI2LTg3NzgtYjViY2NiMDU5MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2
NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj
MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl
OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgCw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD/t8W51hZ84v4PcSDcZ4aoLnnjUW/OsECTHVoKeUnJKEhlCCrZt
b+iBKL+qWksjjlUT512xTlVe3vam89XzSr0Aq8e0UMW1D4WVvFqHQL6AcaDci9fa
ju37sO7OI7gNttzCFAB3vNQu0j8Kxr4BlOe3iTkpS2hP74gxl9Uz/XzEri0AHd76
8eS9zsB5KEp9dn3Yy3g39zz0JHKM8fSHR3dkZ5gCw0NSwo8xgEFsdq2u+KTF5Sws
ykLZaSQwlCvu8HkXf0/v534VBFoMLMDve9zjIXFDnSH7EypHVpzQ9WtJoAVpkW/1
kdvhnfe/QkXrRFG4L3nfVxT+lH/lugdMBgA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:04 2026 by rpki-client