Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/3b3d4011-27b7-384a-a0b5-68c64f0848ce.roa
File:                     3b3d4011-27b7-384a-a0b5-68c64f0848ce.roa (raw, json)
Hash identifier:          e13GxE/Sjd2k4EtCK0vjziqg/FeRe8Z5pUgg5QEzfps=
Subject key identifier:   39:9E:A5:AA:33:5B:6A:EE:89:56:EF:82:85:40:A5:F3:D2:8D:84:06
Certificate issuer:       /CN=b9ee24c4-7325-4cbe-8291-8c22f4eef30c
Certificate serial:       010D0C9F4328584F6C584F7D2552CA0719050B00
Authority key identifier: FA:06:55:DD:F2:23:C4:68:D6:AE:16:EE:25:04:F2:9D:B9:5A:9E:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/3b3d4011-27b7-384a-a0b5-68c64f0848ce.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     14618
IP address blocks:        2602:f517::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:4f:7d:25:52:ca:07:19:05:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ee24c4-7325-4cbe-8291-8c22f4eef30c
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=866fef65-3770-44fa-a245-1c9b322e96a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:63:8e:72:ee:a8:e9:02:11:2f:a6:bd:6e:d1:
                    bd:17:28:35:fa:04:10:be:c0:0a:7d:5c:fe:90:72:
                    92:51:55:5f:b4:52:03:ce:5a:72:cc:93:3b:02:b1:
                    9c:74:ef:8d:10:73:de:88:8f:2c:3c:9c:93:ae:8f:
                    b7:59:8f:9f:13:78:7b:95:18:33:19:1d:7a:d4:5c:
                    11:35:d7:7e:fb:a0:25:d7:54:4d:5d:ae:8b:93:34:
                    b2:8b:d1:31:2a:f2:9e:99:fe:37:8e:3c:a5:e0:dd:
                    30:e2:2e:f5:bd:8f:89:a6:47:1a:03:cf:f9:dc:86:
                    97:b3:2e:05:40:55:71:d3:da:08:b8:5b:44:64:4c:
                    24:a4:66:08:89:6c:4c:79:7c:70:6a:fd:53:68:72:
                    73:96:a6:66:6c:25:e2:85:8f:73:ae:39:16:87:e3:
                    9d:60:db:7e:a3:95:05:35:ae:99:18:b3:d8:ba:6b:
                    40:6f:8a:2b:3b:7d:8a:6f:09:c8:4c:1d:e0:5e:ac:
                    51:1c:51:18:f0:58:df:23:87:13:d6:e9:07:da:d5:
                    1c:75:7d:ea:74:60:26:a1:bd:16:2b:59:87:f0:a5:
                    d8:7d:a3:49:eb:9e:dd:66:17:16:62:ae:09:6e:99:
                    95:07:d1:9c:78:db:4e:d4:7a:a1:f6:5e:69:b0:51:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9E:A5:AA:33:5B:6A:EE:89:56:EF:82:85:40:A5:F3:D2:8D:84:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/3b3d4011-27b7-384a-a0b5-68c64f0848ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:06:55:DD:F2:23:C4:68:D6:AE:16:EE:25:04:F2:9D:B9:5A:9E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f517::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:23:6e:d4:ad:e3:a5:3f:38:75:dc:28:76:fa:66:eb:bc:3b:
         09:e4:6f:3b:69:f5:61:f2:13:95:a2:e2:4c:90:2d:9d:f6:04:
         50:0d:e1:f2:6a:3c:ac:d4:da:9b:9b:3c:e1:3a:2b:a8:4c:5e:
         0a:50:77:1c:42:89:e7:b6:2a:e7:4c:43:00:bc:09:a7:e0:74:
         28:9a:f5:85:5d:fc:96:3d:99:76:e0:51:e8:c8:aa:94:99:76:
         4c:02:59:27:f1:fa:dd:23:90:56:d5:19:2f:a2:5d:aa:db:c1:
         6a:6a:78:fb:ff:ae:b4:f3:bc:e0:bd:5b:da:43:c1:58:07:f9:
         0b:28:6b:61:c5:c0:f7:6f:cb:b0:5b:86:99:f5:0b:c8:3e:95:
         15:a7:f8:93:65:13:f4:dc:64:dc:8a:50:8c:11:bb:1e:a7:cd:
         0b:47:62:72:14:a7:1f:e3:b1:63:38:84:b3:1b:7d:d4:d0:34:
         fd:b4:ea:4d:d4:af:2f:a3:2c:40:1d:1d:84:03:bc:02:21:7c:
         3d:ab:25:e5:f6:23:5d:44:bf:f3:df:47:96:82:eb:b0:ee:65:
         8e:43:57:fa:b9:9b:73:a7:9d:64:e8:7d:1e:d5:38:de:03:e0:
         82:b0:bb:1b:72:c1:a6:2b:c0:48:79:c5:f8:03:68:50:f7:9d:
         21:e4:60:84
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9sWE99JVLKBxkFCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjllZTI0YzQtNzMyNS00Y2JlLTgyOTEtOGMyMmY0ZWVm
MzBjMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk
ODY2ZmVmNjUtMzc3MC00NGZhLWEyNDUtMWM5YjMyMmU5NmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2OOcu6o6QIRL6a9btG9Fyg1+gQQvsAKfVz+
kHKSUVVftFIDzlpyzJM7ArGcdO+NEHPeiI8sPJyTro+3WY+fE3h7lRgzGR161FwR
Ndd++6Al11RNXa6LkzSyi9ExKvKemf43jjyl4N0w4i71vY+JpkcaA8/53IaXsy4F
QFVx09oIuFtEZEwkpGYIiWxMeXxwav1TaHJzlqZmbCXihY9zrjkWh+OdYNt+o5UF
Na6ZGLPYumtAb4orO32KbwnITB3gXqxRHFEY8FjfI4cT1ukH2tUcdX3qdGAmob0W
K1mH8KXYfaNJ657dZhcWYq4JbpmVB9GceNtO1Hqh9l5psFF8gwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDmepaozW2ruiVbvgoVApfPSjYQGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iOWVl
MjRjNC03MzI1LTRjYmUtODI5MS04YzIyZjRlZWYzMGMvM2IzZDQwMTEtMjdiNy0z
ODRhLWEwYjUtNjhjNjRmMDg0OGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjllZTI0YzQtNzMyNS00Y2JlLTgy
OTEtOGMyMmY0ZWVmMzBjL2I5ZWUyNGM0LTczMjUtNGNiZS04MjkxLThjMjJmNGVl
ZjMwYy5jcmwwHwYDVR0jBBgwFoAU+gZV3fIjxGjWrhbuJQTynblanlgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9iOWVlMjRjNC03MzI1LTRjYmUtODI5MS04YzIy
ZjRlZWYzMGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1FwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEApyNu1K3jpT84ddwodvpm67w7CeRvO2n1YfITlaLiTJAtnfYEUA3h
8mo8rNTam5s84TorqExeClB3HEKJ57Yq50xDALwJp+B0KJr1hV38lj2ZduBR6Miq
lJl2TAJZJ/H63SOQVtUZL6JdqtvBamp4+/+utPO84L1b2kPBWAf5CyhrYcXA92/L
sFuGmfULyD6VFaf4k2UT9Nxk3IpQjBG7HqfNC0dichSnH+OxYziEsxt91NA0/bTq
TdSvL6MsQB0dhAO8AiF8Pasl5fYjXUS/899HloLrsO5ljkNX+rmbc6edZOh9HtU4
3gPggrC7G3LBpivASHnF+ANoUPedIeRghA==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:41:10 2026 by rpki-client