Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa
File:                     ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa (raw, json)
Hash identifier:          CPCmu/7luXjvnk9DhDUrtmb+ui22Wg1O/FT+vbvu6bI=
Subject key identifier:   85:7E:57:FC:96:1E:35:B0:3B:F2:EA:8F:94:95:98:78:20:C6:22:17
Certificate issuer:       /CN=c52f54e9-4dc6-4976-963e-f51088184223
Certificate serial:       010D0C9F4328584F0D6CE8D6D9125AA3633FB380
Authority key identifier: 59:54:A7:EF:DA:24:0C:DB:76:A3:58:FA:9D:33:06:2D:0E:1A:7D:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     33973
IP address blocks:        2602:815::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/c52f54e9-4dc6-4976-963e-f51088184223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/c52f54e9-4dc6-4976-963e-f51088184223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e8:d6:d9:12:5a:a3:63:3f:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c52f54e9-4dc6-4976-963e-f51088184223
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=07fdb10e-e39e-423e-bf50-55734c294a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e6:57:0b:f9:a4:a3:86:09:0f:d1:c3:42:5f:
                    f7:32:54:75:7c:a0:7d:43:85:32:f0:1d:4b:b2:99:
                    69:4b:36:c8:5a:72:5c:13:ab:53:40:11:2f:0b:ed:
                    d3:0f:c0:20:26:da:74:fb:59:50:bc:ee:17:a1:a6:
                    b3:58:09:a7:2a:1e:66:15:65:d7:7e:9e:2e:89:38:
                    3d:38:e4:de:c3:68:7f:d2:49:92:d6:0e:75:f9:a5:
                    75:b0:13:56:c7:f1:10:4f:f7:08:2f:84:4c:1a:f1:
                    e1:2b:39:2d:1d:a2:c4:a9:25:36:40:09:77:42:1c:
                    72:f9:77:5c:9e:07:83:6e:2c:c8:99:72:40:54:75:
                    7d:df:22:45:f8:24:a2:7a:00:c7:b8:d9:3c:12:34:
                    60:31:e1:f1:9b:58:68:9f:1f:b5:eb:13:b2:cb:72:
                    b1:3e:4a:36:62:59:e5:41:d6:ac:86:6a:6e:33:4e:
                    37:0e:42:e4:e4:b3:66:04:2b:87:c2:20:b2:89:a2:
                    1c:44:20:3f:f7:c2:f7:36:d6:11:22:a3:08:b4:e3:
                    fb:17:db:82:58:b3:5c:f4:2b:af:25:3e:6e:ef:22:
                    b5:31:63:0c:f1:f6:bb:42:da:9d:c4:40:97:04:9a:
                    e4:28:d0:89:e8:d8:04:07:e3:f0:56:6a:00:3b:db:
                    66:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7E:57:FC:96:1E:35:B0:3B:F2:EA:8F:94:95:98:78:20:C6:22:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/c52f54e9-4dc6-4976-963e-f51088184223.crl

            X509v3 Authority Key Identifier:
                keyid:59:54:A7:EF:DA:24:0C:DB:76:A3:58:FA:9D:33:06:2D:0E:1A:7D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ef:90:f2:42:ab:51:37:9f:b2:11:09:7e:80:9c:89:08:bc:
         f3:67:f9:9a:56:38:38:88:80:ca:9b:9d:1f:7e:84:50:58:db:
         7d:2a:e9:40:ac:51:4b:55:b6:fb:d9:56:41:d7:82:32:38:da:
         ce:97:14:aa:01:43:6e:1a:25:43:b4:3c:4c:1e:23:d0:01:24:
         e8:b1:2a:79:6c:77:ca:87:88:b0:93:a7:d0:64:0c:be:31:13:
         f6:2b:3a:e4:ad:78:e4:38:21:d6:9d:35:39:ac:6b:6b:db:1d:
         67:87:e5:97:a8:cf:d6:39:94:b7:bf:f4:e8:c3:d9:69:97:6c:
         4a:fd:21:f2:5d:54:ce:f1:c0:5e:31:5f:59:76:ec:b2:df:6f:
         ad:71:05:06:e9:7f:cd:85:a6:da:78:79:45:cb:9d:09:32:b7:
         c7:27:47:ba:23:4c:44:1f:2c:50:c2:24:89:fc:b4:d2:7f:b6:
         2e:af:19:7f:a7:43:d1:cf:05:fd:f1:60:2d:e5:76:e6:9f:e0:
         30:e3:1e:a2:8b:b1:56:ac:7f:19:3d:67:bf:c8:f6:e9:56:f0:
         82:f7:c9:d5:35:b6:89:d4:01:4d:d6:60:1c:f0:6b:68:d5:c5:
         ba:74:a2:cc:32:c5:f8:c3:79:36:be:b4:0e:1e:73:d6:03:a2:
         b1:bf:47:01
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8NbOjW2RJao2M/s4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzUyZjU0ZTktNGRjNi00OTc2LTk2M2UtZjUxMDg4MTg0
MjIzMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
MDdmZGIxMGUtZTM5ZS00MjNlLWJmNTAtNTU3MzRjMjk0YTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeZXC/mko4YJD9HDQl/3MlR1fKB9Q4Uy8B1L
splpSzbIWnJcE6tTQBEvC+3TD8AgJtp0+1lQvO4XoaazWAmnKh5mFWXXfp4uiTg9
OOTew2h/0kmS1g51+aV1sBNWx/EQT/cIL4RMGvHhKzktHaLEqSU2QAl3Qhxy+Xdc
ngeDbizImXJAVHV93yJF+CSiegDHuNk8EjRgMeHxm1honx+16xOyy3KxPko2Ylnl
QdashmpuM043DkLk5LNmBCuHwiCyiaIcRCA/98L3NtYRIqMItOP7F9uCWLNc9Cuv
JT5u7yK1MWMM8fa7QtqdxECXBJrkKNCJ6NgEB+PwVmoAO9tmRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIV+V/yWHjWwO/Lqj5SVmHggxiIXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNTJm
NTRlOS00ZGM2LTQ5NzYtOTYzZS1mNTEwODgxODQyMjMvZmY2Mzc1MmItMjllNy0z
ZmMwLWI2YjEtNmViZWY3NGNiMGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzUyZjU0ZTktNGRjNi00OTc2LTk2
M2UtZjUxMDg4MTg0MjIzL2M1MmY1NGU5LTRkYzYtNDk3Ni05NjNlLWY1MTA4ODE4
NDIyMy5jcmwwHwYDVR0jBBgwFoAUWVSn79okDNt2o1j6nTMGLQ4afZMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jNTJmNTRlOS00ZGM2LTQ5NzYtOTYzZS1mNTEw
ODgxODQyMjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFQAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADTvkPJCq1E3n7IRCX6AnIkIvPNn+ZpWODiIgMqbnR9+hFBY230q
6UCsUUtVtvvZVkHXgjI42s6XFKoBQ24aJUO0PEweI9ABJOixKnlsd8qHiLCTp9Bk
DL4xE/YrOuSteOQ4IdadNTmsa2vbHWeH5Zeoz9Y5lLe/9OjD2WmXbEr9IfJdVM7x
wF4xX1l27LLfb61xBQbpf82Fptp4eUXLnQkyt8cnR7ojTEQfLFDCJIn8tNJ/ti6v
GX+nQ9HPBf3xYC3lduaf4DDjHqKLsVasfxk9Z7/I9ulW8IL3ydU1tonUAU3WYBzw
a2jVxbp0oswyxfjDeTa+tA4ec9YDorG/RwE=
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:54:57 2026 by rpki-client