Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/b9adf7f1-c81c-30b2-8cb8-56b27f23e17d.roa
File:                     b9adf7f1-c81c-30b2-8cb8-56b27f23e17d.roa (raw, json)
Hash identifier:          7Nu9tOH71ZoHJ7wIBObN8f/PoZpd5zRahsntcbX4mrg=
Subject key identifier:   E3:9E:2C:E4:7E:DE:23:F4:6C:B3:FC:58:D0:D6:D2:BB:C1:FA:FE:88
Certificate issuer:       /CN=1d71aad6-87bb-4b95-b81e-5f6d95d05f03
Certificate serial:       010D0C9F4328584F49880043C719765708D96200
Authority key identifier: 64:EB:9A:E0:63:A7:1F:14:5A:3B:C2:09:12:04:E7:85:81:F6:88:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/b9adf7f1-c81c-30b2-8cb8-56b27f23e17d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     53548
IP address blocks:        2602:fd29::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:00:43:c7:19:76:57:08:d9:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d71aad6-87bb-4b95-b81e-5f6d95d05f03
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=553b4df9-e939-443b-b6da-c08df4e67fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:de:3b:42:70:c7:73:b8:be:94:c4:bb:b5:
                    f4:30:9f:a7:96:a8:48:c2:a4:66:fc:3d:45:1d:f9:
                    47:55:84:c3:19:a0:db:1b:00:e8:e6:1d:09:e4:5e:
                    25:3f:74:9e:26:60:bf:ae:74:bb:56:8e:99:c2:9f:
                    6c:30:ca:50:35:71:28:c8:d0:2f:cf:2f:63:85:f8:
                    3d:97:e8:65:01:96:b3:a9:73:77:02:42:a5:74:92:
                    76:a3:42:6f:ec:f8:04:b7:d9:b4:63:bc:60:0a:fd:
                    13:a5:0e:36:d5:9f:96:fb:d8:22:d6:a1:be:d5:eb:
                    da:79:00:bb:75:50:3b:6f:4d:87:8c:30:97:96:38:
                    d9:a3:d3:3a:79:7c:ed:f8:c7:4b:72:28:ea:63:e1:
                    01:6e:29:58:cc:90:2b:56:44:f9:32:69:39:65:84:
                    82:2d:ee:7b:31:91:d5:b0:6f:54:23:76:a6:fe:f4:
                    23:c8:dc:28:8f:b3:d2:d0:74:52:ba:95:b4:ec:9e:
                    ef:f7:a9:fc:07:4a:e1:14:e4:03:d1:b3:81:56:5c:
                    0a:08:aa:1f:ed:99:5a:27:14:33:e4:3f:db:b4:be:
                    06:34:95:d5:57:0f:61:36:d9:94:34:3f:89:ac:98:
                    ea:ca:89:42:2a:4a:93:93:dd:c3:5c:8a:88:0b:cd:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9E:2C:E4:7E:DE:23:F4:6C:B3:FC:58:D0:D6:D2:BB:C1:FA:FE:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/b9adf7f1-c81c-30b2-8cb8-56b27f23e17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.crl

            X509v3 Authority Key Identifier:
                keyid:64:EB:9A:E0:63:A7:1F:14:5A:3B:C2:09:12:04:E7:85:81:F6:88:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd29::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:4d:9c:35:31:3c:2d:36:a4:00:7a:48:43:58:4e:84:62:a2:
         64:a3:68:9f:96:c7:6e:30:1c:2e:44:17:3f:85:af:f2:d0:8b:
         59:4f:ec:5f:e7:bf:18:33:a5:d3:44:bd:8a:4a:10:94:aa:a9:
         43:48:1d:a3:fa:13:b1:0c:b2:95:09:50:f3:ae:f0:fb:fe:80:
         ac:24:ac:dd:9d:6c:e4:5d:29:1a:c9:98:a5:9b:33:76:5c:03:
         5b:ce:87:1e:0f:5e:e4:4f:bc:e0:ab:00:4c:a5:f6:80:36:37:
         34:6e:0e:79:f3:16:cc:4b:c2:ac:77:b5:46:78:d2:56:60:8b:
         1e:60:b8:39:e9:f4:d3:11:2b:ea:7c:91:52:84:61:42:be:82:
         90:84:1b:ea:7e:86:38:b3:d3:24:8a:7e:25:ae:be:26:66:7e:
         a9:d3:76:4b:2f:4f:26:10:ff:e6:11:f3:97:41:d3:44:63:61:
         d5:f9:a8:66:17:5f:70:23:02:5b:4f:b6:d8:1e:82:90:8b:fa:
         15:a6:a0:b9:55:bf:3f:62:3a:17:4e:e4:30:2a:aa:8a:09:ca:
         6e:13:97:7b:7e:c8:99:d8:01:44:b5:88:36:5a:7c:29:df:0f:
         48:f8:98:44:46:91:0e:24:15:fe:33:7f:66:9a:9c:cf:56:47:
         40:2e:a5:e2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JiABDxxl2VwjZYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ3MWFhZDYtODdiYi00Yjk1LWI4MWUtNWY2ZDk1ZDA1
ZjAzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTUzYjRkZjktZTkzOS00NDNiLWI2ZGEtYzA4ZGY0ZTY3ZmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAfeO0Jwx3O4vpTEu7X0MJ+nlqhIwqRm/D1F
HflHVYTDGaDbGwDo5h0J5F4lP3SeJmC/rnS7Vo6Zwp9sMMpQNXEoyNAvzy9jhfg9
l+hlAZazqXN3AkKldJJ2o0Jv7PgEt9m0Y7xgCv0TpQ421Z+W+9gi1qG+1evaeQC7
dVA7b02HjDCXljjZo9M6eXzt+MdLcijqY+EBbilYzJArVkT5Mmk5ZYSCLe57MZHV
sG9UI3am/vQjyNwoj7PS0HRSupW07J7v96n8B0rhFOQD0bOBVlwKCKof7ZlaJxQz
5D/btL4GNJXVVw9hNtmUND+JrJjqyolCKkqTk93DXIqIC81kdQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOOeLOR+3iP0bLP8WNDW0rvB+v6IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZDcx
YWFkNi04N2JiLTRiOTUtYjgxZS01ZjZkOTVkMDVmMDMvYjlhZGY3ZjEtYzgxYy0z
MGIyLThjYjgtNTZiMjdmMjNlMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWQ3MWFhZDYtODdiYi00Yjk1LWI4
MWUtNWY2ZDk1ZDA1ZjAzLzFkNzFhYWQ2LTg3YmItNGI5NS1iODFlLTVmNmQ5NWQw
NWYwMy5jcmwwHwYDVR0jBBgwFoAUZOua4GOnHxRaO8IJEgTnhYH2iG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZDcxYWFkNi04N2JiLTRiOTUtYjgxZS01ZjZk
OTVkMDVmMDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9KQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEA4k2cNTE8LTakAHpIQ1hOhGKiZKNon5bHbjAcLkQXP4Wv8tCLWU/s
X+e/GDOl00S9ikoQlKqpQ0gdo/oTsQyylQlQ867w+/6ArCSs3Z1s5F0pGsmYpZsz
dlwDW86HHg9e5E+84KsATKX2gDY3NG4OefMWzEvCrHe1RnjSVmCLHmC4Oen00xEr
6nyRUoRhQr6CkIQb6n6GOLPTJIp+Ja6+JmZ+qdN2Sy9PJhD/5hHzl0HTRGNh1fmo
ZhdfcCMCW0+22B6CkIv6FaaguVW/P2I6F07kMCqqignKbhOXe37ImdgBRLWINlp8
Kd8PSPiYREaRDiQV/jN/Zpqcz1ZHQC6l4g==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:26:54 2026 by rpki-client