Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/419e35af-c912-333d-9657-c0a4b58839c1.roa
File:                     419e35af-c912-333d-9657-c0a4b58839c1.roa (raw, json)
Hash identifier:          mIf1VRsZleiIEicl8LYD522s3CuVcG/bG3CDnOHC1Z0=
Subject key identifier:   B5:92:9A:6F:9C:AE:E5:85:CD:2E:CA:2B:0B:C7:AE:BD:F5:C7:AE:3F
Certificate issuer:       /CN=4d283c56-7cd2-4298-b4c5-c7d261e7bff4
Certificate serial:       010D0C9F4328584F43DD272721F24D7221F4A380
Authority key identifier: 10:D0:AA:35:67:D9:A3:9A:22:53:61:DB:E7:BF:D5:AD:11:50:30:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/419e35af-c912-333d-9657-c0a4b58839c1.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     401753
IP address blocks:        2602:f61e:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:27:27:21:f2:4d:72:21:f4:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d283c56-7cd2-4298-b4c5-c7d261e7bff4
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=cef21db7-66bf-44fa-ba76-d47c2c47c513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cc:06:a6:8d:69:e7:22:a0:fd:6b:4f:f7:1f:
                    d2:fd:2f:1a:1d:a9:56:61:b7:1e:06:b4:58:db:17:
                    c9:f0:5f:48:cb:0b:8e:df:c2:bb:e7:81:cd:38:4d:
                    cc:e5:4b:e5:93:d1:3b:8a:39:af:73:c2:12:66:6f:
                    95:59:5c:03:c4:d7:c7:b1:23:53:24:27:9f:50:52:
                    0a:d7:4f:04:7c:4d:ff:a9:c8:a4:4c:f5:a8:50:06:
                    6f:12:b4:3c:5b:29:22:66:12:a2:9f:6b:9b:e6:57:
                    98:de:79:2f:76:03:5a:a9:2a:0c:1e:ec:70:12:65:
                    7c:24:d3:6e:bd:7f:83:6b:26:5b:31:c2:6f:6a:82:
                    8d:e9:75:26:2e:ac:ff:78:64:17:e5:01:d3:f6:7f:
                    06:93:af:a7:f3:1f:37:43:81:eb:20:9f:29:9c:04:
                    b7:62:b9:b0:76:1e:35:e0:cb:87:8f:fe:b4:a0:e2:
                    e8:e5:27:85:f7:ff:0b:b7:b7:11:b8:f0:a3:f8:c3:
                    b2:47:80:7e:85:8e:9f:64:e0:19:44:f5:38:f0:8e:
                    a3:2d:52:31:1e:be:bd:c7:09:9b:72:46:e6:8d:03:
                    43:97:fc:c3:86:42:50:7f:68:55:5d:dd:be:e9:42:
                    47:af:27:5a:d4:57:5c:dd:56:c4:1e:cd:19:03:69:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:92:9A:6F:9C:AE:E5:85:CD:2E:CA:2B:0B:C7:AE:BD:F5:C7:AE:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/419e35af-c912-333d-9657-c0a4b58839c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.crl

            X509v3 Authority Key Identifier:
                keyid:10:D0:AA:35:67:D9:A3:9A:22:53:61:DB:E7:BF:D5:AD:11:50:30:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f61e:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:46:df:12:45:bd:06:47:0b:a1:2b:5a:02:2e:dd:48:2d:56:
         68:d8:ce:6f:88:33:9b:4c:74:4f:40:45:f9:c9:eb:12:d9:91:
         55:17:9c:59:ba:ed:40:03:e5:72:0b:99:9e:37:2f:c7:d1:8d:
         1d:2f:9c:ab:eb:65:04:c7:98:b8:0e:c4:6a:63:9e:90:d4:e7:
         2d:a7:cc:18:23:f7:3d:07:d7:04:c0:1c:5b:8e:ec:67:08:a9:
         42:03:89:e1:fc:02:35:ff:ce:1d:31:a7:29:37:36:79:5a:0c:
         9b:b4:5f:ad:04:85:e6:e7:b2:d5:8c:21:37:f1:7d:8a:f0:b5:
         de:a7:0f:5f:77:73:41:17:eb:97:85:59:01:e0:44:4a:51:8a:
         4e:f2:0b:b5:72:ff:a0:87:7b:0f:2b:69:42:12:5d:1c:7b:51:
         9f:df:e5:27:df:bc:62:57:ae:49:7a:b1:aa:e1:ef:7d:98:a5:
         4f:04:bf:bc:20:5f:c3:23:a0:77:0e:e7:4a:37:65:02:47:a7:
         9d:64:db:d0:52:86:7a:3c:4e:4b:f1:58:a9:49:b9:87:d8:5f:
         46:13:09:c3:21:a2:ad:78:14:db:0a:91:e5:b7:7e:8b:f2:af:
         24:10:c3:41:33:3f:1a:6d:9e:f2:ae:ad:5b:46:c9:61:83:13:
         89:e8:77:e4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9D3ScnIfJNciH0o4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQyODNjNTYtN2NkMi00Mjk4LWI0YzUtYzdkMjYxZTdi
ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk
Y2VmMjFkYjctNjZiZi00NGZhLWJhNzYtZDQ3YzJjNDdjNTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMwGpo1p5yKg/WtP9x/S/S8aHalWYbceBrRY
2xfJ8F9IywuO38K754HNOE3M5Uvlk9E7ijmvc8ISZm+VWVwDxNfHsSNTJCefUFIK
108EfE3/qcikTPWoUAZvErQ8WykiZhKin2ub5leY3nkvdgNaqSoMHuxwEmV8JNNu
vX+DayZbMcJvaoKN6XUmLqz/eGQX5QHT9n8Gk6+n8x83Q4HrIJ8pnAS3Yrmwdh41
4MuHj/60oOLo5SeF9/8Lt7cRuPCj+MOyR4B+hY6fZOAZRPU48I6jLVIxHr69xwmb
ckbmjQNDl/zDhkJQf2hVXd2+6UJHryda1Fdc3VbEHs0ZA2nJ9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLWSmm+cruWFzS7KKwvHrr31x64/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80ZDI4
M2M1Ni03Y2QyLTQyOTgtYjRjNS1jN2QyNjFlN2JmZjQvNDE5ZTM1YWYtYzkxMi0z
MzNkLTk2NTctYzBhNGI1ODgzOWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGQyODNjNTYtN2NkMi00Mjk4LWI0
YzUtYzdkMjYxZTdiZmY0LzRkMjgzYzU2LTdjZDItNDI5OC1iNGM1LWM3ZDI2MWU3
YmZmNC5jcmwwHwYDVR0jBBgwFoAUENCqNWfZo5oiU2Hb57/VrRFQMCEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZDI4M2M1Ni03Y2QyLTQyOTgtYjRjNS1jN2Qy
NjFlN2JmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2HgAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA1G3xJFvQZHC6ErWgIu3UgtVmjYzm+IM5tMdE9ARfnJ6xLZkVUX
nFm67UAD5XILmZ43L8fRjR0vnKvrZQTHmLgOxGpjnpDU5y2nzBgj9z0H1wTAHFuO
7GcIqUIDieH8AjX/zh0xpyk3NnlaDJu0X60EhebnstWMITfxfYrwtd6nD193c0EX
65eFWQHgREpRik7yC7Vy/6CHew8raUISXRx7UZ/f5SffvGJXrkl6sarh732YpU8E
v7wgX8MjoHcO50o3ZQJHp51k29BShno8TkvxWKlJuYfYX0YTCcMhoq14FNsKkeW3
fovyryQQw0EzPxptnvKurVtGyWGDE4nod+Q=
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:41:43 2026 by rpki-client