Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/026e5fce-3561-3755-8142-3a1f5a088b3d.roa
File:                     026e5fce-3561-3755-8142-3a1f5a088b3d.roa (raw, json)
Hash identifier:          BJqHQ3rudchSIGU8BKLXTpP5DPsDMlY6v3a51ZlSKQk=
Subject key identifier:   D2:52:F4:DB:D0:11:8D:6D:CE:CE:AC:CF:2B:70:F7:0E:B6:7C:5F:98
Certificate issuer:       /CN=58256eb6-85b9-455c-a9f6-3b446c5688f3
Certificate serial:       010D0C9F4328584B76945ACD0CE535A6A613D480
Authority key identifier: 3E:F8:B9:0A:CE:E0:C1:63:D3:30:C2:46:64:2A:51:CB:B9:F0:1E:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/026e5fce-3561-3755-8142-3a1f5a088b3d.roa
Signing time:             Thu 09 Oct 2025 09:52:00 +0000
ROA not before:           Thu 09 Oct 2025 09:52:00 +0000
ROA not after:            Wed 07 Jan 2026 10:52:00 +0000
asID:                     152179
IP address blocks:        2602:f624::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/58256eb6-85b9-455c-a9f6-3b446c5688f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/58256eb6-85b9-455c-a9f6-3b446c5688f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:94:5a:cd:0c:e5:35:a6:a6:13:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58256eb6-85b9-455c-a9f6-3b446c5688f3
        Validity
            Not Before: Oct  9 09:52:00 2025 GMT
            Not After : Jan  7 10:52:00 2026 GMT
        Subject: CN=68244186-189a-434a-81cb-387872c23b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dd:02:41:37:b3:fe:c9:41:02:bb:5e:6f:2d:
                    e2:77:92:25:c5:07:df:1a:d7:58:62:ea:eb:01:64:
                    77:b0:f9:90:fe:a0:f9:81:68:0a:9e:ce:a6:c8:7f:
                    2d:32:1a:e8:93:eb:d9:3b:37:d3:bc:92:ed:9a:b1:
                    e9:54:3e:08:0d:4e:45:6d:46:83:76:9c:fb:ba:53:
                    5c:ec:02:38:a6:c1:19:d5:25:80:5e:71:17:18:6a:
                    94:26:12:85:71:1a:91:fc:8f:a1:70:68:09:b0:27:
                    de:dd:ba:3f:94:ad:f1:74:ab:ff:c0:ed:bb:ae:73:
                    02:75:1e:e0:a0:7b:57:5e:2b:d0:bf:ea:01:1f:09:
                    95:35:8e:c9:90:88:70:19:e4:3d:49:21:29:59:0d:
                    db:f6:fe:f9:28:59:14:d5:8b:b2:04:3d:9e:c7:8a:
                    63:ab:42:90:e7:91:75:4b:fa:7d:41:b7:c9:df:34:
                    e4:63:7e:7b:10:9f:5a:7b:16:d2:16:0d:60:c3:db:
                    c0:31:4d:d4:da:1d:45:23:f7:f5:78:99:0c:dc:62:
                    dd:25:35:4b:5a:29:5f:26:9a:9c:84:c7:bf:10:a6:
                    85:1f:6d:3f:58:e6:46:2f:5e:1f:b4:8f:eb:29:cb:
                    12:bd:5a:d8:39:44:03:0c:8b:3f:8d:a2:de:12:bb:
                    bd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:52:F4:DB:D0:11:8D:6D:CE:CE:AC:CF:2B:70:F7:0E:B6:7C:5F:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/026e5fce-3561-3755-8142-3a1f5a088b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/58256eb6-85b9-455c-a9f6-3b446c5688f3.crl

            X509v3 Authority Key Identifier:
                keyid:3E:F8:B9:0A:CE:E0:C1:63:D3:30:C2:46:64:2A:51:CB:B9:F0:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f624::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:04:96:08:9c:98:d4:59:c9:e4:46:34:66:ee:73:e9:fb:6e:
         01:3b:1f:2f:a5:69:bd:05:12:8e:6c:a6:0d:a7:74:83:83:12:
         65:ee:87:35:ca:f0:7a:2a:96:79:0a:47:a5:d9:99:04:70:b9:
         d6:cf:13:59:f1:87:49:05:f4:de:bf:c8:8c:ac:9f:e5:79:7d:
         44:90:0c:c2:1b:32:ad:3d:fb:96:04:72:1b:81:d3:27:8d:f3:
         f4:c6:ba:cf:0a:5a:54:e6:dd:72:07:c5:d6:ee:e9:bb:8d:9c:
         6d:d9:26:34:a1:83:ce:f6:5b:d0:4f:25:22:77:3c:e0:36:62:
         ef:93:e0:a6:3d:0c:8e:7e:48:f8:9d:98:70:7c:92:8a:27:96:
         25:4a:af:ac:02:bc:46:92:8d:94:b3:d9:31:e9:c5:61:74:b2:
         94:db:5a:f7:32:21:9f:14:e4:f4:4a:44:a6:a8:1b:fa:9d:7e:
         7b:d9:8a:99:78:34:d9:8d:65:f3:87:82:0d:44:35:36:46:6c:
         26:12:ce:98:69:37:6d:54:fd:0b:89:28:cf:14:ce:fc:d3:48:
         7f:29:a3:d0:23:48:c1:01:ff:33:42:36:37:fc:f1:c3:e7:69:
         e2:4a:85:41:c0:74:ea:a9:84:45:a9:30:b6:49:47:a5:eb:6b:
         f6:c3:de:e7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEt2lFrNDOU1pqYT1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTgyNTZlYjYtODViOS00NTVjLWE5ZjYtM2I0NDZjNTY4
OGYzMB4XDTI1MTAwOTA5NTIwMFoXDTI2MDEwNzEwNTIwMFowLzEtMCsGA1UEAxMk
NjgyNDQxODYtMTg5YS00MzRhLTgxY2ItMzg3ODcyYzIzYjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt0CQTez/slBArteby3id5IlxQffGtdYYurr
AWR3sPmQ/qD5gWgKns6myH8tMhrok+vZOzfTvJLtmrHpVD4IDU5FbUaDdpz7ulNc
7AI4psEZ1SWAXnEXGGqUJhKFcRqR/I+hcGgJsCfe3bo/lK3xdKv/wO27rnMCdR7g
oHtXXivQv+oBHwmVNY7JkIhwGeQ9SSEpWQ3b9v75KFkU1YuyBD2ex4pjq0KQ55F1
S/p9QbfJ3zTkY357EJ9aexbSFg1gw9vAMU3U2h1FI/f1eJkM3GLdJTVLWilfJpqc
hMe/EKaFH20/WOZGL14ftI/rKcsSvVrYOUQDDIs/jaLeEru9GwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNJS9NvQEY1tzs6szytw9w62fF+YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ODI1
NmViNi04NWI5LTQ1NWMtYTlmNi0zYjQ0NmM1Njg4ZjMvMDI2ZTVmY2UtMzU2MS0z
NzU1LTgxNDItM2ExZjVhMDg4YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNTgyNTZlYjYtODViOS00NTVjLWE5
ZjYtM2I0NDZjNTY4OGYzLzU4MjU2ZWI2LTg1YjktNDU1Yy1hOWY2LTNiNDQ2YzU2
ODhmMy5jcmwwHwYDVR0jBBgwFoAUPvi5Cs7gwWPTMMJGZCpRy7nwHkMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy81ODI1NmViNi04NWI5LTQ1NWMtYTlmNi0zYjQ0
NmM1Njg4ZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2JAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIQSWCJyY1FnJ5EY0Zu5z6ftuATsfL6VpvQUSjmymDad0g4MSZe6H
NcrweiqWeQpHpdmZBHC51s8TWfGHSQX03r/IjKyf5Xl9RJAMwhsyrT37lgRyG4HT
J43z9Ma6zwpaVObdcgfF1u7pu42cbdkmNKGDzvZb0E8lInc84DZi75Pgpj0Mjn5I
+J2YcHySiieWJUqvrAK8RpKNlLPZMenFYXSylNta9zIhnxTk9EpEpqgb+p1+e9mK
mXg02Y1l84eCDUQ1NkZsJhLOmGk3bVT9C4kozxTO/NNIfymj0CNIwQH/M0I2N/zx
w+dp4kqFQcB06qmERakwtklHpetr9sPe5w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:33 2025 by rpki-client