Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e67bfd16-b8e0-3e32-ac6b-19ca653a7841.roa
File:                     e67bfd16-b8e0-3e32-ac6b-19ca653a7841.roa (raw, json)
Hash identifier:          dy9N5C2E2TqD7QExzSlAip4vYQbZdZOCVb5IneWFkUw=
Subject key identifier:   EC:A6:65:23:54:09:3D:D3:12:85:AA:4F:0A:D2:1E:07:25:69:21:2E
Certificate issuer:       /CN=998a132f-4994-4d96-a767-25e4ce264bc4
Certificate serial:       010D0C9F4328584EF9E20A8DF1A95A6602CAC480
Authority key identifier: 58:61:99:D7:A0:9B:63:D6:A3:67:92:0C:03:B4:B8:28:F1:D6:2C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e67bfd16-b8e0-3e32-ac6b-19ca653a7841.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     19520
IP address blocks:        2602:fb4e::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:0a:8d:f1:a9:5a:66:02:ca:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998a132f-4994-4d96-a767-25e4ce264bc4
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=09c6d305-216a-4ee2-9235-9cdb587867b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f2:a6:02:a5:2b:e8:32:85:41:2e:8b:2b:c5:
                    6b:c0:7e:c9:fa:1c:96:f6:fb:eb:ec:12:e1:a3:5d:
                    19:b6:07:e3:f2:89:5a:6c:91:84:25:88:3d:f2:a3:
                    0d:b2:78:c6:75:92:c6:47:0e:9f:b5:8d:62:d8:56:
                    63:d5:52:b6:bf:64:f8:d1:da:b1:97:68:2f:f5:a4:
                    94:11:ba:bd:fd:4b:76:9c:2c:1d:30:25:4f:91:e4:
                    6e:d4:3e:9b:1f:43:59:93:6a:0c:f1:af:2d:ec:59:
                    12:70:f6:dc:f7:0d:0f:54:aa:a3:c3:b5:ed:ff:2d:
                    0d:7f:e2:14:3d:1f:d0:0c:63:66:c1:fb:f5:97:a5:
                    6d:35:33:71:92:99:7f:9c:4d:ef:08:d9:94:da:7e:
                    e1:c4:91:eb:4e:3b:d8:01:3d:13:84:e8:a8:de:57:
                    f7:82:04:cb:3c:32:2b:39:f5:86:3e:d5:32:0c:08:
                    6a:a5:62:6e:bb:65:fd:60:29:1c:d5:27:79:41:0b:
                    7a:29:59:60:ec:5d:73:c6:b9:87:ca:28:71:0e:c2:
                    60:19:1b:9a:b1:ad:70:ad:31:c1:f0:02:fa:98:8a:
                    ef:33:ec:b3:80:fa:5f:7b:76:0c:3a:29:63:c8:05:
                    a2:f9:eb:7d:1b:61:42:e0:15:d6:20:9e:63:58:0b:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A6:65:23:54:09:3D:D3:12:85:AA:4F:0A:D2:1E:07:25:69:21:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e67bfd16-b8e0-3e32-ac6b-19ca653a7841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.crl

            X509v3 Authority Key Identifier:
                keyid:58:61:99:D7:A0:9B:63:D6:A3:67:92:0C:03:B4:B8:28:F1:D6:2C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb4e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:96:d6:df:de:fa:81:1d:4d:63:31:40:1c:17:4d:2c:48:4a:
         d9:8b:27:b8:d5:61:cc:ee:a6:3b:04:f8:d9:c8:be:aa:8d:ac:
         91:d9:29:7b:65:06:c1:0f:21:6c:69:3b:95:07:d5:35:ba:d2:
         d8:45:db:27:9a:b0:ed:d9:19:cd:08:db:77:a0:cf:59:39:fd:
         d3:1f:a0:48:e3:cd:ee:1a:87:f5:74:15:9a:ff:f3:f7:a1:e1:
         35:78:7f:2f:d1:5f:78:53:29:05:e0:b2:03:d0:ee:1b:c4:04:
         fa:b9:d2:94:58:9d:cb:b1:2c:10:77:ee:db:4f:2c:fe:c2:6a:
         e4:19:fb:e7:92:51:0c:d9:f6:21:62:5c:c3:96:17:8e:2a:56:
         f4:6a:de:38:e5:dd:45:49:d1:f8:39:5e:16:38:c4:f5:a9:55:
         b3:b9:85:4e:bf:82:68:47:43:b1:99:63:49:b9:ac:42:b3:3a:
         d3:bd:02:67:5a:e6:a2:25:82:1b:ee:ac:3a:f8:96:1b:b3:ab:
         c3:28:dd:e0:77:f2:da:4e:db:46:6c:63:d8:b8:ba:68:1a:74:
         fa:1d:15:9c:89:17:7c:ed:f8:b8:9f:9d:0f:eb:8e:9e:72:4f:
         57:91:53:15:71:03:fe:e7:0c:2c:63:31:bf:b8:37:30:0f:ea:
         51:f8:b6:b1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE754gqN8alaZgLKxIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk4YTEzMmYtNDk5NC00ZDk2LWE3NjctMjVlNGNlMjY0
YmM0MB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk
MDljNmQzMDUtMjE2YS00ZWUyLTkyMzUtOWNkYjU4Nzg2N2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfKmAqUr6DKFQS6LK8VrwH7J+hyW9vvr7BLh
o10Ztgfj8olabJGEJYg98qMNsnjGdZLGRw6ftY1i2FZj1VK2v2T40dqxl2gv9aSU
Ebq9/Ut2nCwdMCVPkeRu1D6bH0NZk2oM8a8t7FkScPbc9w0PVKqjw7Xt/y0Nf+IU
PR/QDGNmwfv1l6VtNTNxkpl/nE3vCNmU2n7hxJHrTjvYAT0ThOio3lf3ggTLPDIr
OfWGPtUyDAhqpWJuu2X9YCkc1Sd5QQt6KVlg7F1zxrmHyihxDsJgGRuasa1wrTHB
8AL6mIrvM+yzgPpfe3YMOiljyAWi+et9G2FC4BXWIJ5jWAuxrwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOymZSNUCT3TEoWqTwrSHgclaSEuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85OThh
MTMyZi00OTk0LTRkOTYtYTc2Ny0yNWU0Y2UyNjRiYzQvZTY3YmZkMTYtYjhlMC0z
ZTMyLWFjNmItMTljYTY1M2E3ODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTk4YTEzMmYtNDk5NC00ZDk2LWE3
NjctMjVlNGNlMjY0YmM0Lzk5OGExMzJmLTQ5OTQtNGQ5Ni1hNzY3LTI1ZTRjZTI2
NGJjNC5jcmwwHwYDVR0jBBgwFoAUWGGZ16CbY9ajZ5IMA7S4KPHWLLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85OThhMTMyZi00OTk0LTRkOTYtYTc2Ny0yNWU0
Y2UyNjRiYzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7TgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAspbW3976gR1NYzFAHBdNLEhK2YsnuNVhzO6mOwT42ci+qo2skdkp
e2UGwQ8hbGk7lQfVNbrS2EXbJ5qw7dkZzQjbd6DPWTn90x+gSOPN7hqH9XQVmv/z
96HhNXh/L9FfeFMpBeCyA9DuG8QE+rnSlFidy7EsEHfu208s/sJq5Bn755JRDNn2
IWJcw5YXjipW9GreOOXdRUnR+DleFjjE9alVs7mFTr+CaEdDsZljSbmsQrM6070C
Z1rmoiWCG+6sOviWG7Orwyjd4Hfy2k7bRmxj2Li6aBp0+h0VnIkXfO34uJ+dD+uO
nnJPV5FTFXED/ucMLGMxv7g3MA/qUfi2sQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:43:56 2026 by rpki-client