Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/4c5676ec-271f-350c-b2f3-e074761d13ff.roa
File:                     4c5676ec-271f-350c-b2f3-e074761d13ff.roa (raw, json)
Hash identifier:          5yKV7PS38BoCzMs+qxxf3Go4pdO9KeAXyPT1S5BO4Iw=
Subject key identifier:   8D:FF:F4:7A:AC:05:93:AE:6F:46:FA:4C:A6:06:BC:71:72:67:C0:6C
Certificate issuer:       /CN=a67e3748-c8c7-4114-8dc5-c4c18b0f8d30
Certificate serial:       010D0C9F4328584F49897472E5EA6BA94B222B00
Authority key identifier: 7F:01:39:18:A5:81:6F:DD:CD:EB:8C:B5:9E:B1:EB:B7:BD:57:2C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/4c5676ec-271f-350c-b2f3-e074761d13ff.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     29769
IP address blocks:        2602:f8aa::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:74:72:e5:ea:6b:a9:4b:22:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67e3748-c8c7-4114-8dc5-c4c18b0f8d30
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=99ff4002-44e3-4cfa-b50c-6b92b8cffcb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:af:c1:46:14:84:db:15:86:32:45:59:1d:
                    82:28:64:7b:5e:23:3a:d6:6d:58:12:21:ea:82:d1:
                    dc:38:7a:01:24:85:73:bb:45:56:83:41:60:03:28:
                    de:d0:71:6f:c4:09:4b:df:77:5f:65:c9:9c:ac:46:
                    9c:66:af:08:85:58:c4:26:56:62:bd:f8:9b:15:83:
                    5d:93:87:ed:8c:63:6c:71:6b:60:a5:e3:f2:76:2e:
                    09:03:fd:8f:5e:d7:65:13:24:52:4b:d7:23:b1:f4:
                    02:85:2b:33:9c:ce:25:ed:a3:d8:32:98:33:37:61:
                    e7:cb:0c:cd:d7:04:d7:8a:5b:78:7d:bb:29:87:fb:
                    2b:d4:94:42:b9:42:ab:80:fc:af:6c:a0:e6:27:c1:
                    0a:dd:ab:3f:5a:31:46:d7:50:99:33:83:59:ad:a2:
                    50:47:fa:88:20:17:ce:d5:5c:78:b5:31:da:fe:bc:
                    a2:41:ab:cd:79:1f:b8:44:dc:50:26:23:01:76:b9:
                    93:00:73:ee:ea:73:0f:1d:ee:c0:a0:44:f3:83:60:
                    e7:a0:f5:b7:05:ac:b3:a0:d8:b2:e7:38:3b:13:f7:
                    28:40:0b:63:fb:51:e4:72:68:94:03:81:94:2b:1c:
                    78:34:6a:7c:a5:ec:80:14:95:ca:65:50:57:48:9c:
                    25:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FF:F4:7A:AC:05:93:AE:6F:46:FA:4C:A6:06:BC:71:72:67:C0:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/4c5676ec-271f-350c-b2f3-e074761d13ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.crl

            X509v3 Authority Key Identifier:
                keyid:7F:01:39:18:A5:81:6F:DD:CD:EB:8C:B5:9E:B1:EB:B7:BD:57:2C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8aa::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:3b:5e:d8:61:90:71:86:14:a7:8f:de:76:2b:db:1d:10:75:
         c3:13:60:ed:d3:2a:21:3c:4a:23:5f:84:fc:4a:78:a0:3c:76:
         96:bd:16:f1:ee:be:21:0a:4b:f0:53:8a:5f:1b:0d:ba:fe:f6:
         30:f6:59:a1:76:6a:de:c2:19:db:49:b9:47:ff:8c:19:c7:92:
         b5:c2:b6:e6:30:f5:a3:1a:2c:cc:53:32:3c:54:2b:01:02:51:
         22:58:ed:c6:f5:8d:5e:c3:74:0a:7d:c0:85:fa:7b:47:7c:c6:
         a6:c3:57:72:5f:4a:78:3f:f5:00:c8:18:0d:bb:0c:5a:6e:f4:
         b7:c9:87:39:81:8e:23:a0:8f:21:59:45:e6:9e:07:f3:47:bd:
         e9:4f:55:2e:30:68:ec:6c:d3:74:33:ab:aa:a6:4c:84:1d:33:
         b9:ce:1d:d6:0f:57:bf:24:2c:4b:93:d2:6d:c7:71:2b:92:ea:
         8a:cb:bb:81:be:89:00:d4:80:4e:4d:f9:01:15:95:f5:e1:e4:
         a5:52:ca:b1:3a:c1:75:89:8d:3e:78:ed:00:44:79:e2:96:53:
         3f:59:cd:83:27:0a:da:6b:90:33:70:fa:1a:51:ba:3c:50:1c:
         d1:73:b7:72:27:5f:4b:fd:ad:61:53:ad:3c:a9:e8:46:25:20:
         d7:4f:80:2e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JiXRy5eprqUsiKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTY3ZTM3NDgtYzhjNy00MTE0LThkYzUtYzRjMThiMGY4
ZDMwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTlmZjQwMDItNDRlMy00Y2ZhLWI1MGMtNmI5MmI4Y2ZmY2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqOvwUYUhNsVhjJFWR2CKGR7XiM61m1YEiHq
gtHcOHoBJIVzu0VWg0FgAyje0HFvxAlL33dfZcmcrEacZq8IhVjEJlZivfibFYNd
k4ftjGNscWtgpePydi4JA/2PXtdlEyRSS9cjsfQChSsznM4l7aPYMpgzN2HnywzN
1wTXilt4fbsph/sr1JRCuUKrgPyvbKDmJ8EK3as/WjFG11CZM4NZraJQR/qIIBfO
1Vx4tTHa/ryiQavNeR+4RNxQJiMBdrmTAHPu6nMPHe7AoETzg2DnoPW3BayzoNiy
5zg7E/coQAtj+1HkcmiUA4GUKxx4NGp8peyAFJXKZVBXSJwlVwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFI3/9HqsBZOub0b6TKYGvHFyZ8BsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNjdl
Mzc0OC1jOGM3LTQxMTQtOGRjNS1jNGMxOGIwZjhkMzAvNGM1Njc2ZWMtMjcxZi0z
NTBjLWIyZjMtZTA3NDc2MWQxM2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTY3ZTM3NDgtYzhjNy00MTE0LThk
YzUtYzRjMThiMGY4ZDMwL2E2N2UzNzQ4LWM4YzctNDExNC04ZGM1LWM0YzE4YjBm
OGQzMC5jcmwwHwYDVR0jBBgwFoAUfwE5GKWBb93N64y1nrHrt71XLLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNjdlMzc0OC1jOGM3LTQxMTQtOGRjNS1jNGMx
OGIwZjhkMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4qgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEA4Tte2GGQcYYUp4/edivbHRB1wxNg7dMqITxKI1+E/Ep4oDx2lr0W
8e6+IQpL8FOKXxsNuv72MPZZoXZq3sIZ20m5R/+MGceStcK25jD1oxoszFMyPFQr
AQJRIljtxvWNXsN0Cn3Ahfp7R3zGpsNXcl9KeD/1AMgYDbsMWm70t8mHOYGOI6CP
IVlF5p4H80e96U9VLjBo7GzTdDOrqqZMhB0zuc4d1g9XvyQsS5PSbcdxK5Lqisu7
gb6JANSATk35ARWV9eHkpVLKsTrBdYmNPnjtAER54pZTP1nNgycK2muQM3D6GlG6
PFAc0XO3cidfS/2tYVOtPKnoRiUg10+ALg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:45:28 2026 by rpki-client