Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/da5773b8-4ef3-3d71-90b3-379eb851969b.roa
File:                     da5773b8-4ef3-3d71-90b3-379eb851969b.roa (raw, json)
Hash identifier:          gTnqmVrJ8QxivMZXVEAJC0c9rmGDhbBGt5FyFbiRxw0=
Subject key identifier:   E7:2D:1F:0C:A3:ED:40:FC:DB:F9:8A:1B:7A:82:1F:3A:FF:AC:93:72
Certificate issuer:       /CN=9e02d737-f857-4f86-b0cd-a7966c6e2ac3
Certificate serial:       010D0C9F4328584F497499C0AED60D79F92DFD00
Authority key identifier: B9:A9:98:4A:99:17:91:42:EC:68:51:3E:B2:F4:35:AD:E3:C1:40:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/da5773b8-4ef3-3d71-90b3-379eb851969b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     402212
IP address blocks:        2602:f44d:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:99:c0:ae:d6:0d:79:f9:2d:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e02d737-f857-4f86-b0cd-a7966c6e2ac3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1ce5d06b-adc6-42cb-8039-39e4086399d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d1:68:e5:a2:8a:a3:ff:42:51:53:ee:fc:46:
                    a5:06:db:62:e0:14:2d:af:12:83:d5:61:89:b1:64:
                    5d:b9:8e:2b:8c:1d:c0:99:62:30:07:f2:cf:eb:e4:
                    f1:5c:03:77:22:b7:2f:17:84:b8:d5:30:57:2e:8a:
                    b9:ff:0d:fe:53:70:16:b1:84:3c:29:21:2d:3b:4a:
                    1f:66:e3:80:8c:6a:e9:aa:71:b1:57:b1:07:55:24:
                    fe:5a:b2:8d:57:37:56:99:f3:04:1d:8b:8c:c1:aa:
                    16:2a:aa:25:d5:a9:5f:f4:11:f1:aa:5a:ae:0b:2a:
                    d2:d9:54:8c:5d:18:1c:97:95:71:e5:29:6f:71:8c:
                    2c:39:e8:29:bf:16:44:54:23:e7:95:c5:b0:eb:1e:
                    eb:ad:44:ca:26:61:26:84:db:83:d2:6c:7e:d8:61:
                    75:46:6f:b9:59:fc:f4:90:bb:dd:79:4f:e7:77:59:
                    c7:8c:e9:0f:f1:98:9f:75:af:4e:e3:0d:13:94:19:
                    8f:d9:99:30:86:ce:e9:6a:03:a7:cb:fe:22:e5:2a:
                    da:e3:4b:1b:73:f8:e9:98:1c:4c:17:9d:08:e8:4f:
                    9c:00:e6:ca:56:ab:f6:16:6d:3c:cc:6e:47:bb:28:
                    ed:48:51:ed:57:d9:fc:e8:10:3b:f7:1f:d6:8f:03:
                    1e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2D:1F:0C:A3:ED:40:FC:DB:F9:8A:1B:7A:82:1F:3A:FF:AC:93:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/da5773b8-4ef3-3d71-90b3-379eb851969b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A9:98:4A:99:17:91:42:EC:68:51:3E:B2:F4:35:AD:E3:C1:40:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f44d:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6e:5f:13:7f:83:dc:ce:ec:49:4f:e8:08:88:2c:37:42:47:
         f2:18:bf:df:be:41:63:5a:71:3b:a4:e7:f3:b8:fd:a0:c1:0f:
         10:b8:28:6a:ef:03:c2:55:3a:fc:7a:42:ea:1c:fa:24:3a:c2:
         a2:44:55:67:10:87:da:d4:3c:76:d1:56:75:4b:6e:3b:3a:12:
         0b:b9:3d:67:5a:8b:45:ff:1d:05:c1:c2:24:52:11:c5:d1:5b:
         d8:8f:7b:3f:ea:f6:c2:e6:4a:2b:15:d3:24:b9:00:4f:08:79:
         66:ba:13:cc:40:18:44:12:3a:93:ad:30:08:56:9a:12:68:a1:
         3f:51:e3:4a:13:8a:0f:6e:a4:c0:de:4a:aa:e3:87:a7:e6:f8:
         11:27:fb:04:88:a2:50:4a:26:8e:7b:e2:3f:21:85:16:c2:d5:
         00:52:3f:3e:a8:30:7c:0e:c9:f5:cb:68:f1:2b:6f:a5:5d:ae:
         ff:ef:27:7f:2c:d1:69:e0:43:8e:6c:70:1b:8e:03:f3:b1:75:
         03:ba:5e:c1:60:a1:94:55:98:c0:b0:d4:ac:72:eb:b7:ed:6c:
         6b:81:73:cb:a0:25:68:14:05:c1:51:fb:42:a8:c0:9c:a5:53:
         51:88:ee:c1:a0:2e:cc:bf:b7:dd:79:e2:da:4b:ee:f7:3b:42:
         d0:f8:09:1e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdJnArtYNefkt/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWUwMmQ3MzctZjg1Ny00Zjg2LWIwY2QtYTc5NjZjNmUy
YWMzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MWNlNWQwNmItYWRjNi00MmNiLTgwMzktMzllNDA4NjM5OWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09Fo5aKKo/9CUVPu/EalBtti4BQtrxKD1WGJ
sWRduY4rjB3AmWIwB/LP6+TxXAN3IrcvF4S41TBXLoq5/w3+U3AWsYQ8KSEtO0of
ZuOAjGrpqnGxV7EHVST+WrKNVzdWmfMEHYuMwaoWKqol1alf9BHxqlquCyrS2VSM
XRgcl5Vx5SlvcYwsOegpvxZEVCPnlcWw6x7rrUTKJmEmhNuD0mx+2GF1Rm+5Wfz0
kLvdeU/nd1nHjOkP8Zifda9O4w0TlBmP2Zkwhs7pagOny/4i5Sra40sbc/jpmBxM
F50I6E+cAObKVqv2Fm08zG5HuyjtSFHtV9n86BA79x/WjwMeKQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOctHwyj7UD82/mKG3qCHzr/rJNyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85ZTAy
ZDczNy1mODU3LTRmODYtYjBjZC1hNzk2NmM2ZTJhYzMvZGE1NzczYjgtNGVmMy0z
ZDcxLTkwYjMtMzc5ZWI4NTE5NjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOWUwMmQ3MzctZjg1Ny00Zjg2LWIw
Y2QtYTc5NjZjNmUyYWMzLzllMDJkNzM3LWY4NTctNGY4Ni1iMGNkLWE3OTY2YzZl
MmFjMy5jcmwwHwYDVR0jBBgwFoAUuamYSpkXkULsaFE+svQ1rePBQNwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS85ZTAyZDczNy1mODU3LTRmODYtYjBjZC1hNzk2
NmM2ZTJhYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL0TQAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHpuXxN/g9zO7ElP6AiILDdCR/IYv9++QWNacTuk5/O4/aDBDxC4
KGrvA8JVOvx6Quoc+iQ6wqJEVWcQh9rUPHbRVnVLbjs6Egu5PWdai0X/HQXBwiRS
EcXRW9iPez/q9sLmSisV0yS5AE8IeWa6E8xAGEQSOpOtMAhWmhJooT9R40oTig9u
pMDeSqrjh6fm+BEn+wSIolBKJo574j8hhRbC1QBSPz6oMHwOyfXLaPErb6Vdrv/v
J38s0WngQ45scBuOA/OxdQO6XsFgoZRVmMCw1Kxy67ftbGuBc8ugJWgUBcFR+0Ko
wJylU1GI7sGgLsy/t9154tpL7vc7QtD4CR4=
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:23:13 2026 by rpki-client