Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/5e889615-28e6-3865-9da3-bc83f494f968.roa
File:                     5e889615-28e6-3865-9da3-bc83f494f968.roa (raw, json)
Hash identifier:          0x6d68KITpuqII/daWq7N3vUJo1Ot9pnm9AywXZjNyo=
Subject key identifier:   3E:AA:9D:89:92:91:2C:23:90:FE:9A:BF:D1:6B:B9:A6:74:CB:DB:60
Certificate issuer:       /CN=03cb17c9-7597-4c95-a127-009654391416
Certificate serial:       010D0C9F4328584F549D6E49B16838E446F02E00
Authority key identifier: 2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/5e889615-28e6-3865-9da3-bc83f494f968.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     40776
IP address blocks:        2602:f8ab::/48 maxlen: 48
                          2602:f8ab:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:6e:49:b1:68:38:e4:46:f0:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cb17c9-7597-4c95-a127-009654391416
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=dc407474-2f8a-484e-ae25-5bce8025f0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e4:07:f5:04:0b:88:62:78:77:50:79:61:da:
                    47:4f:8a:b1:fc:1f:80:3e:d7:13:26:4e:59:29:3b:
                    3a:ea:78:1e:f8:4b:5f:c5:f4:e5:18:f6:b8:ba:d3:
                    2a:70:02:a2:41:07:b1:d0:f1:15:e9:ba:da:3f:58:
                    39:26:0d:03:63:50:55:bd:0c:2e:a9:75:29:67:2b:
                    52:42:db:72:e2:e4:6a:7d:96:ad:20:7b:1b:dd:1a:
                    73:fa:68:bd:4e:2f:bd:f1:70:f5:e3:5f:f4:86:8c:
                    77:37:f0:a5:1c:c8:be:d6:3b:97:84:be:03:42:8e:
                    45:e4:cf:9c:d1:10:64:4f:3c:49:d3:96:d9:36:d9:
                    74:19:aa:2e:8f:df:41:9b:82:b4:df:56:52:03:73:
                    d7:97:bc:d9:a8:64:d1:90:85:24:16:99:b7:53:ed:
                    51:3f:ea:bc:64:be:7f:a6:8e:de:9d:d2:97:77:ab:
                    e9:b1:ca:64:35:21:8a:f6:23:7c:6e:5d:89:64:a7:
                    77:99:76:99:74:69:bb:e7:b6:e3:b4:00:5b:65:fa:
                    eb:4c:81:22:98:c3:53:ac:57:9e:b3:75:8c:cf:83:
                    be:86:d9:57:19:c9:be:6c:94:fd:c4:43:28:ef:8d:
                    eb:1e:a5:94:13:9d:85:ad:ec:49:af:f6:33:63:dc:
                    38:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AA:9D:89:92:91:2C:23:90:FE:9A:BF:D1:6B:B9:A6:74:CB:DB:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/5e889615-28e6-3865-9da3-bc83f494f968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl

            X509v3 Authority Key Identifier:
                keyid:2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ab::/48
                  2602:f8ab:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f1:4d:ca:57:3b:2c:1b:a3:f4:73:d8:d7:83:47:38:21:6d:
         6a:b7:1b:8f:01:24:12:6d:76:56:c6:0f:6d:9c:f6:0b:31:6c:
         e7:e0:ff:54:28:ce:03:d3:cb:bc:7f:a6:1c:d0:9c:6a:0d:71:
         89:93:c5:92:2c:65:46:25:68:6a:25:03:0e:2f:c7:44:a0:d8:
         ae:cb:7c:96:cc:ac:e9:0f:59:77:36:a9:32:c3:4e:de:c7:09:
         1e:2c:ac:72:77:06:e0:74:74:be:95:2d:9e:0c:ed:99:d7:50:
         03:3f:e2:d4:55:3f:6f:ba:45:07:4a:d1:85:0c:a3:ee:a2:10:
         41:72:d4:9a:21:b0:d0:87:39:f5:7c:46:8d:05:be:b4:7f:25:
         1d:6c:db:71:27:4e:ae:77:d7:e6:8e:6e:49:2b:d2:dc:d1:26:
         01:30:47:82:98:c1:f9:c0:5c:f9:f0:79:13:45:f7:6c:df:60:
         3d:a7:d2:fb:e4:fa:8b:95:ea:16:12:0e:ba:be:ea:4e:52:14:
         c5:d5:37:03:51:9b:98:bc:0b:25:00:d4:60:54:f7:37:6d:39:
         54:5c:7e:67:2d:f6:0f:b6:7d:a9:8c:3c:cd:e4:65:2d:e4:fc:
         f9:00:6b:19:01:9c:ca:53:c7:43:ab:93:70:4b:f2:ee:63:c8:
         1a:09:8d:de
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9UnW5JsWg45EbwLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNjYjE3YzktNzU5Ny00Yzk1LWExMjctMDA5NjU0Mzkx
NDE2MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
ZGM0MDc0NzQtMmY4YS00ODRlLWFlMjUtNWJjZTgwMjVmMGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguQH9QQLiGJ4d1B5YdpHT4qx/B+APtcTJk5Z
KTs66nge+EtfxfTlGPa4utMqcAKiQQex0PEV6braP1g5Jg0DY1BVvQwuqXUpZytS
Qtty4uRqfZatIHsb3Rpz+mi9Ti+98XD141/0hox3N/ClHMi+1juXhL4DQo5F5M+c
0RBkTzxJ05bZNtl0Gaouj99Bm4K031ZSA3PXl7zZqGTRkIUkFpm3U+1RP+q8ZL5/
po7endKXd6vpscpkNSGK9iN8bl2JZKd3mXaZdGm757bjtABbZfrrTIEimMNTrFee
s3WMz4O+htlXGcm+bJT9xEMo743rHqWUE52FrexJr/YzY9w4HwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFD6qnYmSkSwjkP6av9FruaZ0y9tgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Ni
MTdjOS03NTk3LTRjOTUtYTEyNy0wMDk2NTQzOTE0MTYvNWU4ODk2MTUtMjhlNi0z
ODY1LTlkYTMtYmM4M2Y0OTRmOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNjYjE3YzktNzU5Ny00Yzk1LWEx
MjctMDA5NjU0MzkxNDE2LzAzY2IxN2M5LTc1OTctNGM5NS1hMTI3LTAwOTY1NDM5
MTQxNi5jcmwwHwYDVR0jBBgwFoAULO9ghZjOAy8rUa3ucy/IfSY7c5cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2NiMTdjOS03NTk3LTRjOTUtYTEyNy0wMDk2
NTQzOTE0MTYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJgL4qwAA
AwcAJgL4qwAEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADHxTcpXOywbo/Rz2NeDRzghbWq3G48BJBJtdlbG
D22c9gsxbOfg/1QozgPTy7x/phzQnGoNcYmTxZIsZUYlaGolAw4vx0Sg2K7LfJbM
rOkPWXc2qTLDTt7HCR4srHJ3BuB0dL6VLZ4M7ZnXUAM/4tRVP2+6RQdK0YUMo+6i
EEFy1JohsNCHOfV8Ro0FvrR/JR1s23EnTq531+aObkkr0tzRJgEwR4KYwfnAXPnw
eRNF92zfYD2n0vvk+ouV6hYSDrq+6k5SFMXVNwNRm5i8CyUA1GBU9zdtOVRcfmct
9g+2famMPM3kZS3k/PkAaxkBnMpTx0Ork3BL8u5jyBoJjd4=
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:15:47 2026 by rpki-client