Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c3d0f74f-01a9-3956-88b2-4c3028e4213c.roa
File:                     c3d0f74f-01a9-3956-88b2-4c3028e4213c.roa (raw, json)
Hash identifier:          8FzD7N6CgxRFVp6oUO5dWo7geVW5P9iHRs/RySxslfg=
Subject key identifier:   C0:7A:04:F9:BD:B5:5D:73:69:38:B7:35:E4:E6:B7:4F:EA:1E:61:FE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F46A7E41DC27277E3D8E97980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c3d0f74f-01a9-3956-88b2-4c3028e4213c.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     22516
IP address blocks:        2600:6c83:2c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e4:1d:c2:72:77:e3:d8:e9:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=e28a0cdc-b20e-4677-9dc3-bff08f454a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:c0:ce:62:a4:e3:15:bc:c6:45:c6:7d:62:
                    c8:ea:7e:0a:27:b1:4b:a5:b3:07:9e:bc:80:1b:82:
                    8f:73:0b:be:4a:bf:a1:fb:08:86:5e:ac:59:20:ea:
                    a1:d3:36:c7:ce:71:ae:97:da:11:e0:93:83:a8:1e:
                    11:b8:09:24:30:d8:54:55:36:78:4f:a3:ef:47:b8:
                    9e:99:86:0e:fa:5e:97:4d:69:ef:0e:6f:82:fd:fe:
                    00:4c:2d:a0:bb:e8:1a:e8:bf:ab:0d:d3:d6:b1:65:
                    42:12:2a:d0:b6:ea:8c:55:20:95:3b:d6:4e:93:31:
                    cd:79:1e:76:df:ff:56:a7:48:34:42:de:17:a0:a4:
                    31:3b:5f:f2:e2:b9:2e:c0:78:6d:43:5c:09:96:f2:
                    92:ce:07:43:40:88:73:ad:40:3b:48:64:f3:96:1f:
                    d6:eb:25:ab:f0:8c:6f:80:3d:60:a0:0f:41:92:60:
                    55:eb:62:17:66:a8:42:94:c1:69:3a:3c:46:7f:cc:
                    c3:73:e5:f7:d2:c2:9b:3d:ff:86:e3:7e:98:8a:24:
                    b5:e5:b8:6e:c3:a0:4d:78:ad:9e:c0:23:eb:d7:38:
                    b4:44:e3:63:67:fd:30:e1:4d:27:fb:bd:b5:5b:e9:
                    ec:18:ce:52:1d:b5:a5:1b:09:f5:11:e2:5b:8a:5f:
                    4a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7A:04:F9:BD:B5:5D:73:69:38:B7:35:E4:E6:B7:4F:EA:1E:61:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c3d0f74f-01a9-3956-88b2-4c3028e4213c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c83:2c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:1c:a5:79:ff:ca:62:94:9d:b9:46:14:c3:c5:d2:5c:07:a7:
         56:e2:14:af:d1:b0:54:d1:00:c6:53:68:9d:06:95:ee:e3:14:
         3b:5a:44:5a:4c:a1:8e:4f:e7:b2:a8:56:5d:9c:95:a5:b7:af:
         4c:80:f5:68:95:5d:16:45:a3:dc:e3:2d:c2:8f:1f:84:fe:f4:
         93:96:60:0e:aa:78:fe:f1:63:9b:5c:20:ae:76:09:4f:c7:dc:
         2c:5f:57:1c:5b:21:42:c2:1a:94:92:4a:1f:80:71:3c:1c:d6:
         7c:28:46:13:70:72:73:7d:64:cb:61:d7:6b:de:b4:b7:64:05:
         b6:78:91:ed:3e:0a:7b:09:4b:a8:74:02:26:ba:e7:14:0e:d8:
         44:9f:e8:77:7e:f7:06:28:f4:b6:7c:7f:5e:41:5c:40:97:91:
         d6:a3:a7:cd:82:1d:ff:95:c0:c2:22:38:bf:8e:de:fe:94:93:
         35:64:20:18:d9:5f:b8:4e:e0:4a:9d:0c:a0:ce:33:63:b0:f1:
         e1:df:58:56:c6:03:fc:ce:b7:cc:8e:95:d2:61:d7:79:40:e8:
         02:14:e6:b3:e9:e3:8a:5d:a5:b2:d6:d8:52:30:17:d2:57:4e:
         fc:19:33:09:21:0c:4e:14:ae:f5:c7:39:66:75:1c:35:b8:41:
         5d:93:6f:7e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Gp+QdwnJ349jpeYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk
ZTI4YTBjZGMtYjIwZS00Njc3LTlkYzMtYmZmMDhmNDU0YTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu7AzmKk4xW8xkXGfWLI6n4KJ7FLpbMHnryA
G4KPcwu+Sr+h+wiGXqxZIOqh0zbHznGul9oR4JODqB4RuAkkMNhUVTZ4T6PvR7ie
mYYO+l6XTWnvDm+C/f4ATC2gu+ga6L+rDdPWsWVCEirQtuqMVSCVO9ZOkzHNeR52
3/9Wp0g0Qt4XoKQxO1/y4rkuwHhtQ1wJlvKSzgdDQIhzrUA7SGTzlh/W6yWr8Ixv
gD1goA9BkmBV62IXZqhClMFpOjxGf8zDc+X30sKbPf+G436YiiS15bhuw6BNeK2e
wCPr1zi0RONjZ/0w4U0n+721W+nsGM5SHbWlGwn1EeJbil9KZwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMB6BPm9tV1zaTi3NeTmt0/qHmH+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYzNkMGY3NGYtMDFhOS0z
OTU2LTg4YjItNGMzMDI4ZTQyMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgBsgyww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAORylef/KYpSduUYUw8XSXAenVuIUr9GwVNEAxlNonQaV7uMUO1pE
Wkyhjk/nsqhWXZyVpbevTID1aJVdFkWj3OMtwo8fhP70k5ZgDqp4/vFjm1wgrnYJ
T8fcLF9XHFshQsIalJJKH4BxPBzWfChGE3Byc31ky2HXa960t2QFtniR7T4KewlL
qHQCJrrnFA7YRJ/od373Bij0tnx/XkFcQJeR1qOnzYId/5XAwiI4v47e/pSTNWQg
GNlfuE7gSp0MoM4zY7Dx4d9YVsYD/M63zI6V0mHXeUDoAhTms+njil2lstbYUjAX
0ldO/BkzCSEMThSu9cc5ZnUcNbhBXZNvfg==
-----END CERTIFICATE-----
Generated at Thu Oct 1 17:53:53 2026 by rpki-client