Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e1f3f72d-c321-3b0c-84a7-830dddd4cf8d.roa
File:                     e1f3f72d-c321-3b0c-84a7-830dddd4cf8d.roa (raw, json)
Hash identifier:          dxhobbqjFystma9LHKI0jHxniuvTgoHJjQFDvlToc7Y=
Subject key identifier:   C2:7E:30:47:6E:9F:AA:6B:D2:A9:84:DE:31:0D:04:1F:DF:EF:AF:6D
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584EEEB7531CE7AC701C18410940
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e1f3f72d-c321-3b0c-84a7-830dddd4cf8d.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     17045
IP address blocks:        2605:84c0:54::/48 maxlen: 48
                          2605:84c0:55::/48 maxlen: 48
                          2605:84c0:56::/48 maxlen: 48
                          2605:84c0:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:53:1c:e7:ac:70:1c:18:41:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=3f6b6595-2ff3-4ae5-a26e-f8dbc20814a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e9:ca:e5:c6:b1:fa:27:23:7a:61:0a:30:37:
                    11:cb:83:a1:26:95:3f:cc:15:13:72:cb:46:96:33:
                    7b:f0:98:fb:bc:25:28:ca:c3:88:4f:d9:5e:82:5d:
                    ec:b8:fd:54:d8:d8:78:3c:d4:7c:c0:62:c5:90:3b:
                    bd:fb:9a:64:30:f2:9e:27:f8:74:69:51:c9:f5:7f:
                    78:0a:29:8a:60:da:04:14:3d:50:99:1a:95:29:59:
                    7a:34:ec:2f:e4:8e:15:7c:d7:e9:f6:ca:c2:46:e8:
                    09:35:9c:b9:51:65:00:ca:d6:f6:66:fe:c3:4b:78:
                    82:75:e2:17:ac:eb:1d:26:65:9d:31:90:e5:20:32:
                    2b:bb:dd:27:07:3a:ff:33:67:3f:93:78:6d:ad:7a:
                    d9:be:69:d4:9c:ae:9e:e1:95:24:3d:ca:c2:20:24:
                    65:e8:7f:2e:2d:d4:04:48:43:67:f7:94:c5:a8:c9:
                    d1:a9:a4:f6:cb:41:b4:3d:b4:38:05:91:5d:b2:32:
                    c5:c5:33:73:73:03:42:de:39:e2:85:e7:73:12:06:
                    73:a8:59:93:07:26:b8:6c:dd:1f:30:6b:db:3f:ee:
                    25:d7:5a:d1:ac:c8:bb:fe:b6:90:b3:11:4f:ff:b9:
                    2b:19:46:11:93:31:da:22:78:bd:0f:ae:f4:1b:05:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7E:30:47:6E:9F:AA:6B:D2:A9:84:DE:31:0D:04:1F:DF:EF:AF:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e1f3f72d-c321-3b0c-84a7-830dddd4cf8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:54::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:3e:a1:79:0a:d1:aa:5f:45:13:0e:17:6b:62:6c:51:13:33:
         74:11:ed:5e:0b:5a:6f:ca:6d:86:e9:77:ed:41:0a:b0:32:65:
         08:e1:d4:97:a4:8e:53:82:bd:85:86:cd:62:f0:4f:93:51:95:
         36:f3:08:e2:13:25:fe:a6:cd:07:4e:16:e7:cb:84:d3:0f:18:
         c6:95:a4:f4:d5:67:1e:14:e2:35:f3:f2:2e:97:f8:92:55:f3:
         8e:28:9a:00:60:d6:f6:2d:af:db:73:ac:56:0a:7b:73:93:6b:
         08:7f:73:df:fb:dc:2d:fc:00:c6:3a:ed:e6:53:34:6b:8f:b4:
         30:9c:62:c9:63:26:19:25:37:dc:6a:3e:b7:00:4b:1b:bc:9e:
         ea:4a:03:52:b6:26:0a:d5:ea:ed:dd:ae:d7:e6:0d:a7:01:58:
         83:aa:29:26:a6:d6:a8:b9:c9:8b:18:70:42:d0:ff:03:24:1c:
         50:3f:09:10:cc:79:18:72:b7:13:fd:66:bb:4a:14:7f:86:9b:
         42:09:87:5d:d4:7a:37:56:d3:45:33:ab:21:99:14:4c:dd:6e:
         76:9e:24:ed:d2:86:d1:eb:85:8f:76:12:60:55:43:d4:c7:0e:
         98:96:4e:8d:56:89:22:2d:dd:78:2b:73:21:32:c3:bf:9b:66:
         2f:35:0c:5f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ut1Mc56xwHBhBCUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3
MDBjMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk
M2Y2YjY1OTUtMmZmMy00YWU1LWEyNmUtZjhkYmMyMDgxNGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgenK5cax+icjemEKMDcRy4OhJpU/zBUTcstG
ljN78Jj7vCUoysOIT9legl3suP1U2Nh4PNR8wGLFkDu9+5pkMPKeJ/h0aVHJ9X94
CimKYNoEFD1QmRqVKVl6NOwv5I4VfNfp9srCRugJNZy5UWUAytb2Zv7DS3iCdeIX
rOsdJmWdMZDlIDIru90nBzr/M2c/k3htrXrZvmnUnK6e4ZUkPcrCICRl6H8uLdQE
SENn95TFqMnRqaT2y0G0PbQ4BZFdsjLFxTNzcwNC3jnihedzEgZzqFmTBya4bN0f
MGvbP+4l11rRrMi7/raQsxFP/7krGUYRkzHaIni9D670GwUL9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMJ+MEdun6pr0qmE3jENBB/f769tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3
MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvZTFmM2Y3MmQtYzMyMS0z
YjBjLTg0YTctODMwZGRkZDRjZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0
MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2
NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy
N2E5NjcwMGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgWEwABU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAM4+oXkK0apfRRMOF2tibFETM3QR7V4LWm/KbYbpd+1BCrAyZQjh
1JekjlOCvYWGzWLwT5NRlTbzCOITJf6mzQdOFufLhNMPGMaVpPTVZx4U4jXz8i6X
+JJV844omgBg1vYtr9tzrFYKe3OTawh/c9/73C38AMY67eZTNGuPtDCcYsljJhkl
N9xqPrcASxu8nupKA1K2JgrV6u3drtfmDacBWIOqKSam1qi5yYsYcELQ/wMkHFA/
CRDMeRhytxP9ZrtKFH+Gm0IJh13UejdW00UzqyGZFEzdbnaeJO3ShtHrhY92EmBV
Q9THDpiWTo1WiSIt3XgrcyEyw7+bZi81DF8=
-----END CERTIFICATE-----
Generated at Sun Sep 27 09:56:26 2026 by rpki-client