Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0a51f7a7-6093-350a-b89b-eadb921943f9.roa
File:                     0a51f7a7-6093-350a-b89b-eadb921943f9.roa (raw, json)
Hash identifier:          LYELUyR3VEN7kBoMEQu/5OiyJDSgAy+A7S2mK7tP/ck=
Subject key identifier:   1B:65:31:17:18:05:31:C5:9A:69:05:1D:4B:F1:F7:C6:49:89:0D:B3
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584F093CCFA704210D0ECE9EE580
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0a51f7a7-6093-350a-b89b-eadb921943f9.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     19637
IP address blocks:        2602:274:518::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:cf:a7:04:21:0d:0e:ce:9e:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=7d007995-db38-4c58-85cb-057b4b01c7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:a3:f1:62:9e:8a:91:29:b4:c6:9b:81:7b:
                    a0:9f:49:c4:5b:ee:cd:40:4f:25:c7:98:ae:5e:e3:
                    5c:71:49:b6:ea:6f:b8:96:ae:a1:42:12:a8:64:c4:
                    73:91:37:0b:d1:61:1f:8d:8b:e2:a5:59:d6:98:0f:
                    1d:5e:9c:54:65:fd:f6:20:55:a8:a8:53:81:fb:79:
                    56:e8:4b:c3:b3:79:7f:12:09:e3:3e:2a:4f:ce:74:
                    40:11:be:3b:10:32:fd:8a:0e:30:f6:e9:07:34:d5:
                    b6:3e:3f:31:b0:34:aa:be:c9:a3:cd:b6:f4:fd:91:
                    0b:2e:8b:5d:94:54:47:87:63:b1:a9:5e:96:6a:e4:
                    56:91:4d:d1:10:c8:e6:33:d1:19:07:76:19:75:54:
                    f7:95:1d:66:e7:05:65:9a:a7:24:ac:64:c0:ce:e7:
                    0b:c9:ab:a2:f1:1a:a9:07:af:ba:0e:52:1e:4b:29:
                    aa:80:16:20:ef:c0:c7:f9:97:a5:68:65:b7:b6:cd:
                    82:a0:f4:2a:d6:bf:20:42:72:dc:2d:0c:bc:01:46:
                    d1:52:bf:94:2c:28:98:46:5f:16:21:fd:f0:a1:d4:
                    c9:75:11:a9:73:cd:0a:c6:53:23:76:b6:a5:32:25:
                    74:3a:67:6c:d2:13:78:16:97:bd:2a:d3:1b:6f:93:
                    ec:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:65:31:17:18:05:31:C5:9A:69:05:1D:4B:F1:F7:C6:49:89:0D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0a51f7a7-6093-350a-b89b-eadb921943f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:274:518::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c6:72:0d:f8:71:c2:4f:de:27:1c:d3:e7:42:34:ea:9b:60:
         aa:a3:9b:e9:ec:28:b7:6e:f1:46:a7:3a:0c:d2:f9:ba:b2:dd:
         b8:a0:9a:eb:60:24:e5:7d:cc:17:05:72:07:1c:04:52:2e:37:
         c9:ad:41:07:39:2d:12:c7:4b:68:5f:6b:5c:d9:99:ca:51:37:
         73:bf:5f:8b:c1:a8:5a:70:1f:ac:02:4d:a3:e3:10:89:f5:e8:
         37:31:1e:9c:a5:36:df:51:39:cb:fe:12:76:24:9a:27:5e:5e:
         05:b4:b9:8b:51:e0:ee:03:91:57:13:e4:a3:fd:2a:c4:22:c4:
         7a:ff:b0:2a:b2:3b:7b:83:cf:c6:df:1f:c5:df:63:6e:90:6a:
         f4:20:7d:39:d8:26:ca:58:43:56:0f:c4:40:67:e2:bd:73:8d:
         47:fd:4e:2f:c4:73:70:7a:3b:24:5b:6b:7f:3f:85:95:49:47:
         5a:ea:5b:fa:83:a9:cf:19:d5:76:2a:e1:7c:db:8e:c8:dc:a3:
         e3:e9:03:6c:5d:35:0e:b6:ca:da:4d:26:cc:6c:6f:fc:d3:05:
         3f:f3:0f:a7:c4:69:a2:bd:fe:a8:53:0e:d9:f3:d6:90:15:e9:
         07:af:3f:22:06:88:1c:b8:2f:0d:5a:1e:d3:b5:92:dc:21:ae:
         15:69:d3:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8JPM+nBCENDs6e5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3
NzY5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
N2QwMDc5OTUtZGIzOC00YzU4LTg1Y2ItMDU3YjRiMDFjN2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK2j8WKeipEptMabgXugn0nEW+7NQE8lx5iu
XuNccUm26m+4lq6hQhKoZMRzkTcL0WEfjYvipVnWmA8dXpxUZf32IFWoqFOB+3lW
6EvDs3l/EgnjPipPznRAEb47EDL9ig4w9ukHNNW2Pj8xsDSqvsmjzbb0/ZELLotd
lFRHh2OxqV6WauRWkU3REMjmM9EZB3YZdVT3lR1m5wVlmqckrGTAzucLyaui8Rqp
B6+6DlIeSymqgBYg78DH+ZelaGW3ts2CoPQq1r8gQnLcLQy8AUbRUr+ULCiYRl8W
If3wodTJdRGpc80KxlMjdralMiV0Omds0hN4Fpe9KtMbb5PsIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBtlMRcYBTHFmmkFHUvx98ZJiQ2zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1
YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMGE1MWY3YTctNjA5My0z
NTBhLWI4OWItZWFkYjkyMTk0M2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2
NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx
Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw
Y2ZkMTc3NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICdAUY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIvGcg34ccJP3icc0+dCNOqbYKqjm+nsKLdu8UanOgzS+bqy3big
mutgJOV9zBcFcgccBFIuN8mtQQc5LRLHS2hfa1zZmcpRN3O/X4vBqFpwH6wCTaPj
EIn16DcxHpylNt9ROcv+EnYkmideXgW0uYtR4O4DkVcT5KP9KsQixHr/sCqyO3uD
z8bfH8XfY26QavQgfTnYJspYQ1YPxEBn4r1zjUf9Ti/Ec3B6OyRba38/hZVJR1rq
W/qDqc8Z1XYq4Xzbjsjco+PpA2xdNQ62ytpNJsxsb/zTBT/zD6fEaaK9/qhTDtnz
1pAV6QevPyIGiBy4Lw1aHtO1ktwhrhVp08w=
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:14:27 2026 by rpki-client