Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d8758500-35c7-3abf-b4b7-933b45ca1742.roa
File:                     d8758500-35c7-3abf-b4b7-933b45ca1742.roa (raw, json)
Hash identifier:          /wPwASHs9Tsi/T78pwIfzqphn1CRo5i9kDbDHROiqdw=
Subject key identifier:   89:CD:2E:00:3C:B2:68:A9:03:DB:DB:CF:54:54:6E:13:7E:88:22:5B
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584F3CE2BB7DD1DC936628FE5CA0
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d8758500-35c7-3abf-b4b7-933b45ca1742.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     40818
IP address blocks:        2602:fdeb:fe8::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:bb:7d:d1:dc:93:66:28:fe:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=3089725a-0dbb-408a-aa8c-9918aef6c835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:88:75:f8:d6:d2:d4:d9:0a:6d:a9:a4:56:7e:
                    fd:db:3f:1b:d9:e8:17:d9:46:be:db:32:b7:47:7e:
                    9f:8b:aa:60:d8:c9:62:e3:6d:0a:9f:80:0b:af:20:
                    d4:0b:90:0b:a8:84:3d:21:7c:b8:42:d8:fa:36:1b:
                    d9:44:fd:a7:1d:ba:37:4a:8d:82:c5:b3:6f:8b:69:
                    b4:f9:eb:ee:26:fe:9d:62:b8:96:ca:e4:c6:4a:64:
                    e5:2e:6d:0a:3c:43:86:fe:fb:23:cb:97:1b:ee:d9:
                    ed:e2:ae:67:35:5a:18:17:3a:17:a3:fa:4e:4d:0e:
                    e8:e3:29:3a:02:09:4e:bf:d8:c3:11:bb:d0:fd:a2:
                    34:c9:f2:66:45:e2:96:f6:55:a4:14:55:c8:3e:e0:
                    cf:4d:39:44:25:0e:a0:91:05:62:9c:36:6e:9b:a6:
                    c5:c2:7f:3d:86:04:6f:1c:20:56:1a:5e:43:d5:66:
                    44:10:6f:6a:df:27:c7:02:60:e8:ec:34:d9:29:ef:
                    5b:42:72:40:8c:ad:b5:f9:67:40:0e:bd:2f:bc:4c:
                    b3:1b:be:59:3c:9c:68:9a:2d:e2:c5:58:6a:d4:ef:
                    8c:36:5f:34:6d:fb:6e:de:34:e9:7a:10:14:52:aa:
                    ab:75:47:cd:ee:de:b8:45:b1:4d:4d:2a:28:b6:36:
                    00:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CD:2E:00:3C:B2:68:A9:03:DB:DB:CF:54:54:6E:13:7E:88:22:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d8758500-35c7-3abf-b4b7-933b45ca1742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:fe8::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6d:cd:87:d6:be:0c:50:44:fc:4f:65:b2:f0:dd:31:e1:f2:
         9b:b0:07:66:76:e1:6a:f5:14:a6:f0:e2:fc:ef:c5:44:99:40:
         0e:f5:0d:ee:c5:20:6d:a6:56:a2:78:ff:8a:73:ce:70:e0:ef:
         97:a7:ce:4e:40:08:ed:18:1b:4c:8b:0a:53:bd:19:33:b1:5e:
         50:c3:53:13:42:43:9e:94:c7:d6:8d:28:a4:19:da:86:73:1f:
         85:4e:b9:47:80:ed:d3:6f:c6:57:a3:8f:58:2b:32:f4:0a:79:
         d3:97:70:45:60:b9:09:01:b1:bf:32:d4:54:0b:47:24:9f:01:
         56:4e:9e:e1:cf:b6:a1:82:8d:93:d4:9b:c2:be:97:c8:ba:34:
         bf:8a:f8:51:fd:ad:e2:c8:0e:7b:ac:3b:4d:eb:cf:61:1c:66:
         2e:f0:89:85:98:ef:15:6e:2f:42:b2:36:ce:11:36:17:47:ce:
         53:b5:eb:27:f6:c9:10:c0:c1:7b:e3:b5:5a:f0:c1:b1:f8:4a:
         d4:4f:99:45:1f:fc:74:77:8d:40:6a:68:7f:19:3b:1e:a7:a1:
         be:64:da:ec:68:22:13:ba:e5:97:4e:c4:10:96:b8:92:95:c5:
         65:8c:b9:34:28:4d:89:da:96:87:14:96:c5:fe:df:86:ba:1d:
         e0:c2:ad:ca
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE884rt90dyTZij+XKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ1OTIzOTYtYWMzZC00YTQ4LTk3ZjEtY2FlZDY1NDM2
NTI1MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
MzA4OTcyNWEtMGRiYi00MDhhLWFhOGMtOTkxOGFlZjZjODM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14h1+NbS1NkKbamkVn792z8b2egX2Ua+2zK3
R36fi6pg2Mli420Kn4ALryDUC5ALqIQ9IXy4Qtj6NhvZRP2nHbo3So2CxbNvi2m0
+evuJv6dYriWyuTGSmTlLm0KPEOG/vsjy5cb7tnt4q5nNVoYFzoXo/pOTQ7o4yk6
AglOv9jDEbvQ/aI0yfJmReKW9lWkFFXIPuDPTTlEJQ6gkQVinDZum6bFwn89hgRv
HCBWGl5D1WZEEG9q3yfHAmDo7DTZKe9bQnJAjK21+WdADr0vvEyzG75ZPJxomi3i
xVhq1O+MNl80bftu3jTpehAUUqqrdUfN7t64RbFNTSootjYANwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFInNLgA8smipA9vbz1RUbhN+iCJbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5
MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVkNjU0MzY1MjUvZDg3NTg1MDAtMzVjNy0z
YWJmLWI0YjctOTMzYjQ1Y2ExNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQ1OTIzOTYtYWMzZC00YTQ4LTk3
ZjEtY2FlZDY1NDM2NTI1LzM0NTkyMzk2LWFjM2QtNGE0OC05N2YxLWNhZWQ2NTQz
NjUyNS5jcmwwHwYDVR0jBBgwFoAU4Pkf4Q9Z7oe8umGKzul0yYPhQUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVk
NjU0MzY1MjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL96w/o
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACltzYfWvgxQRPxPZbLw3THh8puwB2Z24Wr1FKbw4vzvxUSZQA71
De7FIG2mVqJ4/4pzznDg75enzk5ACO0YG0yLClO9GTOxXlDDUxNCQ56Ux9aNKKQZ
2oZzH4VOuUeA7dNvxlejj1grMvQKedOXcEVguQkBsb8y1FQLRySfAVZOnuHPtqGC
jZPUm8K+l8i6NL+K+FH9reLIDnusO03rz2EcZi7wiYWY7xVuL0KyNs4RNhdHzlO1
6yf2yRDAwXvjtVrwwbH4StRPmUUf/HR3jUBqaH8ZOx6nob5k2uxoIhO65ZdOxBCW
uJKVxWWMuTQoTYnalocUlsX+34a6HeDCrco=
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:20:34 2026 by rpki-client