Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/155f00a2-fc09-3c28-b130-1b110517cae9.roa
File:                     155f00a2-fc09-3c28-b130-1b110517cae9.roa (raw, json)
Hash identifier:          9HwAJ1KvyBoZAq+q1VD4DwbirYvkX3ETNVparGuJzTs=
Subject key identifier:   F4:75:A8:C0:23:B3:F0:97:9E:F7:64:19:E5:1F:60:A7:E6:A9:AF:BA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F331D1432763C4622778BBA80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/155f00a2-fc09-3c28-b130-1b110517cae9.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     33124
IP address blocks:        2604:ba00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:14:32:76:3c:46:22:77:8b:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=62e11c6e-dfcf-4c2d-a5f4-95658750ec5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:06:9b:65:5e:a2:65:ad:28:1b:c3:bb:d4:07:
                    b2:42:7d:d8:e5:6e:37:a4:e8:33:1d:0f:1a:ad:df:
                    1f:14:d9:cb:f8:32:1b:db:1f:69:b5:45:7a:f8:98:
                    8f:1b:ed:a4:b6:25:66:8c:41:ec:e3:08:71:a2:7f:
                    62:a9:e4:45:b1:e9:c2:73:6c:e3:8c:5a:54:7b:9d:
                    e6:10:68:74:85:8b:ad:77:4a:51:00:37:77:85:2b:
                    dd:d4:e8:a0:96:d1:a3:67:16:46:6e:12:73:b7:76:
                    85:39:f7:6b:d5:bb:fc:28:f1:54:5d:81:b1:f4:83:
                    1d:cd:66:f5:9d:a3:5d:b9:8a:b4:bf:53:7f:13:cd:
                    88:d4:2b:cc:13:85:aa:88:cd:b4:00:6c:8b:a9:c5:
                    91:3a:45:5f:d0:31:e4:25:6b:f3:30:74:11:e1:af:
                    c8:84:6e:82:b7:3d:94:1e:6c:85:cd:cc:8e:cf:09:
                    1a:d5:17:28:4a:24:f6:bb:ba:79:e4:d4:b9:be:f3:
                    ab:64:0c:4a:6a:36:7c:54:83:df:24:f0:c3:62:6d:
                    4e:77:72:ec:de:13:b3:38:6a:8b:2a:5e:1f:cf:db:
                    75:72:ce:0b:9f:40:ed:f4:54:73:eb:d1:35:69:37:
                    d2:f7:a5:95:e1:0d:3d:04:d8:65:82:69:73:99:91:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:75:A8:C0:23:B3:F0:97:9E:F7:64:19:E5:1F:60:A7:E6:A9:AF:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/155f00a2-fc09-3c28-b130-1b110517cae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ba00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:72:cb:0f:67:14:cf:b9:59:01:fd:6c:c8:9b:d4:35:be:
         91:33:a4:f2:0a:d0:b6:91:e5:b8:6e:08:d2:20:05:38:98:7d:
         b4:85:c1:7d:a2:b8:cc:af:65:0f:74:14:3c:4e:51:e4:3b:2b:
         f3:0a:84:54:ae:66:51:e1:8f:0d:b7:3b:8a:8a:91:a9:af:e4:
         cf:69:fc:d1:67:f2:d9:72:d5:97:01:d0:54:50:0b:c2:16:62:
         26:07:81:88:99:69:f2:7f:31:f5:da:57:3d:f2:0c:af:6f:98:
         0a:c0:92:76:85:67:a0:a6:81:a8:bb:26:f3:b7:ba:8f:a2:24:
         d7:90:8c:8d:96:90:03:0d:58:47:67:6c:ef:48:ee:aa:28:60:
         28:28:9c:46:b9:29:57:7d:ac:b7:24:0f:26:28:dd:68:57:8a:
         cb:27:20:f6:f1:a8:7e:d1:34:6e:30:fc:6e:0e:59:b7:58:ed:
         41:d7:e9:b0:04:fd:06:65:ff:68:38:a8:1c:f7:a2:14:e2:ae:
         05:b6:61:8a:10:83:83:b0:09:f4:7a:80:8f:23:92:4d:61:83:
         ee:b8:47:e3:80:c2:56:2b:05:c2:34:aa:b5:80:4a:64:b3:b1:
         ff:f9:34:17:69:4e:78:23:57:ed:56:a4:2c:aa:56:d8:d4:7e:
         bb:ca:20:e8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8zHRQydjxGIneLuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk
NjJlMTFjNmUtZGZjZi00YzJkLWE1ZjQtOTU2NTg3NTBlYzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQabZV6iZa0oG8O71AeyQn3Y5W43pOgzHQ8a
rd8fFNnL+DIb2x9ptUV6+JiPG+2ktiVmjEHs4whxon9iqeRFsenCc2zjjFpUe53m
EGh0hYutd0pRADd3hSvd1OigltGjZxZGbhJzt3aFOfdr1bv8KPFUXYGx9IMdzWb1
naNduYq0v1N/E82I1CvME4WqiM20AGyLqcWROkVf0DHkJWvzMHQR4a/IhG6Ctz2U
HmyFzcyOzwka1RcoSiT2u7p55NS5vvOrZAxKajZ8VIPfJPDDYm1Od3Ls3hOzOGqL
Kl4fz9t1cs4Ln0Dt9FRz69E1aTfS96WV4Q09BNhlgmlzmZEiCwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPR1qMAjs/CXnvdkGeUfYKfmqa+6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTU1ZjAwYTItZmMwOS0z
YzI4LWIxMzAtMWIxMTA1MTdjYWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgS6ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCKaHLLD2cUz7lZAf1syJvUNb6RM6TyCtC2keW4bgjSIAU4mH20hcF9
orjMr2UPdBQ8TlHkOyvzCoRUrmZR4Y8NtzuKipGpr+TPafzRZ/LZctWXAdBUUAvC
FmImB4GImWnyfzH12lc98gyvb5gKwJJ2hWegpoGouybzt7qPoiTXkIyNlpADDVhH
Z2zvSO6qKGAoKJxGuSlXfay3JA8mKN1oV4rLJyD28ah+0TRuMPxuDlm3WO1B1+mw
BP0GZf9oOKgc96IU4q4FtmGKEIODsAn0eoCPI5JNYYPuuEfjgMJWKwXCNKq1gEpk
s7H/+TQXaU54I1ftVqQsqlbY1H67yiDo
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:53:17 2026 by rpki-client