Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/97dce0b4-e3f4-31a3-a686-8c9e2f6657b6.roa
File:                     97dce0b4-e3f4-31a3-a686-8c9e2f6657b6.roa (raw, json)
Hash identifier:          znoJWerTTzRBTDBv0LVmUX/tRQvCoC8mNPfdl0tE6tc=
Subject key identifier:   7A:85:A3:A4:5A:B4:4F:B6:E9:E5:C2:29:17:55:04:C7:AB:9D:DF:E7
Certificate issuer:       /CN=a37f77d5-b5c8-4567-8b95-233330e463cc
Certificate serial:       010D0C9F4328584EFE121B2ACB553083D6FA1E00
Authority key identifier: 2B:AE:0D:7D:61:C6:72:1E:0F:0E:66:03:60:A7:8B:4C:4F:9E:ED:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/97dce0b4-e3f4-31a3-a686-8c9e2f6657b6.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     11169
IP address blocks:        2602:f479::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/a37f77d5-b5c8-4567-8b95-233330e463cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/a37f77d5-b5c8-4567-8b95-233330e463cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:1b:2a:cb:55:30:83:d6:fa:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a37f77d5-b5c8-4567-8b95-233330e463cc
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=8ac86ac3-26d9-40ce-ac1f-4c12be177e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:03:0a:62:3f:1b:b1:41:56:31:5d:b3:3d:24:
                    b5:c8:c4:41:d8:3c:a6:03:eb:82:c9:57:b2:76:de:
                    3a:97:4d:f6:4a:99:80:21:e6:19:82:b6:b7:03:43:
                    24:8d:f0:ee:17:ec:e4:a1:97:5d:17:60:a3:7e:11:
                    50:ec:28:e0:19:da:63:1b:5c:56:b0:2e:9b:b3:ed:
                    1a:39:ac:3c:c5:f4:80:f8:4f:a2:ba:30:6a:6d:10:
                    92:43:f1:9c:18:22:83:3d:55:08:27:7e:99:64:e6:
                    f5:9e:30:ab:78:66:40:30:a5:62:1a:5c:31:22:b5:
                    53:4f:5b:23:ae:dc:b5:79:5d:a8:48:b6:ae:f9:38:
                    5a:84:1f:3c:bd:7c:e0:52:5b:ae:3d:e5:c7:b8:e1:
                    17:9a:76:40:3a:76:49:99:6a:ac:e8:ce:86:0d:69:
                    11:7b:27:a8:f5:b8:a5:ae:85:7a:1c:ff:b4:ac:6e:
                    a9:56:e4:7f:ee:8b:bb:1e:c7:4c:81:da:af:dc:18:
                    bb:b8:f2:e6:d3:25:d9:37:64:c9:8c:6a:ff:0f:82:
                    37:99:9f:5c:d5:ac:e4:b4:c3:4e:bc:a9:8a:5d:af:
                    01:2c:04:f6:b7:67:0a:7a:85:e2:46:ab:1b:fb:f4:
                    f8:de:29:5a:a4:c6:3b:0c:3a:d3:40:85:37:54:4c:
                    19:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:85:A3:A4:5A:B4:4F:B6:E9:E5:C2:29:17:55:04:C7:AB:9D:DF:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/97dce0b4-e3f4-31a3-a686-8c9e2f6657b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc/a37f77d5-b5c8-4567-8b95-233330e463cc.crl

            X509v3 Authority Key Identifier:
                keyid:2B:AE:0D:7D:61:C6:72:1E:0F:0E:66:03:60:A7:8B:4C:4F:9E:ED:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a37f77d5-b5c8-4567-8b95-233330e463cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f479::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a0:55:d1:2c:a7:c9:38:3e:25:65:99:9d:28:cf:99:c9:e4:
         87:bb:59:be:7f:bf:c1:08:3b:63:d3:54:be:02:10:4d:c2:35:
         12:a7:c9:f5:d1:70:89:bb:09:c7:c4:54:19:9a:60:8a:2e:54:
         93:d3:d7:cd:d5:8a:78:ae:d9:0f:df:22:29:66:a9:de:63:1d:
         70:34:34:e1:ff:4f:ee:e4:2b:e1:69:ea:e3:c6:54:13:57:f8:
         b9:95:f2:b9:d2:97:38:b9:f4:55:7a:2f:34:b3:30:7b:73:22:
         cb:f2:6f:0f:9b:dc:3f:fc:4b:ff:e4:4c:53:0b:ce:12:10:ad:
         fb:c5:83:1e:41:4d:ca:fe:8f:15:47:c3:8b:18:e6:8b:6b:c1:
         24:45:70:c3:c8:74:89:02:b5:27:09:c1:56:24:ff:19:87:d3:
         15:28:68:0c:ec:af:81:f3:d1:99:60:fc:09:a9:1e:f1:17:18:
         c9:92:8d:0a:4b:85:26:05:00:f7:94:81:16:fd:9a:75:bc:d4:
         34:d3:9c:ab:5a:f8:80:7f:e2:f5:a2:63:5e:d4:7b:3e:6a:fe:
         18:44:4c:8a:8c:0f:1b:a9:ed:c4:51:f2:02:95:fe:fd:de:8e:
         1c:00:92:f6:f8:b7:09:b5:d5:8b:37:b9:1a:6e:d2:9b:64:53:
         18:ad:d6:2f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7+Ehsqy1Uwg9b6HgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM3Zjc3ZDUtYjVjOC00NTY3LThiOTUtMjMzMzMwZTQ2
M2NjMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
OGFjODZhYzMtMjZkOS00MGNlLWFjMWYtNGMxMmJlMTc3ZTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAMKYj8bsUFWMV2zPSS1yMRB2DymA+uCyVey
dt46l032SpmAIeYZgra3A0MkjfDuF+zkoZddF2CjfhFQ7CjgGdpjG1xWsC6bs+0a
Oaw8xfSA+E+iujBqbRCSQ/GcGCKDPVUIJ36ZZOb1njCreGZAMKViGlwxIrVTT1sj
rty1eV2oSLau+ThahB88vXzgUluuPeXHuOEXmnZAOnZJmWqs6M6GDWkReyeo9bil
roV6HP+0rG6pVuR/7ou7HsdMgdqv3Bi7uPLm0yXZN2TJjGr/D4I3mZ9c1azktMNO
vKmKXa8BLAT2t2cKeoXiRqsb+/T43ilapMY7DDrTQIU3VEwZ9QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHqFo6RatE+26eXCKRdVBMernd/nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzdm
NzdkNS1iNWM4LTQ1NjctOGI5NS0yMzMzMzBlNDYzY2MvOTdkY2UwYjQtZTNmNC0z
MWEzLWE2ODYtOGM5ZTJmNjY1N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTM3Zjc3ZDUtYjVjOC00NTY3LThi
OTUtMjMzMzMwZTQ2M2NjL2EzN2Y3N2Q1LWI1YzgtNDU2Ny04Yjk1LTIzMzMzMGU0
NjNjYy5jcmwwHwYDVR0jBBgwFoAUK64NfWHGch4PDmYDYKeLTE+e7dMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzdmNzdkNS1iNWM4LTQ1NjctOGI5NS0yMzMz
MzBlNDYzY2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL0eQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAkqBV0SynyTg+JWWZnSjPmcnkh7tZvn+/wQg7Y9NUvgIQTcI1EqfJ
9dFwibsJx8RUGZpgii5Uk9PXzdWKeK7ZD98iKWap3mMdcDQ04f9P7uQr4Wnq48ZU
E1f4uZXyudKXOLn0VXovNLMwe3Miy/JvD5vcP/xL/+RMUwvOEhCt+8WDHkFNyv6P
FUfDixjmi2vBJEVww8h0iQK1JwnBViT/GYfTFShoDOyvgfPRmWD8Cake8RcYyZKN
CkuFJgUA95SBFv2adbzUNNOcq1r4gH/i9aJjXtR7Pmr+GERMiowPG6ntxFHyApX+
/d6OHACS9vi3CbXVize5Gm7Sm2RTGK3WLw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:47:03 2026 by rpki-client