Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/d141842f-b5ee-329b-9ad6-07db0ff6d322.roa
File:                     d141842f-b5ee-329b-9ad6-07db0ff6d322.roa (raw, json)
Hash identifier:          LEoyHQ4wU8KhRUgPzHR5C1DK4ma8czR+BgOxkuaCqvs=
Subject key identifier:   26:A5:7F:95:C9:E7:EC:58:71:D1:B9:BE:F0:CD:79:80:02:16:8E:75
Certificate issuer:       /CN=dec54853-8708-4db6-8c16-61e598dd115f
Certificate serial:       010D0C9F4328584F093CD804D63BDA95A553F500
Authority key identifier: AF:E2:B2:1C:02:76:14:90:C2:EB:AB:19:F8:C2:59:BC:52:73:A5:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/d141842f-b5ee-329b-9ad6-07db0ff6d322.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     397795
IP address blocks:        2602:802:b000::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:d8:04:d6:3b:da:95:a5:53:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec54853-8708-4db6-8c16-61e598dd115f
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=acc3e9b0-4073-45ed-8f60-61e06393693f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e9:ca:69:b6:0d:52:9f:7a:74:7b:68:37:4a:
                    eb:0e:c6:4c:b8:ec:fd:90:2c:ef:9d:4b:81:1e:39:
                    1d:e9:44:cb:6e:c1:10:cb:89:d4:05:07:71:dc:3e:
                    f1:1f:8e:fc:91:85:77:82:97:18:d5:96:0b:d2:4a:
                    13:ad:0b:cc:ef:ec:77:4e:b0:22:d9:94:80:c7:80:
                    ad:d6:00:16:ba:59:1d:a1:c5:7b:67:df:71:4c:57:
                    12:b4:d3:5e:8e:2c:7c:7b:86:5a:ab:fe:06:91:41:
                    27:f1:94:88:5b:fc:d6:ac:be:6a:96:6f:23:56:af:
                    f2:54:90:53:c0:9e:43:55:9b:da:77:1d:fd:9e:d4:
                    d8:a0:ac:0c:14:76:f7:75:ae:a5:2c:c8:15:46:08:
                    fd:50:38:6e:12:11:2c:2e:5f:19:25:7f:0c:cf:b0:
                    25:ef:7f:1e:26:f3:85:f5:6f:6f:9b:51:3b:4e:90:
                    5e:2f:ec:46:d6:eb:97:81:c7:bc:51:d8:d5:86:6a:
                    5b:d7:3f:ae:a6:a9:36:32:3c:1f:52:7d:00:08:6f:
                    f1:b5:7c:70:ce:10:72:c8:97:03:c3:93:c2:e3:52:
                    9a:4f:63:32:03:19:69:9f:26:50:30:be:73:33:af:
                    08:3a:ed:74:1a:f6:d6:1c:05:8c:39:dd:1e:1d:22:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A5:7F:95:C9:E7:EC:58:71:D1:B9:BE:F0:CD:79:80:02:16:8E:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/d141842f-b5ee-329b-9ad6-07db0ff6d322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.crl

            X509v3 Authority Key Identifier:
                keyid:AF:E2:B2:1C:02:76:14:90:C2:EB:AB:19:F8:C2:59:BC:52:73:A5:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:802:b000::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:91:47:4b:3f:62:17:83:29:a9:1c:76:96:64:c7:65:f6:b1:
         a4:3a:be:6c:c7:0a:83:2c:b2:59:06:46:42:68:0d:8a:81:f3:
         1c:e6:2c:05:3d:13:83:ca:dc:16:a0:e0:6f:d2:da:fd:7f:03:
         c3:97:6a:b5:37:e7:33:50:a1:91:f5:36:97:9b:6c:8a:71:39:
         fa:f5:b7:e2:8b:91:7f:b4:a4:7a:36:37:5b:bc:ed:84:98:6e:
         b3:9d:20:6c:ea:c6:71:5b:0d:97:9b:84:97:63:16:24:cd:c8:
         88:57:71:03:64:64:ac:de:27:bd:ec:80:4d:5c:b4:47:10:f9:
         66:80:2c:5d:a9:0d:20:59:30:54:d5:cf:a3:e5:71:f9:60:d3:
         20:c5:78:7f:e0:7e:4e:fe:52:c5:71:50:de:5d:4e:2c:41:63:
         90:c4:a6:e2:8d:a6:f0:89:95:db:27:87:9d:34:46:d8:bb:57:
         11:b7:f1:85:e5:a4:b8:7a:18:da:0d:62:bc:a1:58:2c:20:52:
         f9:c1:a5:cf:4f:3e:cd:ed:00:86:b9:e8:c4:ce:c6:32:28:d2:
         6e:a6:95:50:08:9b:14:ac:b9:32:8c:de:e1:a8:b5:9c:f9:48:
         c3:5f:9f:97:44:1b:19:3b:d8:26:ae:e9:4d:5c:74:69:17:f2:
         98:46:cc:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8JPNgE1jvalaVT9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGVjNTQ4NTMtODcwOC00ZGI2LThjMTYtNjFlNTk4ZGQx
MTVmMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
YWNjM2U5YjAtNDA3My00NWVkLThmNjAtNjFlMDYzOTM2OTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjenKabYNUp96dHtoN0rrDsZMuOz9kCzvnUuB
Hjkd6UTLbsEQy4nUBQdx3D7xH478kYV3gpcY1ZYL0koTrQvM7+x3TrAi2ZSAx4Ct
1gAWulkdocV7Z99xTFcStNNejix8e4Zaq/4GkUEn8ZSIW/zWrL5qlm8jVq/yVJBT
wJ5DVZvadx39ntTYoKwMFHb3da6lLMgVRgj9UDhuEhEsLl8ZJX8Mz7Al738eJvOF
9W9vm1E7TpBeL+xG1uuXgce8UdjVhmpb1z+upqk2MjwfUn0ACG/xtXxwzhByyJcD
w5PC41KaT2MyAxlpnyZQML5zM68IOu10GvbWHAWMOd0eHSLjTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCalf5XJ5+xYcdG5vvDNeYACFo51MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZWM1
NDg1My04NzA4LTRkYjYtOGMxNi02MWU1OThkZDExNWYvZDE0MTg0MmYtYjVlZS0z
MjliLTlhZDYtMDdkYjBmZjZkMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGVjNTQ4NTMtODcwOC00ZGI2LThj
MTYtNjFlNTk4ZGQxMTVmL2RlYzU0ODUzLTg3MDgtNGRiNi04YzE2LTYxZTU5OGRk
MTE1Zi5jcmwwHwYDVR0jBBgwFoAUr+KyHAJ2FJDC66sZ+MJZvFJzpZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZWM1NDg1My04NzA4LTRkYjYtOGMxNi02MWU1
OThkZDExNWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgIIArAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADSRR0s/YheDKakcdpZkx2X2saQ6vmzHCoMsslkGRkJoDYqB8xzm
LAU9E4PK3Bag4G/S2v1/A8OXarU35zNQoZH1NpebbIpxOfr1t+KLkX+0pHo2N1u8
7YSYbrOdIGzqxnFbDZebhJdjFiTNyIhXcQNkZKzeJ73sgE1ctEcQ+WaALF2pDSBZ
MFTVz6Plcflg0yDFeH/gfk7+UsVxUN5dTixBY5DEpuKNpvCJldsnh500Rti7VxG3
8YXlpLh6GNoNYryhWCwgUvnBpc9PPs3tAIa56MTOxjIo0m6mlVAImxSsuTKM3uGo
tZz5SMNfn5dEGxk72Cau6U1cdGkX8phGzHM=
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:37:20 2026 by rpki-client