Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa
File:                     4d1f008f-67a9-308d-9f82-30e56f078c23.roa (raw, json)
Hash identifier:          h2S8KdICVKY0dKK+IxpULJYQ9p1QGY4R/mKFjzuJJQI=
Subject key identifier:   A5:2F:74:CA:C3:6F:97:21:F5:5D:B5:3F:4C:B4:98:88:8D:B5:95:F4
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F4328584F82ADB4B958EA2B864F03DF00
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     30690
IP address blocks:        2602:f99b:a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:b4:b9:58:ea:2b:86:4f:03:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=aa0a3946-bc8b-424d-9246-0cb202ce97c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:df:e9:9e:6d:a4:6d:f6:07:8a:a4:b2:b9:ef:
                    b8:d3:94:1d:fe:9e:27:f0:9b:94:1c:87:ab:97:d9:
                    2c:0a:62:1f:6b:9d:1a:c7:65:0b:9a:30:d9:fe:80:
                    25:eb:9c:cd:ba:01:14:fd:a4:2d:3d:45:71:ff:6a:
                    a2:88:d1:ed:4e:f3:6a:02:d4:b5:d2:7e:b5:1e:5e:
                    e9:21:4e:05:9e:b7:6e:57:c9:5d:06:07:bb:7c:bd:
                    6b:4b:00:34:8b:40:3e:c4:31:c5:01:39:41:0b:85:
                    f2:a8:da:33:04:6d:32:e8:63:c9:a9:8f:a4:8c:f5:
                    e4:0f:30:a0:c2:69:23:19:6c:a9:7b:78:e6:54:26:
                    32:82:35:0c:7f:be:1f:bd:fc:7e:97:5d:55:e6:d3:
                    4a:79:91:09:af:6b:b4:3f:62:50:98:27:d1:7d:e0:
                    d8:0a:eb:13:25:ea:43:1f:de:5f:05:b0:13:5f:23:
                    20:1d:69:95:25:80:07:46:ff:cb:b2:4c:15:3a:27:
                    06:c0:9c:5c:44:16:b6:11:c9:ab:6e:5d:23:53:9c:
                    d0:9a:f0:40:60:38:99:e3:ae:d6:a5:21:3e:b2:f2:
                    c0:6e:fe:36:45:e5:93:68:10:46:22:96:ad:f1:21:
                    32:49:2f:67:50:09:d8:56:88:91:5a:31:2b:a0:51:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2F:74:CA:C3:6F:97:21:F5:5D:B5:3F:4C:B4:98:88:8D:B5:95:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99b:a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:4a:ce:b2:d6:73:5b:30:30:54:71:8c:50:b2:18:71:18:14:
         3b:21:e0:fd:8f:3f:1a:06:80:2f:84:d1:a6:36:bd:1e:a7:35:
         d5:c3:ed:01:5e:76:14:94:ee:89:7f:82:e9:80:8f:3e:c6:72:
         1a:c0:0d:6d:40:5a:e1:9b:79:6a:1a:62:23:cd:4b:c0:bd:dc:
         1c:ea:f0:94:67:06:77:23:56:2c:05:64:21:64:dc:cd:c0:32:
         e7:11:aa:92:7e:16:57:51:ad:80:b9:29:be:64:37:ab:14:05:
         dd:3c:a4:2e:e6:a9:9f:33:73:b8:d5:84:d6:9c:4b:dc:b8:aa:
         2c:09:40:1a:c2:d8:c5:47:f7:dd:0c:e3:6a:6d:1c:ab:2d:9a:
         cd:6d:50:a7:22:5b:e5:38:86:ed:e1:08:4f:64:aa:ec:7e:2e:
         28:f8:b5:9d:d1:f3:bd:a5:54:25:cd:b3:00:94:37:d4:a6:2d:
         fc:a1:43:cb:5c:bf:ba:c2:e6:6f:8d:9e:3a:a5:8a:92:d1:ab:
         03:28:00:5a:3d:05:b4:cb:55:cf:67:d9:07:b0:1e:d9:98:04:
         9d:75:9e:16:ab:c9:b7:c5:a6:6b:79:fb:1e:ec:11:54:0f:64:
         b7:3d:d9:9f:20:6e:63:7c:da:b8:1c:fc:21:85:c4:3b:47:09:
         5d:9d:28:36
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+CrbS5WOorhk8D3wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM1ZmMyM2EtZTQyMi00YzYxLWEyNWEtYjczYjA5NjNi
NmY3MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk
YWEwYTM5NDYtYmM4Yi00MjRkLTkyNDYtMGNiMjAyY2U5N2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN/pnm2kbfYHiqSyue+405Qd/p4n8JuUHIer
l9ksCmIfa50ax2ULmjDZ/oAl65zNugEU/aQtPUVx/2qiiNHtTvNqAtS10n61Hl7p
IU4FnrduV8ldBge7fL1rSwA0i0A+xDHFATlBC4XyqNozBG0y6GPJqY+kjPXkDzCg
wmkjGWype3jmVCYygjUMf74fvfx+l11V5tNKeZEJr2u0P2JQmCfRfeDYCusTJepD
H95fBbATXyMgHWmVJYAHRv/LskwVOicGwJxcRBa2Ecmrbl0jU5zQmvBAYDiZ467W
pSE+svLAbv42ReWTaBBGIpat8SEySS9nUAnYVoiRWjEroFE2mQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKUvdMrDb5ch9V21P0y0mIiNtZX0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMzVm
YzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNiMDk2M2I2ZjcvNGQxZjAwOGYtNjdhOS0z
MDhkLTlmODItMzBlNTZmMDc4YzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjM1ZmMyM2EtZTQyMi00YzYxLWEy
NWEtYjczYjA5NjNiNmY3L2IzNWZjMjNhLWU0MjItNGM2MS1hMjVhLWI3M2IwOTYz
YjZmNy5jcmwwHwYDVR0jBBgwFoAUjS9eZJw3d6zMTnUYB7+cZ2lqHf4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMzVmYzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNi
MDk2M2I2ZjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5mwCg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG9KzrLWc1swMFRxjFCyGHEYFDsh4P2PPxoGgC+E0aY2vR6nNdXD
7QFedhSU7ol/gumAjz7GchrADW1AWuGbeWoaYiPNS8C93Bzq8JRnBncjViwFZCFk
3M3AMucRqpJ+FldRrYC5Kb5kN6sUBd08pC7mqZ8zc7jVhNacS9y4qiwJQBrC2MVH
990M42ptHKstms1tUKciW+U4hu3hCE9kqux+Lij4tZ3R872lVCXNswCUN9SmLfyh
Q8tcv7rC5m+NnjqlipLRqwMoAFo9BbTLVc9n2QewHtmYBJ11nharybfFpmt5+x7s
EVQPZLc92Z8gbmN82rgc/CGFxDtHCV2dKDY=
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:58:37 2026 by rpki-client