Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/3a301ecb-1b30-3b2d-ac4e-3c85c04dfc19.roa
File:                     3a301ecb-1b30-3b2d-ac4e-3c85c04dfc19.roa (raw, json)
Hash identifier:          3co8yGEu8jyBSaK6o3ZhZF1J9nmPhaP3kKN05N+ZTSw=
Subject key identifier:   7F:88:58:89:56:E7:80:73:DB:49:ED:C6:F9:2A:A8:26:AE:BD:4F:35
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584F348274C492E5A51AC4CD53A0
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/3a301ecb-1b30-3b2d-ac4e-3c85c04dfc19.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     7992
IP address blocks:        2602:200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:74:c4:92:e5:a5:1a:c4:cd:53:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=e53f3749-6165-470a-8134-0d8d9435dc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:54:21:e2:a0:14:72:f1:7a:c6:11:bd:f2:b9:
                    2e:6a:9f:e0:fc:7c:5a:a7:5b:85:c1:b4:11:5e:2f:
                    d3:d5:c9:de:da:cb:b4:19:7f:b8:f0:09:c1:ed:41:
                    bd:e9:6d:32:eb:b8:ab:07:db:05:8a:e8:69:2e:65:
                    0a:0b:90:d2:75:2e:84:bf:28:d4:b8:19:94:a6:e3:
                    56:84:79:a3:92:58:26:a0:3a:e2:fa:5d:1d:9e:01:
                    88:43:1b:f1:a4:d8:9d:46:06:f2:e7:28:24:10:ec:
                    b4:12:81:b6:24:f2:30:1b:a7:1d:c3:cf:56:c8:cb:
                    72:fa:32:e6:0d:63:6c:fc:a9:3a:1b:d0:68:aa:c8:
                    3f:ac:36:4b:2f:3e:17:66:e2:40:85:1d:d5:30:5e:
                    11:c8:3e:83:37:02:f2:2f:d7:51:58:bc:57:b1:e0:
                    0b:fb:a9:7b:2d:a8:bd:ff:f1:f4:f2:13:73:73:42:
                    1d:67:3d:3f:dd:de:58:78:f6:8a:ff:28:d7:91:a6:
                    c1:dc:a9:43:45:dc:a7:8a:4c:e7:6b:18:c3:c9:50:
                    6f:a9:75:ca:eb:99:99:f9:33:d9:bd:82:a1:cc:3d:
                    38:31:3b:96:4f:d4:b5:5d:5c:92:c1:41:bd:7b:9b:
                    a5:a4:fe:ad:bc:c0:ff:27:25:86:8f:89:51:f2:6c:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:88:58:89:56:E7:80:73:DB:49:ED:C6:F9:2A:A8:26:AE:BD:4F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/3a301ecb-1b30-3b2d-ac4e-3c85c04dfc19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:d0:aa:b8:da:13:36:8f:50:a5:51:97:c1:8c:d6:56:e5:91:
         f5:8b:5b:cf:f0:da:ae:e7:6f:d7:68:72:81:6a:86:9a:b5:23:
         ca:6a:db:b4:c5:44:4d:18:e4:09:55:11:39:46:f0:91:91:bc:
         76:e6:50:c8:19:8d:4e:35:76:55:1c:ed:c3:b7:1c:7f:67:c1:
         e0:cd:e4:d2:11:db:c3:bd:e5:66:72:a0:43:21:58:6a:52:c6:
         02:fd:01:9e:a3:9b:23:cc:4c:aa:72:2d:ad:0f:aa:21:f9:a6:
         03:ef:c1:31:35:73:c4:28:4f:62:36:2d:4d:cd:f8:e2:0c:89:
         e9:69:7e:df:d5:79:5e:ea:7f:63:86:d8:0a:3b:e6:a6:a3:d7:
         22:f2:13:0a:5d:2b:87:e5:7f:88:51:ee:b9:58:9b:e4:a6:d1:
         65:c0:1c:e6:b9:48:a2:8e:df:d1:e0:bd:7f:03:c4:10:8b:0f:
         3c:1c:9b:d1:93:7a:b8:6a:cc:3e:2b:eb:a2:ec:c6:91:23:f1:
         3c:49:30:18:0f:f6:9d:82:93:8c:47:4b:eb:41:38:da:8e:d1:
         ec:3e:30:90:02:ec:e6:6e:46:48:24:cb:1e:be:08:f8:2e:be:
         07:f8:f2:a2:95:02:f9:bb:18:e7:46:fd:ea:19:83:7e:f1:b0:
         13:f6:64:14
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE80gnTEkuWlGsTNU6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNmMjg0N2QtNTNhYi00YWJiLWE1ZTUtMjZiOTk4Yzdm
Zjk4MB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk
ZTUzZjM3NDktNjE2NS00NzBhLTgxMzQtMGQ4ZDk0MzVkYzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Qh4qAUcvF6xhG98rkuap/g/Hxap1uFwbQR
Xi/T1cne2su0GX+48AnB7UG96W0y67irB9sFiuhpLmUKC5DSdS6EvyjUuBmUpuNW
hHmjklgmoDri+l0dngGIQxvxpNidRgby5ygkEOy0EoG2JPIwG6cdw89WyMty+jLm
DWNs/Kk6G9Boqsg/rDZLLz4XZuJAhR3VMF4RyD6DNwLyL9dRWLxXseAL+6l7Lai9
//H08hNzc0IdZz0/3d5YePaK/yjXkabB3KlDRdynikznaxjDyVBvqXXK65mZ+TPZ
vYKhzD04MTuWT9S1XVySwUG9e5ulpP6tvMD/JyWGj4lR8my0EQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFH+IWIlW54Bz20ntxvkqqCauvU81MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83M2Yy
ODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5OThjN2ZmOTgvM2EzMDFlY2ItMWIzMC0z
YjJkLWFjNGUtM2M4NWMwNGRmYzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzNmMjg0N2QtNTNhYi00YWJiLWE1
ZTUtMjZiOTk4YzdmZjk4LzczZjI4NDdkLTUzYWItNGFiYi1hNWU1LTI2Yjk5OGM3
ZmY5OC5jcmwwHwYDVR0jBBgwFoAU4z9DS4XDJg2cVrC7yD+2Teg7fcswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83M2YyODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5
OThjN2ZmOTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCC0Kq42hM2j1ClUZfBjNZW5ZH1i1vP8Nqu52/XaHKBaoaatSPKatu0
xURNGOQJVRE5RvCRkbx25lDIGY1ONXZVHO3Dtxx/Z8HgzeTSEdvDveVmcqBDIVhq
UsYC/QGeo5sjzEyqci2tD6oh+aYD78ExNXPEKE9iNi1NzfjiDInpaX7f1Xle6n9j
htgKO+amo9ci8hMKXSuH5X+IUe65WJvkptFlwBzmuUiijt/R4L1/A8QQiw88HJvR
k3q4asw+K+ui7MaRI/E8STAYD/adgpOMR0vrQTjajtHsPjCQAuzmbkZIJMsevgj4
Lr4H+PKilQL5uxjnRv3qGYN+8bAT9mQU
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:54:39 2026 by rpki-client