Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57/cc7aa843-8bc3-33ef-a100-ab6f85ac0212.roa
File:                     cc7aa843-8bc3-33ef-a100-ab6f85ac0212.roa (raw, json)
Hash identifier:          RKVPzJc5RRvqvIBdpo7VF9ZisyRxEKr9VOKfRYv/Dyo=
Subject key identifier:   CC:0F:B0:FD:0A:4F:33:01:16:A8:A9:85:97:53:3E:5E:20:38:64:16
Certificate issuer:       /CN=63938b4d-d1ca-4f80-97cb-ec6ec0935c57
Certificate serial:       010D0C9F4328584F1F924C0E59F585CC12832E00
Authority key identifier: 10:91:CF:80:A3:35:03:B4:12:28:DA:2B:02:AB:52:AB:BE:24:11:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57/cc7aa843-8bc3-33ef-a100-ab6f85ac0212.roa
Signing time:             Thu 10 Sep 2026 01:00:12 +0000
ROA not before:           Thu 10 Sep 2026 01:00:12 +0000
ROA not after:            Wed 09 Dec 2026 02:00:12 +0000
asID:                     14363
IP address blocks:        2605:cd40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57/63938b4d-d1ca-4f80-97cb-ec6ec0935c57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57/63938b4d-d1ca-4f80-97cb-ec6ec0935c57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:92:4c:0e:59:f5:85:cc:12:83:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63938b4d-d1ca-4f80-97cb-ec6ec0935c57
        Validity
            Not Before: Sep 10 01:00:12 2026 GMT
            Not After : Dec  9 02:00:12 2026 GMT
        Subject: CN=9700c22a-077f-46d0-b9e6-242a4b468048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1a:96:7f:af:2d:0b:2b:70:d8:79:ef:2e:6b:
                    94:e9:ae:c8:76:89:83:c7:75:c3:45:60:46:97:77:
                    b8:30:c2:e2:d8:0d:9c:aa:0e:18:f1:ed:37:02:0c:
                    5f:1d:5d:57:8c:16:b3:88:7e:3c:ee:3c:8e:b9:5a:
                    b3:0a:61:1d:d9:aa:89:5d:e7:70:16:34:21:34:34:
                    8e:5a:8f:7b:a3:b9:0e:03:37:9f:17:cc:57:19:be:
                    bd:cf:d9:d2:f5:62:30:12:bf:92:05:b6:2d:22:3c:
                    c6:39:ce:da:9d:32:a0:a8:b6:55:86:a1:db:bd:d5:
                    11:c1:a6:d7:72:e2:b4:03:2e:b9:3b:cc:c7:e1:43:
                    47:ad:3f:60:60:f2:3e:a7:0c:90:99:71:47:23:8d:
                    77:05:99:c6:6b:c9:d2:d9:49:b1:5c:a5:71:b8:3b:
                    99:c5:03:3e:83:19:3d:56:d1:57:fc:11:75:e6:67:
                    0c:90:03:fb:df:4e:9a:3e:1a:83:c3:e3:6f:45:86:
                    26:35:b0:fb:89:63:8d:5f:dc:c0:6c:39:48:ad:74:
                    7a:4e:84:39:54:d0:c0:91:09:d6:c4:ed:85:03:00:
                    c9:56:9c:8c:f3:b7:73:ad:74:01:d6:b0:21:37:ea:
                    fe:f9:82:d1:88:db:5e:34:d4:c8:bb:26:b6:41:f2:
                    aa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0F:B0:FD:0A:4F:33:01:16:A8:A9:85:97:53:3E:5E:20:38:64:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57/cc7aa843-8bc3-33ef-a100-ab6f85ac0212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57/63938b4d-d1ca-4f80-97cb-ec6ec0935c57.crl

            X509v3 Authority Key Identifier:
                keyid:10:91:CF:80:A3:35:03:B4:12:28:DA:2B:02:AB:52:AB:BE:24:11:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/63938b4d-d1ca-4f80-97cb-ec6ec0935c57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:cd40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:4d:5e:18:db:e3:ba:36:3a:db:7a:21:11:9e:26:3c:29:89:
         c4:24:20:cd:86:20:d9:54:da:0f:02:c7:5f:08:4f:e4:0c:06:
         98:8f:ff:e0:a5:dc:bc:49:ee:d4:8f:bf:39:c1:69:5e:29:9c:
         46:06:4a:ca:c6:82:c1:fc:53:7f:e7:9e:e2:72:e1:f9:9c:31:
         47:4d:f8:8f:20:6d:0a:d2:bc:0a:3d:3e:60:70:59:07:da:2a:
         56:c3:9e:ea:40:c3:35:fc:0b:25:a7:a2:57:a8:1b:3c:15:97:
         34:03:92:33:47:74:49:c9:b6:f3:bf:5c:80:1e:4d:74:6f:74:
         ea:7d:47:3e:40:40:57:74:44:3b:ae:a8:21:0f:cd:12:0a:0c:
         db:b5:0f:48:8b:0b:57:95:0b:eb:72:f7:a5:d0:cf:88:4b:30:
         88:74:1c:94:57:af:be:17:c4:cb:91:6c:ee:f6:d2:6f:12:00:
         8a:12:19:88:ff:da:fa:05:df:91:bd:e4:6a:62:fb:f1:1f:b2:
         75:ef:3b:be:91:12:fe:53:a6:da:a4:47:01:81:f6:03:56:62:
         65:7c:fe:5f:35:46:70:47:1d:6e:93:66:b8:19:2e:dd:39:d7:
         70:be:ac:e3:2c:28:38:45:5a:ff:c4:3b:82:59:ec:c7:fe:ce:
         93:f9:11:e0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8fkkwOWfWFzBKDLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM5MzhiNGQtZDFjYS00ZjgwLTk3Y2ItZWM2ZWMwOTM1
YzU3MB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk
OTcwMGMyMmEtMDc3Zi00NmQwLWI5ZTYtMjQyYTRiNDY4MDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBqWf68tCytw2HnvLmuU6a7IdomDx3XDRWBG
l3e4MMLi2A2cqg4Y8e03AgxfHV1XjBaziH487jyOuVqzCmEd2aqJXedwFjQhNDSO
Wo97o7kOAzefF8xXGb69z9nS9WIwEr+SBbYtIjzGOc7anTKgqLZVhqHbvdURwabX
cuK0Ay65O8zH4UNHrT9gYPI+pwyQmXFHI413BZnGa8nS2UmxXKVxuDuZxQM+gxk9
VtFX/BF15mcMkAP7306aPhqDw+NvRYYmNbD7iWONX9zAbDlIrXR6ToQ5VNDAkQnW
xO2FAwDJVpyM87dzrXQB1rAhN+r++YLRiNteNNTIuya2QfKqPQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMwPsP0KTzMBFqiphZdTPl4gOGQWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82Mzkz
OGI0ZC1kMWNhLTRmODAtOTdjYi1lYzZlYzA5MzVjNTcvY2M3YWE4NDMtOGJjMy0z
M2VmLWExMDAtYWI2Zjg1YWMwMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNjM5MzhiNGQtZDFjYS00ZjgwLTk3
Y2ItZWM2ZWMwOTM1YzU3LzYzOTM4YjRkLWQxY2EtNGY4MC05N2NiLWVjNmVjMDkz
NWM1Ny5jcmwwHwYDVR0jBBgwFoAUEJHPgKM1A7QSKNorAqtSq74kEcswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi82MzkzOGI0ZC1kMWNhLTRmODAtOTdjYi1lYzZl
YzA5MzVjNTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXNQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQByTV4Y2+O6NjrbeiERniY8KYnEJCDNhiDZVNoPAsdfCE/kDAaYj//g
pdy8Se7Uj785wWleKZxGBkrKxoLB/FN/557icuH5nDFHTfiPIG0K0rwKPT5gcFkH
2ipWw57qQMM1/Aslp6JXqBs8FZc0A5IzR3RJybbzv1yAHk10b3TqfUc+QEBXdEQ7
rqghD80SCgzbtQ9IiwtXlQvrcvel0M+ISzCIdByUV6++F8TLkWzu9tJvEgCKEhmI
/9r6Bd+RveRqYvvxH7J17zu+kRL+U6bapEcBgfYDVmJlfP5fNUZwRx1uk2a4GS7d
OddwvqzjLCg4RVr/xDuCWezH/s6T+RHg
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:49:33 2026 by rpki-client