Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/3e37cce0-3154-3b3b-8dbf-dcc1e6ebd0f3.roa
File:                     3e37cce0-3154-3b3b-8dbf-dcc1e6ebd0f3.roa (raw, json)
Hash identifier:          5ADR0wZ8vhcDxN/S1TBrp9c9jV6znp3luS7s9tzYI4c=
Subject key identifier:   35:81:6F:67:F5:AD:F5:09:7D:E6:C8:DD:4F:97:CE:F0:E8:B9:6C:E8
Certificate issuer:       /CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
Certificate serial:       010D0C9F4328584EA0155FC8D10619B84F5CEF00
Authority key identifier: D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/3e37cce0-3154-3b3b-8dbf-dcc1e6ebd0f3.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     401561
IP address blocks:        2602:f7d6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:5f:c8:d1:06:19:b8:4f:5c:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=6bb3dd50-33fe-40f7-add5-4cae4b1bd17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1d:6c:77:d5:c0:84:76:69:75:34:57:1d:d6:
                    2b:a1:22:8a:a0:b9:80:36:66:7b:0c:26:8b:df:7e:
                    22:08:a0:ab:0e:e4:89:fa:44:bb:d3:d8:2c:ac:44:
                    aa:8f:68:57:29:66:8e:20:01:5f:ca:7d:ec:8f:ab:
                    17:3f:46:53:f1:85:8f:50:ad:df:d7:af:7d:fa:33:
                    a4:f1:f3:7b:86:84:e6:f4:d8:51:94:f9:e6:32:b1:
                    a9:aa:a1:29:f2:ac:56:60:4f:20:31:7a:35:04:00:
                    6e:39:c9:b9:71:96:85:4c:0e:ee:8e:a6:05:b2:a7:
                    32:c2:be:09:c7:77:d8:b2:33:fe:34:e4:4d:d0:da:
                    bf:e5:c6:e6:50:67:9e:3b:b4:91:19:e8:7a:41:c2:
                    56:5a:ff:af:91:20:9c:bb:9b:34:a1:72:37:4c:9d:
                    54:16:c6:87:9e:ce:d8:71:f2:f2:45:04:f7:c7:df:
                    95:fa:33:cc:c4:63:a0:e5:47:a3:4f:6b:1e:97:c1:
                    63:5a:7a:15:25:d7:ad:11:78:2f:2f:10:5c:44:a4:
                    82:a2:f8:64:7f:80:39:bd:a0:a5:65:d2:83:da:a5:
                    da:82:72:fa:3c:9b:fb:f8:69:15:dd:75:7d:d0:23:
                    08:77:d9:86:80:6f:20:5e:3f:12:2c:ea:5c:b6:50:
                    e1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:81:6F:67:F5:AD:F5:09:7D:E6:C8:DD:4F:97:CE:F0:E8:B9:6C:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/3e37cce0-3154-3b3b-8dbf-dcc1e6ebd0f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7d6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:52:e5:f3:3a:1e:dc:e3:1e:4f:61:72:1d:81:0c:eb:ec:9b:
         a1:e5:cb:6f:bb:df:87:b9:08:f6:b1:51:28:0c:72:06:30:1a:
         64:53:32:ae:e6:4f:d8:99:2f:d4:0d:3b:a8:d7:a2:92:58:06:
         b7:69:a0:f1:f3:ca:85:82:93:46:e7:55:6e:0d:29:87:13:6f:
         cd:78:3d:89:05:d5:8e:11:49:4c:e0:37:e3:40:ee:1b:3e:08:
         28:19:59:2d:40:73:30:77:9f:e6:3e:6d:d8:2a:c9:6c:1b:db:
         21:ae:dd:e3:d5:60:8e:31:c3:73:7a:04:c9:63:73:a4:f3:fd:
         97:b9:fc:b5:23:2e:f3:48:3c:dd:33:f5:e5:b5:8b:e1:e2:2e:
         28:cb:3b:01:ad:fe:61:82:ac:c1:1d:71:b2:e2:f3:a7:cc:66:
         49:ea:0d:f1:07:90:c8:a2:3e:4f:9c:3e:9c:65:c2:25:55:5b:
         c7:7e:9b:ea:5d:34:d7:e7:a5:87:5b:49:74:4b:c1:bc:86:71:
         4f:de:6e:ba:3b:a0:d0:d7:72:3d:ab:f3:a4:46:5f:95:fa:36:
         fb:35:f8:75:06:38:b2:29:68:20:7c:c7:03:e7:b3:18:ac:33:
         d8:5f:52:03:13:7e:2f:3d:6e:87:df:cc:69:f0:8e:aa:f6:54:
         80:50:39:3c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6gFV/I0QYZuE9c7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM4ZjMyZTAtZmMyZC00MGY3LTg2MGUtYjA2ZDFlZGU1
ZDRhMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk
NmJiM2RkNTAtMzNmZS00MGY3LWFkZDUtNGNhZTRiMWJkMTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB1sd9XAhHZpdTRXHdYroSKKoLmANmZ7DCaL
334iCKCrDuSJ+kS709gsrESqj2hXKWaOIAFfyn3sj6sXP0ZT8YWPUK3f1699+jOk
8fN7hoTm9NhRlPnmMrGpqqEp8qxWYE8gMXo1BABuOcm5cZaFTA7ujqYFsqcywr4J
x3fYsjP+NORN0Nq/5cbmUGeeO7SRGeh6QcJWWv+vkSCcu5s0oXI3TJ1UFsaHns7Y
cfLyRQT3x9+V+jPMxGOg5UejT2sel8FjWnoVJdetEXgvLxBcRKSCovhkf4A5vaCl
ZdKD2qXagnL6PJv7+GkV3XV90CMId9mGgG8gXj8SLOpctlDhGQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDWBb2f1rfUJfebI3U+XzvDouWzoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhm
MzJlMC1mYzJkLTQwZjctODYwZS1iMDZkMWVkZTVkNGEvM2UzN2NjZTAtMzE1NC0z
YjNiLThkYmYtZGNjMWU2ZWJkMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGM4ZjMyZTAtZmMyZC00MGY3LTg2
MGUtYjA2ZDFlZGU1ZDRhL2RjOGYzMmUwLWZjMmQtNDBmNy04NjBlLWIwNmQxZWRl
NWQ0YS5jcmwwHwYDVR0jBBgwFoAU1rpijGxt6+W/FTXhbAZNsCZwbxwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhmMzJlMC1mYzJkLTQwZjctODYwZS1iMDZk
MWVkZTVkNGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL31gAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAS1Ll8zoe3OMeT2FyHYEM6+yboeXLb7vfh7kI9rFRKAxyBjAaZFMy
ruZP2Jkv1A07qNeiklgGt2mg8fPKhYKTRudVbg0phxNvzXg9iQXVjhFJTOA340Du
Gz4IKBlZLUBzMHef5j5t2CrJbBvbIa7d49VgjjHDc3oEyWNzpPP9l7n8tSMu80g8
3TP15bWL4eIuKMs7Aa3+YYKswR1xsuLzp8xmSeoN8QeQyKI+T5w+nGXCJVVbx36b
6l001+elh1tJdEvBvIZxT95uujug0NdyPavzpEZflfo2+zX4dQY4siloIHzHA+ez
GKwz2F9SAxN+Lz1uh9/MafCOqvZUgFA5PA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:28:55 2026 by rpki-client