Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/358b5cdd-3d9c-3ec5-bd79-3e1cd2ac37a1.roa
File:                     358b5cdd-3d9c-3ec5-bd79-3e1cd2ac37a1.roa (raw, json)
Hash identifier:          gRcSxHB5HxyIYtsvxospt+7K+DSiUOO5ssWxFrpKXdo=
Subject key identifier:   D5:4F:BB:02:95:C3:51:AA:81:CC:55:C9:D2:CF:ED:A9:85:61:E2:BC
Certificate issuer:       /CN=ad78b405-a495-404a-a809-d632ddd6e3d6
Certificate serial:       010D0C9F4328584F1F924791970CA34C1B694010
Authority key identifier: 41:15:5C:F0:5D:CC:60:53:42:CD:FE:87:88:B4:10:C2:EA:EB:5B:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/358b5cdd-3d9c-3ec5-bd79-3e1cd2ac37a1.roa
Signing time:             Thu 10 Sep 2026 01:00:12 +0000
ROA not before:           Thu 10 Sep 2026 01:00:12 +0000
ROA not after:            Wed 09 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        2620:1f9:180::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:92:47:91:97:0c:a3:4c:1b:69:40:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad78b405-a495-404a-a809-d632ddd6e3d6
        Validity
            Not Before: Sep 10 01:00:12 2026 GMT
            Not After : Dec  9 02:00:12 2026 GMT
        Subject: CN=5f2c3d5f-6f19-41c5-a686-2eaa81a7380c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:f5:67:9f:06:19:d5:1f:12:14:24:79:23:
                    ac:dd:6e:28:49:92:11:21:e0:e9:d3:67:04:a0:ac:
                    a9:8b:ab:e5:80:cb:f4:31:b4:7e:28:35:f8:4c:56:
                    2a:88:4e:e4:4a:3d:4f:13:dc:04:f2:f9:ee:43:e6:
                    5a:18:ab:66:04:4c:a3:26:5c:38:74:cd:14:8e:ce:
                    e6:d6:bc:cc:d1:8f:6b:62:ba:86:d8:55:cf:02:84:
                    d3:37:15:67:9f:bc:57:79:ab:99:65:0c:92:83:30:
                    21:f4:36:9d:12:73:3c:20:d1:32:fc:0f:01:cf:2f:
                    c8:40:2b:a4:d1:de:72:7e:6c:a2:9b:8d:e4:2a:47:
                    cd:5d:33:62:05:4f:31:8d:11:ec:fe:85:10:2a:9b:
                    a2:09:a7:af:d6:19:80:2f:ac:37:45:11:55:f7:dc:
                    2b:ce:58:8c:7f:1f:76:e9:23:93:b3:03:44:a7:3e:
                    a2:c7:b8:68:8d:ce:b8:fb:19:d6:65:8f:bb:b5:5b:
                    91:57:4f:32:45:42:fb:09:c9:2f:e1:cd:bd:4b:e6:
                    60:a6:f2:f4:8b:90:81:97:4d:16:d9:e7:1a:7b:2f:
                    77:48:cc:bd:e9:16:0f:53:d4:2f:73:e4:ca:be:fa:
                    39:d4:2e:16:e1:e1:b2:a7:ea:e9:9a:82:32:ef:a1:
                    49:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4F:BB:02:95:C3:51:AA:81:CC:55:C9:D2:CF:ED:A9:85:61:E2:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/358b5cdd-3d9c-3ec5-bd79-3e1cd2ac37a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.crl

            X509v3 Authority Key Identifier:
                keyid:41:15:5C:F0:5D:CC:60:53:42:CD:FE:87:88:B4:10:C2:EA:EB:5B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f9:180::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3c:45:ae:b4:4a:33:a6:be:d0:1d:98:a3:74:ea:30:8d:09:
         ef:97:14:53:71:8e:c8:39:cc:84:e1:5b:61:bf:a8:dc:c9:2c:
         a6:4b:ed:47:f0:06:86:32:32:30:df:87:db:80:f4:2e:6a:f0:
         1a:5d:a7:37:3c:ae:bc:2a:bc:c2:3e:00:d1:5e:c8:07:e2:65:
         67:26:42:87:8c:9d:7b:0f:d3:67:9a:b2:85:32:56:95:fe:4e:
         97:4c:13:70:dc:72:e5:1f:e5:e0:0e:9b:34:43:ff:55:59:4c:
         9d:1f:82:9e:c2:96:0b:4c:a7:bc:60:4e:8f:a5:96:be:0c:df:
         0a:d0:cf:f7:48:03:11:5a:2d:2c:8a:cd:68:c9:7f:6a:81:9e:
         99:33:cc:eb:98:b8:8b:1b:3f:cd:da:ea:9f:76:e2:42:07:f9:
         3f:31:bf:20:58:6b:91:90:21:a4:d3:b9:7d:4b:33:46:0b:fa:
         d8:fb:1b:56:8f:23:3f:d2:16:86:e9:af:7d:21:fa:fe:f6:84:
         d6:89:c5:14:7a:de:5c:63:d8:76:7b:e0:03:54:82:3c:59:09:
         7a:b1:75:ef:13:ea:f0:80:54:48:32:bd:14:ef:ce:dc:41:fd:
         55:04:e5:be:f0:6e:27:d9:80:f1:19:da:b4:d0:a2:8c:8c:e9:
         d2:22:72:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8fkkeRlwyjTBtpQBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQ3OGI0MDUtYTQ5NS00MDRhLWE4MDktZDYzMmRkZDZl
M2Q2MB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk
NWYyYzNkNWYtNmYxOS00MWM1LWE2ODYtMmVhYTgxYTczODBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4j1Z58GGdUfEhQkeSOs3W4oSZIRIeDp02cE
oKypi6vlgMv0MbR+KDX4TFYqiE7kSj1PE9wE8vnuQ+ZaGKtmBEyjJlw4dM0Ujs7m
1rzM0Y9rYrqG2FXPAoTTNxVnn7xXeauZZQySgzAh9DadEnM8INEy/A8Bzy/IQCuk
0d5yfmyim43kKkfNXTNiBU8xjRHs/oUQKpuiCaev1hmAL6w3RRFV99wrzliMfx92
6SOTswNEpz6ix7hojc64+xnWZY+7tVuRV08yRUL7Cckv4c29S+ZgpvL0i5CBl00W
2ecaey93SMy96RYPU9Qvc+TKvvo51C4W4eGyp+rpmoIy76FJYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNVPuwKVw1GqgcxVydLP7amFYeK8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZDc4
YjQwNS1hNDk1LTQwNGEtYTgwOS1kNjMyZGRkNmUzZDYvMzU4YjVjZGQtM2Q5Yy0z
ZWM1LWJkNzktM2UxY2QyYWMzN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWQ3OGI0MDUtYTQ5NS00MDRhLWE4
MDktZDYzMmRkZDZlM2Q2L2FkNzhiNDA1LWE0OTUtNDA0YS1hODA5LWQ2MzJkZGQ2
ZTNkNi5jcmwwHwYDVR0jBBgwFoAUQRVc8F3MYFNCzf6HiLQQwurrW6cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hZDc4YjQwNS1hNDk1LTQwNGEtYTgwOS1kNjMy
ZGRkNmUzZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJiAB+QGA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADQ8Ra60SjOmvtAdmKN06jCNCe+XFFNxjsg5zIThW2G/qNzJLKZL
7UfwBoYyMjDfh9uA9C5q8Bpdpzc8rrwqvMI+ANFeyAfiZWcmQoeMnXsP02easoUy
VpX+TpdME3DccuUf5eAOmzRD/1VZTJ0fgp7ClgtMp7xgTo+llr4M3wrQz/dIAxFa
LSyKzWjJf2qBnpkzzOuYuIsbP83a6p924kIH+T8xvyBYa5GQIaTTuX1LM0YL+tj7
G1aPIz/SFobpr30h+v72hNaJxRR63lxj2HZ74ANUgjxZCXqxde8T6vCAVEgyvRTv
ztxB/VUE5b7wbifZgPEZ2rTQooyM6dIicpg=
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:42:07 2026 by rpki-client