Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/81ca1e82-7390-35b3-93a1-140d95ece5fd.roa
File:                     81ca1e82-7390-35b3-93a1-140d95ece5fd.roa (raw, json)
Hash identifier:          YnEESaZqZXF3Hn21B/zdNUKFpcF6nTMT+lHzJY0S90U=
Subject key identifier:   66:00:24:F4:9A:00:BE:02:9D:C3:5E:70:8B:C4:B0:CB:4A:2C:71:0E
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584F549DA8D63A8355B951EBCA80
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/81ca1e82-7390-35b3-93a1-140d95ece5fd.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     62513
IP address blocks:        2602:fd50:8200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:a8:d6:3a:83:55:b9:51:eb:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=8e8f360d-941a-4fae-9bb1-298b5aa9fdb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:cf:c2:f9:f5:75:c7:16:35:81:68:e3:da:
                    90:04:d6:d8:99:a3:30:c1:25:ba:40:36:14:cf:1b:
                    c6:f4:83:e7:6e:eb:59:33:4c:ae:92:89:b8:05:c6:
                    46:4b:b8:90:00:4d:80:1e:ca:f1:3b:b5:96:a8:cc:
                    17:dc:b5:80:13:4d:15:91:b0:b4:b5:b2:4c:29:e1:
                    2e:07:88:f3:81:23:c4:eb:e1:b7:38:a4:e4:5f:ce:
                    23:7a:55:1a:38:ab:e0:16:d8:2c:4f:ef:92:34:de:
                    ce:d6:fe:cd:d2:2c:96:6f:ac:09:e9:b0:4a:eb:7f:
                    be:3a:9f:c6:e5:be:a4:fe:31:09:4f:38:91:d8:d0:
                    19:dd:9a:2c:12:6d:1c:6f:cb:7b:3a:19:0a:09:95:
                    2e:16:59:b5:21:35:bf:bc:24:23:dd:b2:e9:fb:b4:
                    b9:52:d1:9f:05:16:7c:b8:4a:d3:ea:9d:32:68:71:
                    b7:0c:aa:32:f0:b0:9c:5e:c9:ef:24:fa:c7:63:9a:
                    20:e9:da:56:01:f1:e8:cf:04:f1:18:9d:1c:b9:4c:
                    37:4c:5b:cb:cb:b3:03:67:2a:1d:1a:81:33:b0:50:
                    cb:89:fd:7f:26:ff:92:9f:27:ac:89:60:31:91:69:
                    5a:4a:f8:eb:d1:6b:29:5e:6e:b5:4a:fe:7a:a3:02:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:00:24:F4:9A:00:BE:02:9D:C3:5E:70:8B:C4:B0:CB:4A:2C:71:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/81ca1e82-7390-35b3-93a1-140d95ece5fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:8200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:80:30:5f:e5:64:e5:2f:69:bf:3a:37:ff:df:93:74:d2:46:
         52:47:83:20:2f:99:bb:cc:30:61:bc:ca:c0:e7:fe:2e:2b:9d:
         d2:8e:ed:39:5c:76:93:2b:27:a8:3d:ac:57:6d:25:49:b0:5c:
         6d:fc:b1:54:02:fb:07:d2:83:65:30:c8:bf:93:be:5c:5e:7f:
         96:58:53:61:a2:82:ad:b2:8e:0b:25:c2:ca:ad:5e:a4:c0:4e:
         60:b7:4d:ca:f7:84:d0:b1:0f:df:87:ad:34:12:df:d5:7d:32:
         f0:d6:45:65:14:e8:16:c2:cc:74:88:d3:91:67:01:f1:aa:e9:
         f6:2a:f1:a6:9d:4e:a7:be:39:da:82:c4:48:83:09:db:24:b9:
         81:bc:62:98:de:12:ab:1a:11:bf:9b:9a:f4:b6:7f:a8:d4:68:
         c0:ef:15:2c:b2:71:a0:be:8a:5f:e9:3e:47:5a:d7:32:da:29:
         cd:4c:1b:f7:fe:8d:54:3b:d5:a6:5b:b9:08:1e:7d:16:22:2d:
         72:6e:6a:32:83:e4:dd:d3:43:0f:22:22:9b:9a:6a:8b:e8:4b:
         c2:fa:87:fc:c4:36:a9:69:ae:40:ee:e5:70:4d:fd:96:30:a2:
         91:a7:59:3c:af:80:e8:08:c1:40:08:3c:e2:34:69:7f:57:00:
         db:ef:9a:c0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9UnajWOoNVuVHryoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3
ZWU3MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
OGU4ZjM2MGQtOTQxYS00ZmFlLTliYjEtMjk4YjVhYTlmZGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXTPwvn1dccWNYFo49qQBNbYmaMwwSW6QDYU
zxvG9IPnbutZM0yukom4BcZGS7iQAE2AHsrxO7WWqMwX3LWAE00VkbC0tbJMKeEu
B4jzgSPE6+G3OKTkX84jelUaOKvgFtgsT++SNN7O1v7N0iyWb6wJ6bBK63++Op/G
5b6k/jEJTziR2NAZ3ZosEm0cb8t7OhkKCZUuFlm1ITW/vCQj3bLp+7S5UtGfBRZ8
uErT6p0yaHG3DKoy8LCcXsnvJPrHY5og6dpWAfHozwTxGJ0cuUw3TFvLy7MDZyod
GoEzsFDLif1/Jv+SnyesiWAxkWlaSvjr0WspXm61Sv56owIDEwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGYAJPSaAL4CncNecIvEsMtKLHEOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl
NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvODFjYTFlODItNzM5MC0z
NWIzLTkzYTEtMTQwZDk1ZWNlNWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3
YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1
N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw
MWU3NTdlZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9UIIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaIAwX+Vk5S9pvzo3/9+TdNJGUkeDIC+Zu8wwYbzKwOf+Liud0o7t
OVx2kysnqD2sV20lSbBcbfyxVAL7B9KDZTDIv5O+XF5/llhTYaKCrbKOCyXCyq1e
pMBOYLdNyveE0LEP34etNBLf1X0y8NZFZRToFsLMdIjTkWcB8arp9irxpp1Op745
2oLESIMJ2yS5gbximN4SqxoRv5ua9LZ/qNRowO8VLLJxoL6KX+k+R1rXMtopzUwb
9/6NVDvVplu5CB59FiItcm5qMoPk3dNDDyIim5pqi+hLwvqH/MQ2qWmuQO7lcE39
ljCikadZPK+A6AjBQAg84jRpf1cA2++awA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:51:35 2026 by rpki-client