Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9df4e54-1fb0-3238-95bd-fa1ea873b8df.roa
File:                     d9df4e54-1fb0-3238-95bd-fa1ea873b8df.roa (raw, json)
Hash identifier:          WoV8v9lv2X+J1hmwK7AwyRLr8qHC0tI63OdDDhowPBE=
Subject key identifier:   F8:DE:18:51:BA:26:4C:87:1A:83:90:68:FD:7A:E2:21:53:7E:6B:EC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F3E4804E9276CA2B554FABC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9df4e54-1fb0-3238-95bd-fa1ea873b8df.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     15169
IP address blocks:        2600:1902:560::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:04:e9:27:6c:a2:b5:54:fa:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=2ea0e28b-c83c-48e6-be9e-5bacef2773ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c1:34:cd:d7:de:3e:04:e3:a1:19:d0:40:5e:
                    54:d4:2d:e0:91:2c:e7:16:cc:41:76:e6:a6:e8:0f:
                    3a:81:d6:dd:c9:8a:2c:88:aa:9b:e3:6e:ff:9a:32:
                    c2:7c:d4:b1:eb:9b:d0:16:41:04:4f:f3:cd:09:98:
                    e9:df:54:24:39:62:d7:8e:84:f8:ad:54:39:f1:d2:
                    55:74:0e:bf:70:2a:30:37:ee:d9:e2:79:5e:70:af:
                    91:06:d3:d2:2e:73:e5:49:eb:fc:b4:db:2c:ca:c9:
                    04:06:97:ae:c0:e3:2c:93:57:ce:8e:17:90:fb:8e:
                    cc:97:39:80:71:d4:be:81:0c:67:2e:09:31:15:3f:
                    cf:8c:82:35:97:1b:1d:3c:50:1e:4c:6e:e8:b6:eb:
                    77:07:88:eb:8d:09:ac:28:2b:ff:d3:3d:bf:8b:e7:
                    d0:9d:c8:28:f4:40:09:2f:89:b3:8a:9e:fc:58:90:
                    b4:19:8e:c3:58:25:93:58:bd:5e:a4:7c:fa:a3:62:
                    50:81:78:88:a4:9f:58:9f:93:2e:24:98:1a:fa:f6:
                    54:6d:c5:84:9d:95:65:08:ea:f8:74:9e:0f:51:09:
                    98:b7:61:ba:56:fa:51:94:67:9d:5c:4d:0b:bf:1f:
                    e7:31:18:f4:13:7c:f4:29:37:12:cc:89:b8:83:54:
                    21:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DE:18:51:BA:26:4C:87:1A:83:90:68:FD:7A:E2:21:53:7E:6B:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9df4e54-1fb0-3238-95bd-fa1ea873b8df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:560::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f3:e4:14:c5:5b:07:03:4c:a8:f3:ec:09:05:b2:11:92:46:
         e3:f1:dd:af:33:1d:74:f5:c9:ad:fa:f2:2a:32:39:f4:b8:38:
         97:53:69:df:13:48:86:71:b6:b4:2b:e5:09:f2:ad:e8:e5:d9:
         57:2f:78:f6:0d:2c:3b:cd:5c:5d:b0:0b:34:51:c9:dd:48:01:
         dd:8d:94:68:bd:f1:ca:13:c0:9d:f3:eb:ec:32:80:2e:eb:29:
         c6:2a:a3:dc:43:04:47:ea:1b:41:60:df:26:33:b5:73:16:11:
         7b:a0:a2:cc:5e:c5:c3:63:b0:ff:ad:11:3f:2b:a3:65:5e:f9:
         08:cc:f0:16:5b:1d:0c:97:03:39:5c:44:c6:58:c9:73:50:72:
         fd:29:f6:79:a2:55:c3:66:ea:81:3d:cb:6f:0b:4b:a3:f1:5f:
         b1:d5:00:94:53:80:37:2a:34:96:4f:df:92:c2:4a:e3:0e:6b:
         58:fb:3b:77:43:1f:88:58:aa:6f:8c:e3:df:74:42:50:28:e0:
         55:e3:47:db:44:66:42:c3:1d:10:89:25:06:ed:82:f1:db:71:
         b6:4b:7f:dc:63:dd:cf:1e:ba:b8:b4:4f:29:05:bc:32:d5:0c:
         54:84:45:c7:23:87:27:01:4e:ba:52:d2:11:23:fd:91:49:98:
         1f:7b:57:fe
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8+SATpJ2yitVT6vAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk
MmVhMGUyOGItYzgzYy00OGU2LWJlOWUtNWJhY2VmMjc3M2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksE0zdfePgTjoRnQQF5U1C3gkSznFsxBduam
6A86gdbdyYosiKqb427/mjLCfNSx65vQFkEET/PNCZjp31QkOWLXjoT4rVQ58dJV
dA6/cCowN+7Z4nlecK+RBtPSLnPlSev8tNssyskEBpeuwOMsk1fOjheQ+47MlzmA
cdS+gQxnLgkxFT/PjII1lxsdPFAeTG7otut3B4jrjQmsKCv/0z2/i+fQncgo9EAJ
L4mzip78WJC0GY7DWCWTWL1epHz6o2JQgXiIpJ9Yn5MuJJga+vZUbcWEnZVlCOr4
dJ4PUQmYt2G6VvpRlGedXE0Lvx/nMRj0E3z0KTcSzIm4g1QhYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPjeGFG6JkyHGoOQaP164iFTfmvsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDlkZjRlNTQtMWZiMC0z
MjM4LTk1YmQtZmExZWE4NzNiOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgVg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABrz5BTFWwcDTKjz7AkFshGSRuPx3a8zHXT1ya368ioyOfS4OJdT
ad8TSIZxtrQr5Qnyrejl2VcvePYNLDvNXF2wCzRRyd1IAd2NlGi98coTwJ3z6+wy
gC7rKcYqo9xDBEfqG0Fg3yYztXMWEXugosxexcNjsP+tET8ro2Ve+QjM8BZbHQyX
AzlcRMZYyXNQcv0p9nmiVcNm6oE9y28LS6PxX7HVAJRTgDcqNJZP35LCSuMOa1j7
O3dDH4hYqm+M4990QlAo4FXjR9tEZkLDHRCJJQbtgvHbcbZLf9xj3c8euri0TykF
vDLVDFSERccjhycBTrpS0hEj/ZFJmB97V/4=
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:07:42 2026 by rpki-client