Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/9b6bdb72-ac6d-348a-aa29-f90f04870d3f.roa
File:                     9b6bdb72-ac6d-348a-aa29-f90f04870d3f.roa (raw, json)
Hash identifier:          MNuqGLUKrPt2o49dKp0ziNTJ3N6kKjjQ68wUye8P0CE=
Subject key identifier:   06:B3:43:C3:E7:B8:E9:B3:D3:D9:9D:C8:12:9F:D5:BE:17:BF:CB:B8
Certificate issuer:       /CN=e381cbd6-d113-4ae5-805a-aa3e1601cf49
Certificate serial:       010D0C9F4328584F30B1942CC83FE8809CF17BA0
Authority key identifier: 9D:28:82:CC:E4:C3:26:39:6C:08:9D:EC:65:18:25:0E:46:87:B8:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/9b6bdb72-ac6d-348a-aa29-f90f04870d3f.roa
Signing time:             Wed 16 Sep 2026 04:12:03 +0000
ROA not before:           Wed 16 Sep 2026 04:12:03 +0000
ROA not after:            Tue 15 Dec 2026 05:12:03 +0000
asID:                     31898
IP address blocks:        2602:f494:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:b1:94:2c:c8:3f:e8:80:9c:f1:7b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e381cbd6-d113-4ae5-805a-aa3e1601cf49
        Validity
            Not Before: Sep 16 04:12:03 2026 GMT
            Not After : Dec 15 05:12:03 2026 GMT
        Subject: CN=bf4fe1b3-26d4-473b-bba9-6ac9758f2ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:6b:b3:86:e9:2c:00:dc:33:b2:9a:6f:03:
                    d3:ee:27:d7:24:6a:5e:8a:75:49:4c:07:16:c6:5d:
                    c3:d7:17:f1:35:5b:dd:11:1d:4f:02:80:82:0c:c9:
                    09:32:1c:79:1f:52:bc:b3:25:dd:37:f0:fe:8c:36:
                    c5:9b:d2:c4:d0:84:61:33:e5:59:5c:66:8a:e7:93:
                    61:24:b6:7d:6f:2f:b6:b7:be:f7:13:09:81:9d:67:
                    a1:27:c6:1d:67:b8:35:34:34:97:6d:e6:10:0e:78:
                    8b:b7:07:da:54:6d:d8:fd:7b:e7:e8:e2:3e:8a:95:
                    ab:c3:71:a3:1e:28:db:d6:a1:28:90:74:ab:7e:e4:
                    cf:db:55:a2:c6:32:97:78:1d:51:d4:61:57:4a:ae:
                    84:f5:06:43:96:8f:c9:c7:30:4b:1b:15:9e:00:54:
                    ad:e0:f2:c9:15:97:c0:2c:b1:32:92:3f:f4:c2:0e:
                    f7:1f:18:c3:56:8a:65:19:d6:9d:b4:f4:08:6a:9a:
                    be:69:9c:b7:dc:95:73:50:8d:5e:23:a4:51:55:b9:
                    39:c6:81:16:df:30:a3:b7:9b:f5:2b:c5:cb:a8:55:
                    6e:53:b5:59:77:50:84:51:2f:03:cc:21:df:e7:03:
                    d4:7d:93:1f:a6:a9:63:03:4e:4e:8a:7f:86:17:15:
                    22:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B3:43:C3:E7:B8:E9:B3:D3:D9:9D:C8:12:9F:D5:BE:17:BF:CB:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/9b6bdb72-ac6d-348a-aa29-f90f04870d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49/e381cbd6-d113-4ae5-805a-aa3e1601cf49.crl

            X509v3 Authority Key Identifier:
                keyid:9D:28:82:CC:E4:C3:26:39:6C:08:9D:EC:65:18:25:0E:46:87:B8:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e381cbd6-d113-4ae5-805a-aa3e1601cf49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f494:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:65:36:5d:42:63:a8:b1:ea:92:29:6b:bf:27:37:f6:c7:1c:
         af:dc:0e:82:93:77:5d:ce:97:33:28:dc:3e:b6:e6:f4:82:26:
         96:80:95:44:e6:5c:14:c3:9b:ab:c3:72:f7:22:3f:91:eb:d2:
         bf:72:be:ed:91:55:43:1a:64:0a:8e:35:32:bc:b8:ee:2b:9a:
         a4:89:76:18:6f:04:d4:d5:c4:4e:a2:7a:65:48:7b:c9:05:46:
         1e:53:63:3e:cb:b6:e0:31:00:07:4e:30:fa:88:89:b9:9d:6c:
         c1:c4:76:9b:9e:3b:01:ff:b7:6f:f7:65:62:73:4d:20:ed:79:
         7c:fe:f0:39:ee:cd:35:f1:fa:e7:2d:44:3c:ab:2a:eb:67:e0:
         ec:b8:d4:c5:34:fe:b7:64:dd:02:61:e5:5d:3e:07:6d:75:17:
         32:d8:62:bc:9c:5c:7a:99:f6:34:b9:2a:07:dd:a4:aa:fe:e1:
         00:fb:68:c2:39:e0:bb:b1:de:f9:a2:23:1b:c1:64:26:05:96:
         eb:09:1a:5c:06:86:eb:ac:b2:28:b8:c3:3e:bc:2d:66:01:34:
         ba:e7:8f:2d:7c:99:65:44:a4:97:b3:a0:dd:c5:9d:57:de:27:
         f6:9f:e4:9d:12:48:29:65:19:af:f3:53:53:7a:7e:1d:06:db:
         d0:87:a1:6f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8wsZQsyD/ogJzxe6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM4MWNiZDYtZDExMy00YWU1LTgwNWEtYWEzZTE2MDFj
ZjQ5MB4XDTI2MDkxNjA0MTIwM1oXDTI2MTIxNTA1MTIwM1owLzEtMCsGA1UEAxMk
YmY0ZmUxYjMtMjZkNC00NzNiLWJiYTktNmFjOTc1OGYyYWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDtrs4bpLADcM7KabwPT7ifXJGpeinVJTAcW
xl3D1xfxNVvdER1PAoCCDMkJMhx5H1K8syXdN/D+jDbFm9LE0IRhM+VZXGaK55Nh
JLZ9by+2t773EwmBnWehJ8YdZ7g1NDSXbeYQDniLtwfaVG3Y/Xvn6OI+ipWrw3Gj
Hijb1qEokHSrfuTP21WixjKXeB1R1GFXSq6E9QZDlo/JxzBLGxWeAFSt4PLJFZfA
LLEykj/0wg73HxjDVoplGdadtPQIapq+aZy33JVzUI1eI6RRVbk5xoEW3zCjt5v1
K8XLqFVuU7VZd1CEUS8DzCHf5wPUfZMfpqljA05Oin+GFxUimwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAazQ8PnuOmz09mdyBKf1b4Xv8u4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lMzgx
Y2JkNi1kMTEzLTRhZTUtODA1YS1hYTNlMTYwMWNmNDkvOWI2YmRiNzItYWM2ZC0z
NDhhLWFhMjktZjkwZjA0ODcwZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZTM4MWNiZDYtZDExMy00YWU1LTgw
NWEtYWEzZTE2MDFjZjQ5L2UzODFjYmQ2LWQxMTMtNGFlNS04MDVhLWFhM2UxNjAx
Y2Y0OS5jcmwwHwYDVR0jBBgwFoAUnSiCzOTDJjlsCJ3sZRglDkaHuAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9lMzgxY2JkNi1kMTEzLTRhZTUtODA1YS1hYTNl
MTYwMWNmNDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL0lAAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGJlNl1CY6ix6pIpa78nN/bHHK/cDoKTd13OlzMo3D625vSCJpaA
lUTmXBTDm6vDcvciP5Hr0r9yvu2RVUMaZAqONTK8uO4rmqSJdhhvBNTVxE6iemVI
e8kFRh5TYz7LtuAxAAdOMPqIibmdbMHEdpueOwH/t2/3ZWJzTSDteXz+8DnuzTXx
+uctRDyrKutn4Oy41MU0/rdk3QJh5V0+B211FzLYYrycXHqZ9jS5KgfdpKr+4QD7
aMI54Lux3vmiIxvBZCYFlusJGlwGhuussii4wz68LWYBNLrnjy18mWVEpJezoN3F
nVfeJ/af5J0SSCllGa/zU1N6fh0G29CHoW8=
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:53:13 2026 by rpki-client