Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d77e0270-a05a-31f2-88ba-81d631ab4e3b.roa
File:                     d77e0270-a05a-31f2-88ba-81d631ab4e3b.roa (raw, json)
Hash identifier:          kxVhHxe0KnLaYiO40AG1MLVf8WIg5y2AR82M0SeTuu0=
Subject key identifier:   A4:66:09:B4:78:A7:AB:6C:D9:3F:EF:14:BF:0E:A7:7C:A5:12:39:39
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F374D54BFF316ECF0F0629F60
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d77e0270-a05a-31f2-88ba-81d631ab4e3b.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     63023
IP address blocks:        2604:86c0:f300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:54:bf:f3:16:ec:f0:f0:62:9f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=2edfa7b6-18ca-40d0-baab-64158ff453ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:16:19:00:4f:81:7c:3d:02:c2:03:92:ad:
                    99:34:51:b7:2a:8e:1f:23:f4:db:df:8e:26:45:61:
                    73:c0:ad:8b:d1:2b:f5:81:c5:8a:8c:ed:88:44:d9:
                    30:37:d3:d1:24:cc:1a:bb:40:4c:83:b7:c3:c6:a9:
                    6b:00:78:99:a4:cb:3c:03:af:cb:ab:7c:42:67:9d:
                    9b:28:c3:75:af:a8:b2:07:19:ec:e3:a0:60:b5:d1:
                    3d:e6:4e:b5:de:09:d5:87:7f:65:3b:f8:60:49:f1:
                    28:3c:ce:ec:91:c5:7d:e9:6c:52:76:14:70:0f:91:
                    44:94:bd:7a:80:46:93:22:dd:f0:8a:41:d2:c0:69:
                    24:19:75:01:6d:81:6d:93:bd:45:c4:20:63:77:03:
                    20:c9:1c:7f:f9:d9:d5:a1:2c:67:12:5f:2b:b9:12:
                    44:69:2e:22:29:d5:90:6d:5c:4c:47:7f:65:1b:ef:
                    8a:c4:61:c1:e9:4b:dd:90:a0:d1:c0:7a:e5:d5:2e:
                    47:5b:c0:ef:64:53:97:05:23:9a:82:46:d8:40:25:
                    86:b4:85:ed:0b:a5:c6:9d:67:a9:6b:a7:db:cf:cf:
                    aa:b9:d8:dd:42:bc:59:e7:9c:6b:7d:0c:87:db:c2:
                    e0:b7:f6:52:f7:e2:77:e9:6c:c6:08:64:79:3b:e5:
                    4e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:66:09:B4:78:A7:AB:6C:D9:3F:EF:14:BF:0E:A7:7C:A5:12:39:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d77e0270-a05a-31f2-88ba-81d631ab4e3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:86c0:f300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1d:dd:1b:62:16:e2:b2:a1:2b:09:9d:59:4f:c7:0f:ec:8e:
         e3:c9:ed:9f:d6:56:18:97:a2:d6:6b:47:bc:d8:13:43:f5:33:
         b6:f7:9a:19:fb:c7:d2:f5:a0:d4:7d:79:12:a5:63:59:0e:50:
         e5:32:0c:2a:7a:32:d5:b2:3a:86:c1:b4:89:c7:6d:5c:20:45:
         8a:e3:9d:a9:29:2f:62:31:ab:c4:f5:86:05:43:55:8b:9c:d6:
         ef:78:c5:8d:ce:4f:00:30:09:12:1b:0a:33:61:f4:32:ca:d9:
         78:03:04:9e:aa:ed:bd:aa:b5:4f:2c:bd:f6:af:0b:1c:be:4b:
         7a:62:bf:c1:91:40:96:ae:9b:03:1c:79:a2:22:06:df:cb:ed:
         c2:e7:59:64:61:dc:b0:ae:0c:69:b8:97:fc:fb:be:f3:be:4a:
         1e:51:4e:14:48:c7:5e:14:66:d2:d2:f7:1f:8a:2b:97:7a:8c:
         ff:58:91:f2:d2:9f:da:b3:13:50:aa:46:f8:46:0f:1d:a3:1b:
         88:f9:f6:ab:61:f6:7d:db:9e:7e:d1:1f:bf:f2:f7:f3:f6:c1:
         2a:30:78:d0:fc:c1:b9:61:25:44:25:a8:3c:7e:28:3f:18:e0:
         5c:6a:51:eb:c9:d4:06:5b:63:b6:d9:79:cf:dd:47:91:8f:86:
         c2:a3:24:58
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE83TVS/8xbs8PBin2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz
OWUwMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
MmVkZmE3YjYtMThjYS00MGQwLWJhYWItNjQxNThmZjQ1M2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a8WGQBPgXw9AsIDkq2ZNFG3Ko4fI/Tb344m
RWFzwK2L0Sv1gcWKjO2IRNkwN9PRJMwau0BMg7fDxqlrAHiZpMs8A6/Lq3xCZ52b
KMN1r6iyBxns46BgtdE95k613gnVh39lO/hgSfEoPM7skcV96WxSdhRwD5FElL16
gEaTIt3wikHSwGkkGXUBbYFtk71FxCBjdwMgyRx/+dnVoSxnEl8ruRJEaS4iKdWQ
bVxMR39lG++KxGHB6UvdkKDRwHrl1S5HW8DvZFOXBSOagkbYQCWGtIXtC6XGnWep
a6fbz8+qudjdQrxZ55xrfQyH28Lgt/ZS9+J36WzGCGR5O+VObwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKRmCbR4p6ts2T/vFL8Op3ylEjk5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk
ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZDc3ZTAyNzAtYTA1YS0z
MWYyLTg4YmEtODFkNjMxYWI0ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk
ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh
MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5
NDg5YTM5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgSGwPMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMR3dG2IW4rKhKwmdWU/HD+yO48ntn9ZWGJei1mtHvNgTQ/Uztvea
GfvH0vWg1H15EqVjWQ5Q5TIMKnoy1bI6hsG0icdtXCBFiuOdqSkvYjGrxPWGBUNV
i5zW73jFjc5PADAJEhsKM2H0MsrZeAMEnqrtvaq1Tyy99q8LHL5LemK/wZFAlq6b
Axx5oiIG38vtwudZZGHcsK4MabiX/Pu+875KHlFOFEjHXhRm0tL3H4orl3qM/1iR
8tKf2rMTUKpG+EYPHaMbiPn2q2H2fdueftEfv/L38/bBKjB40PzBuWElRCWoPH4o
PxjgXGpR68nUBltjttl5z91HkY+GwqMkWA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:04:16 2026 by rpki-client