Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/dc9add5f-cc48-3463-8140-a475520e79b9.roa
File:                     dc9add5f-cc48-3463-8140-a475520e79b9.roa (raw, json)
Hash identifier:          meBwdpXsAl81+vkqb1LsLljsi/1zT4ez6L13/GYr000=
Subject key identifier:   CC:31:2C:CC:FD:43:D7:C7:8F:4F:A7:EC:68:18:AD:27:C9:E8:CE:11
Certificate issuer:       /CN=203e5d2d-6782-4312-b292-20591c5140f9
Certificate serial:       010D0C9F4328584E0A6FE9D002438BF2094B2500
Authority key identifier: 05:1D:C5:7E:AF:CC:A1:41:7C:10:52:33:86:4A:47:E0:33:D3:2C:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/dc9add5f-cc48-3463-8140-a475520e79b9.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     401780
IP address blocks:        2602:f9a3:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/203e5d2d-6782-4312-b292-20591c5140f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/203e5d2d-6782-4312-b292-20591c5140f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:e9:d0:02:43:8b:f2:09:4b:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203e5d2d-6782-4312-b292-20591c5140f9
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=4193bd74-67c2-490e-b96c-44d6ce92adfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:64:b7:53:63:4e:ae:3a:b2:f1:d6:54:d4:74:
                    c9:06:97:c9:0d:c7:a2:e8:ea:a5:11:23:5c:75:82:
                    78:95:d8:19:f7:7b:cd:d6:39:81:a5:1c:a3:85:24:
                    fd:61:9d:45:a7:87:42:95:6d:c8:c8:33:1b:7e:11:
                    46:a0:74:4d:42:79:29:a1:21:fc:7c:9c:a1:6d:ab:
                    8c:50:12:28:72:1b:5b:0f:b3:42:13:38:be:59:f3:
                    14:6e:64:dd:a2:a7:af:d5:97:dc:9e:5e:29:e4:48:
                    d0:3c:df:aa:a3:a8:2e:2b:5a:3d:48:69:cc:f7:dc:
                    21:d4:40:0b:04:65:09:ed:0f:a1:c0:69:a2:94:14:
                    88:28:6e:0a:42:83:d5:33:0c:46:12:1c:e9:e1:ea:
                    82:9c:5b:b7:2e:04:b8:58:e6:6f:72:c2:47:77:ed:
                    9c:e1:b6:ac:e4:88:c6:b2:c4:d3:a7:ff:9a:67:ad:
                    8e:3d:51:6d:05:18:b8:91:c7:be:de:4c:6b:ae:31:
                    3d:19:65:1e:3d:c7:89:a3:d0:41:70:68:05:f3:af:
                    6a:48:23:05:ce:0e:d9:34:35:16:70:b6:f3:56:a1:
                    17:62:d7:13:58:2d:5f:47:b5:4e:d9:0f:9e:65:06:
                    1f:3a:13:6d:ce:af:c1:fa:c9:bf:fc:9e:21:c8:7c:
                    5d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:31:2C:CC:FD:43:D7:C7:8F:4F:A7:EC:68:18:AD:27:C9:E8:CE:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/dc9add5f-cc48-3463-8140-a475520e79b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/203e5d2d-6782-4312-b292-20591c5140f9.crl

            X509v3 Authority Key Identifier:
                keyid:05:1D:C5:7E:AF:CC:A1:41:7C:10:52:33:86:4A:47:E0:33:D3:2C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a3:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:dd:03:51:b1:f2:7b:f2:ee:01:de:e7:7c:86:1a:eb:33:8a:
         4d:07:a0:34:8b:f8:04:29:57:b4:e0:0c:93:ed:19:16:95:b7:
         d2:aa:35:fb:64:c9:0a:b6:d2:11:a6:b7:fb:fa:db:f6:5a:58:
         48:39:a6:a8:85:55:5e:ab:58:52:f5:d7:71:34:35:18:ea:14:
         8e:b7:fc:68:a6:0b:e7:28:d8:55:39:c8:2f:6c:61:75:33:43:
         95:c0:d2:4c:9c:42:55:f7:09:f1:2f:99:56:2c:5a:3e:27:9a:
         e2:82:75:05:59:27:f0:5b:28:6f:bb:09:ac:85:b1:f4:90:69:
         01:f9:e2:c8:31:1c:97:fa:17:47:1b:c9:e8:13:00:ec:07:e8:
         6a:01:71:7b:81:17:f4:28:68:f1:16:16:99:f4:71:c6:89:11:
         89:b1:3b:93:f8:32:bd:9e:3f:97:38:e8:e5:9d:a9:72:26:e2:
         c0:66:67:45:90:3c:b8:b7:c6:0a:22:62:bb:74:58:79:3a:15:
         fa:22:79:51:8d:7c:b9:5e:13:c0:31:13:fc:12:db:cb:6d:e1:
         1a:8f:23:4e:48:97:5e:06:8d:0d:cf:8f:64:93:42:53:95:c5:
         6a:6c:a3:09:05:b4:e4:25:91:27:10:6a:99:36:cb:8b:4c:fa:
         b6:3a:47:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Kb+nQAkOL8glLJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjAzZTVkMmQtNjc4Mi00MzEyLWIyOTItMjA1OTFjNTE0
MGY5MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk
NDE5M2JkNzQtNjdjMi00OTBlLWI5NmMtNDRkNmNlOTJhZGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWS3U2NOrjqy8dZU1HTJBpfJDcei6OqlESNc
dYJ4ldgZ93vN1jmBpRyjhST9YZ1Fp4dClW3IyDMbfhFGoHRNQnkpoSH8fJyhbauM
UBIochtbD7NCEzi+WfMUbmTdoqev1Zfcnl4p5EjQPN+qo6guK1o9SGnM99wh1EAL
BGUJ7Q+hwGmilBSIKG4KQoPVMwxGEhzp4eqCnFu3LgS4WOZvcsJHd+2c4bas5IjG
ssTTp/+aZ62OPVFtBRi4kce+3kxrrjE9GWUePceJo9BBcGgF869qSCMFzg7ZNDUW
cLbzVqEXYtcTWC1fR7VO2Q+eZQYfOhNtzq/B+sm//J4hyHxdOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMwxLMz9Q9fHj0+n7GgYrSfJ6M4RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMDNl
NWQyZC02NzgyLTQzMTItYjI5Mi0yMDU5MWM1MTQwZjkvZGM5YWRkNWYtY2M0OC0z
NDYzLTgxNDAtYTQ3NTUyMGU3OWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjAzZTVkMmQtNjc4Mi00MzEyLWIy
OTItMjA1OTFjNTE0MGY5LzIwM2U1ZDJkLTY3ODItNDMxMi1iMjkyLTIwNTkxYzUx
NDBmOS5jcmwwHwYDVR0jBBgwFoAUBR3Ffq/MoUF8EFIzhkpH4DPTLGwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMDNlNWQyZC02NzgyLTQzMTItYjI5Mi0yMDU5
MWM1MTQwZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5owAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJvdA1Gx8nvy7gHe53yGGuszik0HoDSL+AQpV7TgDJPtGRaVt9Kq
NftkyQq20hGmt/v62/ZaWEg5pqiFVV6rWFL113E0NRjqFI63/GimC+co2FU5yC9s
YXUzQ5XA0kycQlX3CfEvmVYsWj4nmuKCdQVZJ/BbKG+7CayFsfSQaQH54sgxHJf6
F0cbyegTAOwH6GoBcXuBF/QoaPEWFpn0ccaJEYmxO5P4Mr2eP5c46OWdqXIm4sBm
Z0WQPLi3xgoiYrt0WHk6FfoieVGNfLleE8AxE/wS28tt4RqPI05Il14GjQ3Pj2ST
QlOVxWpsowkFtOQlkScQapk2y4tM+rY6RxE=
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:58:09 2026 by rpki-client