Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/43abd093-8cb1-3b4e-ad06-880c537a32c7.roa
File:                     43abd093-8cb1-3b4e-ad06-880c537a32c7.roa (raw, json)
Hash identifier:          138X81GqS0YduoOb/aDGFOPiPHk6Ca5GoyzK7FWQYfk=
Subject key identifier:   1F:99:B7:28:AD:DD:43:CC:2C:4A:D0:01:B1:61:66:E9:64:09:65:A0
Certificate issuer:       /CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
Certificate serial:       010D0C9F4328584ECBD1C66DBD4801A058714180
Authority key identifier: C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/43abd093-8cb1-3b4e-ad06-880c537a32c7.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     399765
IP address blocks:        2602:f75c::/40 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:c6:6d:bd:48:01:a0:58:71:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=a443b217-aadf-47df-ae7a-f84df1dd7a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:73:a9:3b:3d:ff:12:2f:5f:2d:2c:f4:d0:
                    78:28:07:c9:f0:ac:45:8f:a4:ca:d6:cd:05:f0:7d:
                    c0:c8:c4:43:44:03:c1:b5:52:b5:05:03:f2:4f:e0:
                    63:b3:0a:d1:25:fe:e9:db:bf:fa:98:6e:f7:7c:6b:
                    3e:b2:6f:61:f4:7c:0b:97:8c:4f:a7:bc:41:7d:09:
                    b8:d4:bd:da:6f:5c:4b:9c:74:2c:7c:9d:4c:b5:e7:
                    6c:b4:8a:33:ba:32:ca:69:2e:d2:b9:5a:ee:a6:8d:
                    d6:70:63:fe:68:7b:40:65:0d:0b:8d:25:fc:0a:18:
                    4e:a1:b2:e7:1b:72:01:57:ac:b0:4e:21:86:14:5f:
                    55:63:4f:b7:2c:a8:fe:72:b0:f1:fd:7b:14:82:71:
                    b8:9d:f7:3a:f0:2e:cd:4a:a2:4e:f1:20:4e:b7:63:
                    91:f5:9f:1d:03:e1:57:59:43:f6:10:6e:61:76:42:
                    69:fe:0b:14:a3:f0:bf:dd:79:26:d9:40:8c:dd:e4:
                    25:4e:90:51:7f:07:a6:2f:79:84:b5:55:16:59:a4:
                    61:62:7f:7f:16:ad:3b:d6:d7:db:68:81:f8:18:a9:
                    ee:09:b1:c6:d3:36:29:bd:e7:d9:41:4d:ab:5e:c7:
                    2e:eb:9f:ee:60:58:d9:91:8e:65:5f:2f:9b:54:d9:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:99:B7:28:AD:DD:43:CC:2C:4A:D0:01:B1:61:66:E9:64:09:65:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/43abd093-8cb1-3b4e-ad06-880c537a32c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl

            X509v3 Authority Key Identifier:
                keyid:C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f75c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a1:07:eb:9f:d4:d7:26:95:63:e2:4d:7f:58:1f:3f:58:15:
         85:c2:95:0b:03:f2:af:6f:05:69:41:09:9f:19:87:27:f8:e4:
         c6:5e:7f:c7:81:c5:df:e5:5d:ee:51:4a:ea:bf:a3:4a:af:11:
         bc:b2:8a:35:9c:46:76:a6:4a:50:ba:48:44:29:14:a2:cb:bf:
         5f:c0:8c:97:40:37:eb:52:d0:ae:6b:70:cd:39:29:c6:cf:b9:
         fd:23:d8:d3:1b:ef:81:4f:2d:2a:46:d2:91:ef:18:f1:36:c0:
         be:7d:cd:d1:c1:05:28:d2:7d:1a:4b:a9:ad:33:60:bf:b1:d8:
         7c:86:ef:29:19:1b:d1:dc:d9:ed:6b:db:b7:d8:5b:ae:bb:3a:
         37:5a:d1:87:9a:3d:ee:e8:d2:24:b1:86:65:dc:17:3c:d6:dd:
         16:a6:82:6d:40:26:c8:84:2c:81:a1:3d:25:5e:39:62:08:43:
         4d:ce:f4:a3:b4:99:2a:3b:6b:6c:61:83:df:ab:ad:bb:72:f2:
         05:0c:8e:a3:fa:52:2e:d9:7e:04:b2:08:56:e8:c7:58:8e:5f:
         58:f1:fc:98:ba:55:6c:d6:5c:cf:3c:a6:9b:58:c4:c5:44:d2:
         d4:23:c6:d3:7d:ea:17:64:0d:62:7e:7d:c6:18:b7:6b:a6:7a:
         b9:b7:11:9e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7L0cZtvUgBoFhxQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzUyMTBiMWYtNDhmMi00MGVlLTliMTItY2RkYmFlMjBl
MTJhMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
YTQ0M2IyMTctYWFkZi00N2RmLWFlN2EtZjg0ZGYxZGQ3YTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1tzqTs9/xIvXy0s9NB4KAfJ8KxFj6TK1s0F
8H3AyMRDRAPBtVK1BQPyT+BjswrRJf7p27/6mG73fGs+sm9h9HwLl4xPp7xBfQm4
1L3ab1xLnHQsfJ1MtedstIozujLKaS7SuVrupo3WcGP+aHtAZQ0LjSX8ChhOobLn
G3IBV6ywTiGGFF9VY0+3LKj+crDx/XsUgnG4nfc68C7NSqJO8SBOt2OR9Z8dA+FX
WUP2EG5hdkJp/gsUo/C/3Xkm2UCM3eQlTpBRfwemL3mEtVUWWaRhYn9/Fq071tfb
aIH4GKnuCbHG0zYpvefZQU2rXscu65/uYFjZkY5lXy+bVNm6mwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFB+Ztyit3UPMLErQAbFhZulkCWWgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NTIx
MGIxZi00OGYyLTQwZWUtOWIxMi1jZGRiYWUyMGUxMmEvNDNhYmQwOTMtOGNiMS0z
YjRlLWFkMDYtODgwYzUzN2EzMmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzUyMTBiMWYtNDhmMi00MGVlLTli
MTItY2RkYmFlMjBlMTJhLzc1MjEwYjFmLTQ4ZjItNDBlZS05YjEyLWNkZGJhZTIw
ZTEyYS5jcmwwHwYDVR0jBBgwFoAUxnqbNxG5kFsCtGVECy+knYcrdFUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83NTIxMGIxZi00OGYyLTQwZWUtOWIxMi1jZGRi
YWUyMGUxMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3XAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaaEH65/U1yaVY+JNf1gfP1gVhcKVCwPyr28FaUEJnxmHJ/jkxl5/
x4HF3+Vd7lFK6r+jSq8RvLKKNZxGdqZKULpIRCkUosu/X8CMl0A361LQrmtwzTkp
xs+5/SPY0xvvgU8tKkbSke8Y8TbAvn3N0cEFKNJ9GkuprTNgv7HYfIbvKRkb0dzZ
7Wvbt9hbrrs6N1rRh5o97ujSJLGGZdwXPNbdFqaCbUAmyIQsgaE9JV45YghDTc70
o7SZKjtrbGGD36utu3LyBQyOo/pSLtl+BLIIVujHWI5fWPH8mLpVbNZczzymm1jE
xUTS1CPG033qF2QNYn59xhi3a6Z6ubcRng==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:05:55 2026 by rpki-client