Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/6fdbea2a-906c-3322-bfdd-628eae16541c.roa
File:                     6fdbea2a-906c-3322-bfdd-628eae16541c.roa (raw, json)
Hash identifier:          hB06XaN1nvQArjDmyRG7Qd0GvZVv9DudI0aXBjPP2t8=
Subject key identifier:   88:92:52:A6:E4:EC:EC:5B:7E:20:FE:FF:46:59:4D:9F:A0:99:08:EC
Certificate issuer:       /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial:       010D0C9F4328584F629315D9EF6B7521C0C3CD70
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/6fdbea2a-906c-3322-bfdd-628eae16541c.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     213683
IP address blocks:        2602:f700:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:15:d9:ef:6b:75:21:c0:c3:cd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=4c582c71-28ab-4e95-b577-4943b823369a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f0:13:f3:a1:1a:9f:1e:b9:53:b5:35:c4:52:
                    0b:8e:7b:96:cf:3a:e2:4a:ae:bd:24:cf:1b:d5:2e:
                    24:3d:09:7f:c2:77:d9:70:5d:0f:0d:b1:4f:a6:5a:
                    30:40:5c:17:ed:eb:1a:7f:0f:63:29:7c:1d:16:13:
                    f8:2a:91:9d:e7:6a:99:ee:0d:f3:62:1c:75:78:33:
                    75:8c:78:17:0f:e6:d9:1b:f8:9c:1d:1a:1a:39:5d:
                    37:63:2d:3d:10:a7:53:5b:08:22:de:0c:17:ed:e1:
                    46:0c:cb:a5:35:ed:a1:27:34:e4:98:6c:d8:0b:6b:
                    72:3f:bd:23:95:f1:66:2b:82:82:ca:83:5f:b1:87:
                    99:49:ce:f3:a9:f0:0d:75:66:ad:dd:6a:b6:98:ca:
                    08:5b:e2:30:a3:ed:6b:66:e4:60:7b:3f:c3:99:2d:
                    6c:ca:e2:f1:a7:ae:f5:ce:58:78:22:bb:84:46:46:
                    56:e0:67:c7:ae:78:62:f1:50:33:49:eb:e5:9a:1d:
                    fc:2a:a5:6d:2c:6c:15:a3:c4:4e:cd:c4:db:c9:8a:
                    52:7f:6b:12:5f:88:c8:04:a1:fa:e0:bc:50:fc:19:
                    1c:03:5f:58:4f:48:9a:77:9a:48:45:99:44:33:48:
                    fc:b8:3a:dc:ac:ee:1d:8e:f8:a5:90:35:83:bf:e7:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:92:52:A6:E4:EC:EC:5B:7E:20:FE:FF:46:59:4D:9F:A0:99:08:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/6fdbea2a-906c-3322-bfdd-628eae16541c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl

            X509v3 Authority Key Identifier:
                keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f700:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:0d:b0:cf:8e:61:55:3a:c3:ea:ea:d1:b4:ad:2f:d5:8b:64:
         e3:ed:c1:99:ac:0f:af:7b:67:39:c3:01:04:d5:da:d1:4c:66:
         a8:1f:93:49:a5:14:93:4c:71:b9:e4:21:be:27:6c:8b:82:7b:
         8a:8a:8e:ca:5e:b0:4e:ea:39:1a:cb:44:3e:b5:d5:5b:5d:a2:
         dc:d7:71:69:03:c5:3f:8d:e6:9c:c8:8c:75:d5:45:e2:1a:19:
         59:02:73:36:d9:c1:1f:70:c6:63:da:b8:4e:6a:b3:aa:ad:27:
         2b:04:d7:9f:36:ab:bc:d9:02:cb:97:99:d9:e1:bb:81:8c:c0:
         b8:fb:82:fb:52:22:3c:df:78:b5:fb:13:b8:5d:74:ee:02:5e:
         6b:8e:bd:48:a1:8c:2d:ca:66:76:12:08:bb:7b:60:ec:e5:cb:
         c7:27:ad:d6:41:c2:10:04:e7:12:3f:f3:cb:51:6a:6a:c2:6e:
         09:a2:55:1e:62:1a:c0:ad:19:38:bd:86:13:25:24:8b:25:2b:
         3d:3f:d5:cd:75:7b:04:1f:6a:47:dc:84:db:9d:dc:44:ce:e0:
         a4:48:a8:59:fd:12:3f:b9:d3:09:3d:cc:1f:10:6c:76:6a:0a:
         fa:ab:10:8c:fe:5f:09:45:65:b9:70:67:c6:28:49:90:8b:28:
         72:42:c0:89
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9ikxXZ72t1IcDDzXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM2NWU0NjAtMTYzMy00YjQ0LTlkYzUtYmUzMDNjOGIz
ZjA5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
NGM1ODJjNzEtMjhhYi00ZTk1LWI1NzctNDk0M2I4MjMzNjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/AT86Eanx65U7U1xFILjnuWzzriSq69JM8b
1S4kPQl/wnfZcF0PDbFPplowQFwX7esafw9jKXwdFhP4KpGd52qZ7g3zYhx1eDN1
jHgXD+bZG/icHRoaOV03Yy09EKdTWwgi3gwX7eFGDMulNe2hJzTkmGzYC2tyP70j
lfFmK4KCyoNfsYeZSc7zqfANdWat3Wq2mMoIW+Iwo+1rZuRgez/DmS1syuLxp671
zlh4IruERkZW4GfHrnhi8VAzSevlmh38KqVtLGwVo8ROzcTbyYpSf2sSX4jIBKH6
4LxQ/BkcA19YT0iad5pIRZlEM0j8uDrcrO4djvilkDWDv+em+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIiSUqbk7OxbfiD+/0ZZTZ+gmQjsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYzY1
ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMwM2M4YjNmMDkvNmZkYmVhMmEtOTA2Yy0z
MzIyLWJmZGQtNjI4ZWFlMTY1NDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWM2NWU0NjAtMTYzMy00YjQ0LTlk
YzUtYmUzMDNjOGIzZjA5L2FjNjVlNDYwLTE2MzMtNGI0NC05ZGM1LWJlMzAzYzhi
M2YwOS5jcmwwHwYDVR0jBBgwFoAUIKBv4EAvNx9ZAwDdlWdzMp9+zC0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYzY1ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMw
M2M4YjNmMDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3AAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIUNsM+OYVU6w+rq0bStL9WLZOPtwZmsD697ZznDAQTV2tFMZqgf
k0mlFJNMcbnkIb4nbIuCe4qKjspesE7qORrLRD611VtdotzXcWkDxT+N5pzIjHXV
ReIaGVkCczbZwR9wxmPauE5qs6qtJysE1582q7zZAsuXmdnhu4GMwLj7gvtSIjzf
eLX7E7hddO4CXmuOvUihjC3KZnYSCLt7YOzly8cnrdZBwhAE5xI/88tRamrCbgmi
VR5iGsCtGTi9hhMlJIslKz0/1c11ewQfakfchNud3ETO4KRIqFn9Ej+50wk9zB8Q
bHZqCvqrEIz+XwlFZblwZ8YoSZCLKHJCwIk=
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:25:34 2026 by rpki-client