Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/d18ee015-34f3-3082-a22b-cf0515f687de.roa
File:                     d18ee015-34f3-3082-a22b-cf0515f687de.roa (raw, json)
Hash identifier:          gevYZ4NLrPg/yzoD9CpWjyellcHjcd8W/j9C/AVAzD8=
Subject key identifier:   53:9C:C0:AA:E5:DF:61:9D:4F:5D:EF:56:92:B5:37:8B:00:BF:CF:DD
Certificate issuer:       /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Certificate serial:       010D0C9F4328584EFCACEB9CAD817613D588DC20
Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/d18ee015-34f3-3082-a22b-cf0515f687de.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     33164
IP address blocks:        2602:ff9d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:eb:9c:ad:81:76:13:d5:88:dc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=866da981-f0eb-40e5-a4f6-da0729e071f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a0:73:01:d4:ac:44:cf:4f:7d:aa:c4:c8:05:
                    20:d5:a2:ea:f3:d0:98:26:0e:60:33:85:0b:30:54:
                    a7:35:4b:e7:2d:6b:4a:48:56:63:11:01:c5:34:12:
                    0d:46:63:fc:58:cc:50:60:2f:2e:3b:eb:7e:12:b0:
                    ea:23:21:c8:c3:0b:39:34:cc:fc:f5:f4:03:b6:54:
                    3e:c6:56:de:a3:28:3c:da:5b:49:e8:c4:0d:76:21:
                    bd:f6:8a:f6:9e:52:ef:09:98:20:e3:cd:2b:86:f2:
                    96:f7:5a:03:1a:40:bf:1b:8c:7a:e9:ce:d0:21:c9:
                    21:f4:ed:48:d7:9e:12:44:e5:21:5f:39:1d:3f:bf:
                    25:2b:a7:ca:d0:0f:ff:98:fd:5e:19:35:2e:50:60:
                    63:90:67:4f:8a:be:ce:9f:a9:59:f3:2f:f1:a8:82:
                    b6:c9:7f:b2:22:8c:8c:da:6c:c0:a9:e4:cd:d4:fe:
                    e1:5f:c3:c6:c9:79:51:72:79:0b:10:74:72:2a:c2:
                    73:e4:ea:99:3e:3e:41:4a:03:21:4f:9f:38:91:a6:
                    31:e5:49:40:69:dd:da:b7:67:d2:24:e5:5b:60:e8:
                    c9:00:bc:45:66:aa:42:8d:84:a6:5e:48:04:54:b4:
                    7c:45:46:30:bf:f2:db:0d:90:16:50:58:8f:64:fa:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9C:C0:AA:E5:DF:61:9D:4F:5D:EF:56:92:B5:37:8B:00:BF:CF:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/d18ee015-34f3-3082-a22b-cf0515f687de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl

            X509v3 Authority Key Identifier:
                keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff9d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a3:9b:11:6a:87:de:0b:63:47:0b:99:a4:74:e8:eb:68:43:
         70:9a:ea:01:b1:1f:b4:84:18:44:37:f1:ec:61:61:e7:d7:1d:
         3f:c4:70:e0:27:50:fe:ba:36:aa:c6:6a:14:29:58:a5:c8:a8:
         89:9b:d4:cb:64:8e:5d:3b:46:99:65:75:c1:16:cc:0a:d0:8f:
         f2:24:4e:d1:fe:9d:5c:7d:11:e8:51:52:bd:ce:89:8a:b8:11:
         f9:9b:e9:3a:4d:ad:eb:e9:bb:08:dd:c2:98:70:3f:81:77:75:
         13:5c:8a:55:77:e8:ee:50:7a:bb:13:f6:bf:e9:45:cb:15:fe:
         b3:5f:c3:a3:91:93:b6:13:03:76:f8:21:ac:2a:97:16:8e:64:
         0c:e7:96:b5:a9:7e:a5:a5:bd:83:a6:6f:dc:c2:bb:e7:ae:1e:
         e7:d2:cd:25:1b:33:54:73:8a:7a:00:08:bc:25:37:ef:1b:d2:
         34:b9:e4:d3:eb:ef:01:3d:87:af:97:7f:83:83:fa:33:de:c0:
         8c:fc:2c:ab:24:17:04:e5:47:94:27:ae:a0:ea:9e:82:9c:97:
         ce:4d:9f:10:3b:a7:cb:83:5b:c6:e7:e8:8f:72:6f:35:c9:96:
         3b:7c:a8:78:29:b9:02:dd:5a:50:6c:6f:e6:ec:48:17:5c:9e:
         7d:36:c0:25
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE78rOucrYF2E9WI3CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQyZWY5OWMtYzAwYy00MzFiLTg1MTktY2FiYjlkMmE0
ZDUwMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
ODY2ZGE5ODEtZjBlYi00MGU1LWE0ZjYtZGEwNzI5ZTA3MWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaBzAdSsRM9PfarEyAUg1aLq89CYJg5gM4UL
MFSnNUvnLWtKSFZjEQHFNBINRmP8WMxQYC8uO+t+ErDqIyHIwws5NMz89fQDtlQ+
xlbeoyg82ltJ6MQNdiG99or2nlLvCZgg480rhvKW91oDGkC/G4x66c7QIckh9O1I
154SROUhXzkdP78lK6fK0A//mP1eGTUuUGBjkGdPir7On6lZ8y/xqIK2yX+yIoyM
2mzAqeTN1P7hX8PGyXlRcnkLEHRyKsJz5OqZPj5BSgMhT584kaYx5UlAad3at2fS
JOVbYOjJALxFZqpCjYSmXkgEVLR8RUYwv/LbDZAWUFiPZPq/rQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFOcwKrl32GdT13vVpK1N4sAv8/dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDJl
Zjk5Yy1jMDBjLTQzMWItODUxOS1jYWJiOWQyYTRkNTAvZDE4ZWUwMTUtMzRmMy0z
MDgyLWEyMmItY2YwNTE1ZjY4N2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQyZWY5OWMtYzAwYy00MzFiLTg1
MTktY2FiYjlkMmE0ZDUwL2ZkMmVmOTljLWMwMGMtNDMxYi04NTE5LWNhYmI5ZDJh
NGQ1MC5jcmwwHwYDVR0jBBgwFoAUOQF+i31ACX9kDx3DLqvfnnmLytUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDJlZjk5Yy1jMDBjLTQzMWItODUxOS1jYWJi
OWQyYTRkNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/nQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUqObEWqH3gtjRwuZpHTo62hDcJrqAbEftIQYRDfx7GFh59cdP8Rw
4CdQ/ro2qsZqFClYpcioiZvUy2SOXTtGmWV1wRbMCtCP8iRO0f6dXH0R6FFSvc6J
irgR+ZvpOk2t6+m7CN3CmHA/gXd1E1yKVXfo7lB6uxP2v+lFyxX+s1/Do5GTthMD
dvghrCqXFo5kDOeWtal+paW9g6Zv3MK7564e59LNJRszVHOKegAIvCU37xvSNLnk
0+vvAT2Hr5d/g4P6M97AjPwsqyQXBOVHlCeuoOqegpyXzk2fEDuny4Nbxufoj3Jv
NcmWO3yoeCm5At1aUGxv5uxIF1yefTbAJQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:25:20 2026 by rpki-client