Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/dbdd05d5-dfda-3f90-874d-bc45c93e2f31.roa
File:                     dbdd05d5-dfda-3f90-874d-bc45c93e2f31.roa (raw, json)
Hash identifier:          pFdyNCRPWE3dwz7BVulPawYQY+j2iXiZqz3kUWnr1zY=
Subject key identifier:   54:4C:51:28:80:82:DF:E8:50:79:A8:BE:20:F1:F4:41:2E:B2:26:70
Certificate issuer:       /CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
Certificate serial:       010D0C9F4328584F46A7F2A97C451F10D7B2E200
Authority key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/dbdd05d5-dfda-3f90-874d-bc45c93e2f31.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     21659
IP address blocks:        2602:fdd2:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:f2:a9:7c:45:1f:10:d7:b2:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=91be2878-aa9e-4b70-94bc-4617609de999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9f:df:80:42:b3:c7:19:7c:03:0e:4d:94:41:
                    43:34:2f:51:ba:6b:d0:56:59:83:50:17:3f:03:b3:
                    0e:4d:49:32:cd:da:b9:1b:2a:65:7a:ad:ca:1c:3a:
                    80:7f:4e:0f:2e:24:8f:5b:11:6a:d2:98:e3:97:da:
                    13:a6:9d:88:0d:03:90:50:73:a9:5c:00:73:f2:bc:
                    ad:55:1c:0f:49:90:dc:40:f6:80:1b:2e:85:87:a3:
                    33:1c:ee:86:1a:2c:5b:d3:44:cf:8f:22:f1:b5:fe:
                    11:5b:05:bb:33:8b:9a:8a:2d:af:8b:c4:8b:87:ec:
                    0f:be:02:77:53:07:75:2f:da:5c:89:6e:f2:da:a4:
                    06:c2:b6:5a:cf:21:e2:c3:0d:e8:16:28:d5:ec:c0:
                    41:d7:51:6d:c5:40:d5:4b:f8:5d:8d:7e:7e:20:0b:
                    84:a6:7c:aa:35:65:92:11:97:e0:d1:12:58:ad:8b:
                    c4:18:21:4b:5c:62:5e:67:64:49:9e:89:1f:2a:c7:
                    91:ef:1e:35:08:95:ae:77:26:fe:61:7c:96:32:08:
                    55:85:cf:1e:af:0b:f3:fe:0a:99:e8:5c:24:36:b3:
                    a5:2e:86:ce:97:de:b1:54:3d:3a:50:97:da:70:c1:
                    84:42:ea:49:40:3f:ee:79:17:40:08:15:dd:a2:cb:
                    01:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4C:51:28:80:82:DF:E8:50:79:A8:BE:20:F1:F4:41:2E:B2:26:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/dbdd05d5-dfda-3f90-874d-bc45c93e2f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl

            X509v3 Authority Key Identifier:
                keyid:16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdd2:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:54:75:1a:19:c9:00:f9:79:45:c5:4d:7c:c3:41:b1:51:00:
         db:7b:b2:97:fe:b4:66:bc:85:84:27:5f:06:52:3a:d1:59:50:
         3b:3a:87:e6:b2:d2:ca:8d:bd:e2:6f:6e:89:e6:0a:3c:09:4b:
         5f:12:ea:21:7e:10:e6:93:8f:a7:52:8c:ce:6a:54:56:4a:e0:
         2e:2e:f6:3f:7d:d9:c1:13:89:80:c2:05:47:51:0b:ae:cd:49:
         56:4a:66:bd:c5:cf:ca:e8:d7:17:f2:ca:25:c0:8c:3e:36:a3:
         a2:a7:15:a8:24:84:b1:17:49:84:d4:c3:12:69:b9:11:58:b7:
         70:76:1b:ba:ca:14:d9:68:ba:30:e7:4b:86:24:34:76:03:cd:
         f6:a1:b4:71:b5:dc:96:f2:c1:d2:e4:14:91:2f:ec:c3:eb:13:
         22:37:33:b1:50:f0:93:15:32:82:8d:09:b2:a6:c7:16:dc:37:
         3f:0d:4c:e6:bc:17:cc:d7:11:08:1d:f1:72:6b:e1:e5:75:38:
         27:d0:3d:85:41:3e:ec:aa:fa:ac:e6:c9:cf:e3:d0:ca:69:88:
         74:71:2c:4a:02:84:f3:3c:b1:03:69:a1:47:33:52:04:da:ca:
         5f:5e:e5:c5:9d:aa:ae:da:6c:84:05:7a:50:30:e4:9d:06:95:
         50:10:e9:98
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Gp/KpfEUfENey4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1OWUtMjdkYTU4Mzlk
ZGI0MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk
OTFiZTI4NzgtYWE5ZS00YjcwLTk0YmMtNDYxNzYwOWRlOTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5/fgEKzxxl8Aw5NlEFDNC9RumvQVlmDUBc/
A7MOTUkyzdq5Gypleq3KHDqAf04PLiSPWxFq0pjjl9oTpp2IDQOQUHOpXABz8ryt
VRwPSZDcQPaAGy6Fh6MzHO6GGixb00TPjyLxtf4RWwW7M4uaii2vi8SLh+wPvgJ3
Uwd1L9pciW7y2qQGwrZazyHiww3oFijV7MBB11FtxUDVS/hdjX5+IAuEpnyqNWWS
EZfg0RJYrYvEGCFLXGJeZ2RJnokfKseR7x41CJWudyb+YXyWMghVhc8erwvz/gqZ
6FwkNrOlLobOl96xVD06UJfacMGEQupJQD/ueRdACBXdossBRwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFRMUSiAgt/oUHmoviDx9EEusiZwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMzVi
ZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2RhNTgzOWRkYjQvZGJkZDA1ZDUtZGZkYS0z
ZjkwLTg3NGQtYmM0NWM5M2UyZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1
OWUtMjdkYTU4MzlkZGI0L2YzNWJlNWYwLWQ0NTItNGNkOC04NTllLTI3ZGE1ODM5
ZGRiNC5jcmwwHwYDVR0jBBgwFoAUFtOG+Xk7XQ2c/Q/ztW8EbY13WNcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMzViZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2Rh
NTgzOWRkYjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgL90ggw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFFR1GhnJAPl5RcVNfMNBsVEA23uyl/60ZryFhCdfBlI60VlQOzqH
5rLSyo294m9uieYKPAlLXxLqIX4Q5pOPp1KMzmpUVkrgLi72P33ZwROJgMIFR1EL
rs1JVkpmvcXPyujXF/LKJcCMPjajoqcVqCSEsRdJhNTDEmm5EVi3cHYbusoU2Wi6
MOdLhiQ0dgPN9qG0cbXclvLB0uQUkS/sw+sTIjczsVDwkxUygo0JsqbHFtw3Pw1M
5rwXzNcRCB3xcmvh5XU4J9A9hUE+7Kr6rObJz+PQymmIdHEsSgKE8zyxA2mhRzNS
BNrKX17lxZ2qrtpshAV6UDDknQaVUBDpmA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:48:22 2026 by rpki-client