Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/318d5227-8f7b-38b0-9244-4a56b8343271.roa
File:                     318d5227-8f7b-38b0-9244-4a56b8343271.roa (raw, json)
Hash identifier:          ubVkwJE72GknPoTF2lF5LYstuy/qdaYE6ZwPfUei5vM=
Subject key identifier:   CC:18:2B:B5:C2:89:22:8A:73:4A:FF:55:45:97:06:43:7A:C6:4C:7E
Certificate issuer:       /CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
Certificate serial:       010D0C9F4328584E7FFA2F5C18D55D4FFE436580
Authority key identifier: 4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/318d5227-8f7b-38b0-9244-4a56b8343271.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     63452
IP address blocks:        2602:ff50:300::/40 maxlen: 40
                          2602:ff50:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:2f:5c:18:d5:5d:4f:fe:43:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=cfa66fc3-e21a-4825-88f5-7f6384430d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:b7:cb:11:b9:76:7b:34:46:f9:2a:b7:4c:
                    bb:a9:9a:fd:fe:cb:7b:34:38:03:03:54:07:91:e2:
                    43:4e:7a:35:1d:63:3f:c3:9a:46:bb:09:89:8a:78:
                    ce:92:1e:d1:ae:7a:e1:eb:fe:af:cc:93:c0:71:1f:
                    ef:03:d7:e4:39:44:27:37:89:38:a7:04:87:ee:be:
                    ee:08:68:c5:cf:99:5d:40:36:61:8d:18:08:be:3e:
                    a5:23:7e:17:26:a2:c9:57:c9:ff:58:53:a7:2f:4d:
                    75:33:30:07:e0:5f:4f:0e:d1:3f:eb:f1:2d:f6:9f:
                    92:91:e6:86:1a:cf:c7:ca:aa:19:56:7c:03:ce:76:
                    1e:d7:22:75:d3:08:06:2e:62:ee:53:7f:8d:e2:f3:
                    24:ae:fb:68:a5:bc:da:fa:d5:42:84:b3:62:0b:34:
                    07:a6:89:be:2c:b5:02:b3:9a:41:4d:22:7e:44:cd:
                    e0:60:c6:ac:a8:62:de:a1:bc:0d:a6:89:8d:42:29:
                    c2:7a:8d:ca:e4:85:9b:44:c4:d3:08:83:c5:82:c7:
                    67:e4:47:0d:a5:7c:e1:40:8f:3b:d1:aa:19:f3:74:
                    34:7f:79:c1:dc:0c:c7:bd:14:70:62:e3:18:79:a0:
                    e8:62:98:cb:93:b7:9e:5f:35:9e:84:a2:9c:f2:0b:
                    c0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:18:2B:B5:C2:89:22:8A:73:4A:FF:55:45:97:06:43:7A:C6:4C:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/318d5227-8f7b-38b0-9244-4a56b8343271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl

            X509v3 Authority Key Identifier:
                keyid:4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff50:300::-2602:ff50:4ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:4e:fd:99:67:2d:b4:9d:bf:66:6c:d1:83:5e:22:70:64:65:
         91:cf:83:dd:21:7d:85:e3:76:23:83:fc:7f:89:34:73:f6:30:
         36:41:3e:a3:3f:34:0f:c6:8f:8e:54:db:36:b2:60:4d:d9:ac:
         7c:37:4f:86:eb:c2:92:db:72:33:06:9f:35:1c:99:db:5a:ac:
         4c:08:af:a6:e2:04:3e:50:a1:df:f4:de:03:34:e2:92:16:8f:
         9f:74:4b:31:1c:26:4e:95:08:eb:c1:6f:29:08:fa:d4:d1:82:
         4c:9f:4b:2b:98:4a:0f:3a:75:81:ce:4e:29:df:26:40:9b:20:
         11:cb:31:bf:54:5b:86:70:af:44:05:c1:6c:b3:59:96:67:85:
         45:34:a7:88:36:a3:c0:69:a2:d5:82:a5:60:35:3b:56:6a:45:
         93:99:51:6f:53:a2:30:28:96:74:8f:9f:ed:6a:d7:08:cf:a6:
         fe:e9:58:da:7b:4f:69:ec:b6:83:86:f0:d4:9b:e5:b5:35:4a:
         69:e0:45:e1:ba:bd:f5:7a:1b:34:6f:d5:b0:0f:56:cb:da:80:
         0e:da:c2:05:b0:cf:a3:f2:4b:3f:c9:ef:0d:4e:80:c3:b1:4b:
         d6:4c:72:1f:7a:a7:f4:11:7d:1e:2b:10:80:3d:11:c4:55:55:
         9a:de:df:b3
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE5/+i9cGNVdT/5DZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VmOGQzMjAtYzJiNC00NzE4LWJlOWMtZWMzZjgwMWMw
ODE4MB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk
Y2ZhNjZmYzMtZTIxYS00ODI1LTg4ZjUtN2Y2Mzg0NDMwZDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTS3yxG5dns0Rvkqt0y7qZr9/st7NDgDA1QH
keJDTno1HWM/w5pGuwmJinjOkh7Rrnrh6/6vzJPAcR/vA9fkOUQnN4k4pwSH7r7u
CGjFz5ldQDZhjRgIvj6lI34XJqLJV8n/WFOnL011MzAH4F9PDtE/6/Et9p+SkeaG
Gs/HyqoZVnwDznYe1yJ10wgGLmLuU3+N4vMkrvtopbza+tVChLNiCzQHpom+LLUC
s5pBTSJ+RM3gYMasqGLeobwNpomNQinCeo3K5IWbRMTTCIPFgsdn5EcNpXzhQI87
0aoZ83Q0f3nB3AzHvRRwYuMYeaDoYpjLk7eeXzWehKKc8gvAcwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFMwYK7XCiSKKc0r/VUWXBkN6xkx+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZWY4
ZDMyMC1jMmI0LTQ3MTgtYmU5Yy1lYzNmODAxYzA4MTgvMzE4ZDUyMjctOGY3Yi0z
OGIwLTkyNDQtNGE1NmI4MzQzMjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2VmOGQzMjAtYzJiNC00NzE4LWJl
OWMtZWMzZjgwMWMwODE4L2NlZjhkMzIwLWMyYjQtNDcxOC1iZTljLWVjM2Y4MDFj
MDgxOC5jcmwwHwYDVR0jBBgwFoAUTiXbhrEvEqYZ1KQB1V/ykpZSQ+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZWY4ZDMyMC1jMmI0LTQ3MTgtYmU5Yy1lYzNm
ODAxYzA4MTguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgAmAv9Q
AwMGACYC/1AEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACRO/ZlnLbSdv2Zs0YNeInBkZZHPg90hfYXjdiOD
/H+JNHP2MDZBPqM/NA/Gj45U2zayYE3ZrHw3T4brwpLbcjMGnzUcmdtarEwIr6bi
BD5Qod/03gM04pIWj590SzEcJk6VCOvBbykI+tTRgkyfSyuYSg86dYHOTinfJkCb
IBHLMb9UW4Zwr0QFwWyzWZZnhUU0p4g2o8BpotWCpWA1O1ZqRZOZUW9TojAolnSP
n+1q1wjPpv7pWNp7T2nstoOG8NSb5bU1SmngReG6vfV6GzRv1bAPVsvagA7awgWw
z6PySz/J7w1OgMOxS9ZMch96p/QRfR4rEIA9EcRVVZre37M=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:43:07 2026 by rpki-client