Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/2f8eb5be-cd6c-32fb-9954-056856f36c60.roa
File:                     2f8eb5be-cd6c-32fb-9954-056856f36c60.roa (raw, json)
Hash identifier:          9tKmwf6FKIlzvZYy8RLmJFDLQq1MCzGxuih+9RgzSwk=
Subject key identifier:   72:B2:1E:03:7C:0B:FF:11:91:C9:8B:D8:21:00:F1:94:C9:77:A1:D5
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584E7634DEF66A25D01837BAF680
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/2f8eb5be-cd6c-32fb-9954-056856f36c60.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     399976
IP address blocks:        2602:80c:2040::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:de:f6:6a:25:d0:18:37:ba:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=421b518b-6cc0-4129-90c7-76f153a59793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:0c:fe:90:4b:4a:30:39:c1:60:b5:70:cd:
                    d4:c9:a8:9e:16:e8:ae:0e:f2:9b:f7:23:c2:55:00:
                    6e:06:15:86:38:af:01:8a:f5:93:00:40:73:be:46:
                    bc:30:37:74:5b:39:01:e5:75:65:5e:8f:3d:f5:57:
                    54:26:3c:fa:1a:2b:af:d6:92:7a:b8:a6:d5:3c:8b:
                    51:7d:a5:8b:3e:e5:f2:52:80:83:d6:e4:f2:62:14:
                    3b:f7:0c:54:2f:c1:08:64:5f:18:35:8f:25:1e:77:
                    e3:a8:bb:d5:04:ea:53:29:99:11:9c:86:73:09:a3:
                    33:51:ab:71:49:d0:4b:48:07:da:a5:32:54:53:b3:
                    8a:22:ba:46:d2:06:b2:95:0f:b7:fd:51:ff:9f:15:
                    a1:d2:48:47:09:01:dd:82:1c:9a:1a:c1:da:20:10:
                    d2:08:f8:a6:d4:05:11:66:52:d9:e9:8d:28:17:f4:
                    c9:d0:94:27:b9:8c:c9:93:04:83:5b:d7:1f:6b:1f:
                    02:40:6c:d6:37:b3:51:c0:7f:c6:6b:36:8f:7c:e1:
                    0c:d8:14:67:33:63:9f:5d:e7:60:ab:01:74:c1:a3:
                    a9:ab:63:4a:ab:de:2c:2e:ce:b4:52:3f:a1:46:71:
                    23:1f:2c:56:34:3b:37:36:89:b6:e0:4a:37:37:5f:
                    8c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B2:1E:03:7C:0B:FF:11:91:C9:8B:D8:21:00:F1:94:C9:77:A1:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/2f8eb5be-cd6c-32fb-9954-056856f36c60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:05:ff:97:48:f1:c5:e5:16:76:d8:af:1c:c2:66:8b:a3:46:
         0c:e5:bd:20:0c:cf:03:20:16:b3:d1:ec:4c:9d:e8:75:97:60:
         d3:7b:c7:d0:09:61:db:cf:ec:b8:0b:bc:3b:f8:33:e7:7c:df:
         ce:bf:31:4c:8e:c1:9c:4d:d6:b9:34:44:ed:ee:27:16:5b:96:
         f1:fa:fe:1c:8b:4b:be:bb:57:90:b0:a3:be:10:fa:08:99:9a:
         b4:95:aa:a6:7d:80:91:90:e9:2b:34:61:1a:dd:55:58:6f:f7:
         55:fb:6f:b7:4f:bb:64:c7:29:b3:e9:37:ca:aa:8b:ee:34:90:
         91:98:fc:d4:f9:05:87:e4:14:e0:59:2b:44:54:9c:48:39:62:
         a8:2f:9b:0c:9a:56:ac:cf:a4:e1:fc:7a:bb:27:5c:e1:eb:6b:
         6f:2f:ea:a7:c5:4c:f5:a1:11:86:31:b6:9d:b4:41:41:bc:21:
         43:f4:17:27:0b:da:de:54:f5:0f:12:43:ea:ff:dc:71:e3:73:
         38:e2:fd:8e:71:90:60:fc:96:6a:33:7c:83:ea:01:58:49:7a:
         60:83:f9:29:20:c2:a1:31:7b:30:69:a9:5b:d7:fc:26:86:be:
         43:47:b4:b8:40:b4:bf:3a:d6:6b:59:ee:5a:d5:06:14:6e:76:
         98:48:a6:8c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE52NN72aiXQGDe69oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk
NDIxYjUxOGItNmNjMC00MTI5LTkwYzctNzZmMTUzYTU5NzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv50M/pBLSjA5wWC1cM3UyaieFuiuDvKb9yPC
VQBuBhWGOK8BivWTAEBzvka8MDd0WzkB5XVlXo899VdUJjz6Giuv1pJ6uKbVPItR
faWLPuXyUoCD1uTyYhQ79wxUL8EIZF8YNY8lHnfjqLvVBOpTKZkRnIZzCaMzUatx
SdBLSAfapTJUU7OKIrpG0gaylQ+3/VH/nxWh0khHCQHdghyaGsHaIBDSCPim1AUR
ZlLZ6Y0oF/TJ0JQnuYzJkwSDW9cfax8CQGzWN7NRwH/GazaPfOEM2BRnM2OfXedg
qwF0waOpq2NKq94sLs60Uj+hRnEjHyxWNDs3Nom24Eo3N1+MpwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHKyHgN8C/8RkcmL2CEA8ZTJd6HVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvMmY4ZWI1YmUtY2Q2Yy0z
MmZiLTk5NTQtMDU2ODU2ZjM2YzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCBA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIoF/5dI8cXlFnbYrxzCZoujRgzlvSAMzwMgFrPR7Eyd6HWXYNN7
x9AJYdvP7LgLvDv4M+d8386/MUyOwZxN1rk0RO3uJxZblvH6/hyLS767V5Cwo74Q
+giZmrSVqqZ9gJGQ6Ss0YRrdVVhv91X7b7dPu2THKbPpN8qqi+40kJGY/NT5BYfk
FOBZK0RUnEg5YqgvmwyaVqzPpOH8ersnXOHra28v6qfFTPWhEYYxtp20QUG8IUP0
FycL2t5U9Q8SQ+r/3HHjczji/Y5xkGD8lmozfIPqAVhJemCD+SkgwqExezBpqVvX
/CaGvkNHtLhAtL861mtZ7lrVBhRudphIpow=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:02 2026 by rpki-client