Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4fe60d86-9c76-381a-87c9-295d0d16c2fe.roa
File:                     4fe60d86-9c76-381a-87c9-295d0d16c2fe.roa (raw, json)
Hash identifier:          yatnAutUBxwGHMXwByDBW6QHfojdAaWqJ91cTZafb10=
Subject key identifier:   E8:E2:59:6A:52:46:72:F8:3E:78:BE:4B:B3:CD:44:AE:13:AF:7F:7B
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584E885A44809096EB3A7B8BC3E8
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4fe60d86-9c76-381a-87c9-295d0d16c2fe.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     20253
IP address blocks:        2606:bc40:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:44:80:90:96:eb:3a:7b:8b:c3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=0a59c1ff-7f02-4dfa-b69a-5ff65f129836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fd:af:1f:03:a8:3d:0b:86:a7:9f:b8:6e:e4:
                    88:d7:72:c5:7e:d7:da:7c:fd:ee:b8:da:c4:3f:81:
                    d8:44:aa:f9:e8:13:82:22:8f:0b:77:03:b4:8a:3c:
                    ad:3b:e2:48:d8:d5:d1:60:d8:0c:f1:8c:50:e3:02:
                    af:c2:6a:6c:e9:29:9e:0a:aa:0a:eb:fb:88:8c:d1:
                    bc:63:88:a2:f2:f5:d9:c4:40:f7:9a:1e:3f:69:69:
                    ce:69:24:bc:6f:cf:3b:f2:10:fe:e8:0a:1e:1d:73:
                    8c:c5:d4:f2:78:29:da:15:40:48:ac:48:96:77:53:
                    96:5d:7e:56:dc:1b:e5:fd:60:27:32:10:a1:fe:db:
                    74:ce:1e:7a:7a:45:bd:40:d3:eb:b8:8d:bc:d1:c1:
                    02:12:a3:03:ad:4c:10:03:0f:02:37:0f:09:80:db:
                    82:01:94:37:e0:77:61:7b:d5:2e:8e:bb:ab:30:7e:
                    77:78:d5:62:6c:75:5b:a8:cd:80:fd:11:c3:f9:ea:
                    35:f2:d8:29:14:64:01:de:ab:36:f3:c1:89:f4:f6:
                    13:01:07:28:db:1a:71:d5:42:08:74:53:80:cf:39:
                    cc:e0:4f:19:b9:86:38:54:45:0c:58:29:bf:dd:fe:
                    c2:b3:f1:6a:3f:3e:82:99:aa:19:da:8f:31:fc:92:
                    55:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E2:59:6A:52:46:72:F8:3E:78:BE:4B:B3:CD:44:AE:13:AF:7F:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4fe60d86-9c76-381a-87c9-295d0d16c2fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:85:0d:44:01:57:49:ef:b0:42:60:c7:04:94:58:fa:b9:89:
         98:01:f5:a9:f5:1a:84:4a:d7:1e:de:b5:93:c6:de:69:46:8d:
         47:ff:15:23:f8:92:94:43:81:4a:b1:ee:44:ba:89:b7:cf:54:
         3c:18:fc:ca:21:52:75:27:62:49:a1:ff:86:59:db:15:55:dd:
         3f:09:8f:9e:59:43:59:39:28:76:9b:8c:5f:03:f9:45:c7:44:
         bb:61:9e:aa:f2:30:f9:28:f0:e1:4f:12:ec:b2:1f:b1:69:c2:
         eb:11:07:4b:17:82:2e:71:a4:17:3d:ff:44:e0:87:ac:4e:31:
         37:8a:ec:d6:34:be:3f:66:c5:f2:93:61:26:15:12:26:ed:4b:
         a2:50:c6:4f:61:86:4c:e0:e1:ef:1c:b9:d1:26:e7:1b:ae:e5:
         72:8f:83:84:10:f6:43:62:f6:4e:84:c3:57:4b:2f:6a:51:96:
         a0:08:e8:4d:3c:01:49:44:29:e4:53:d0:a0:34:7e:08:ee:f2:
         0c:8c:d7:55:67:dd:b9:18:ce:51:33:d5:a5:a9:d4:a7:e0:a5:
         3d:e1:c8:a9:5e:8e:ec:9b:f5:76:83:34:ee:7b:de:b8:23:d1:
         01:7d:2f:af:58:21:f3:4c:d1:96:25:82:56:0c:01:02:9e:02:
         0a:da:c7:22
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6IWkSAkJbrOnuLw+gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
MGE1OWMxZmYtN2YwMi00ZGZhLWI2OWEtNWZmNjVmMTI5ODM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/2vHwOoPQuGp5+4buSI13LFftfafP3uuNrE
P4HYRKr56BOCIo8LdwO0ijytO+JI2NXRYNgM8YxQ4wKvwmps6SmeCqoK6/uIjNG8
Y4ii8vXZxED3mh4/aWnOaSS8b8878hD+6AoeHXOMxdTyeCnaFUBIrEiWd1OWXX5W
3Bvl/WAnMhCh/tt0zh56ekW9QNPruI280cECEqMDrUwQAw8CNw8JgNuCAZQ34Hdh
e9UujrurMH53eNVibHVbqM2A/RHD+eo18tgpFGQB3qs288GJ9PYTAQco2xpx1UII
dFOAzznM4E8ZuYY4VEUMWCm/3f7Cs/FqPz6CmaoZ2o8x/JJV7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOjiWWpSRnL4Pni+S7PNRK4Tr397MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvNGZlNjBkODYtOWM3Ni0z
ODFhLTg3YzktMjk1ZDBkMTZjMmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAc
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALqFDUQBV0nvsEJgxwSUWPq5iZgB9an1GoRK1x7etZPG3mlGjUf/
FSP4kpRDgUqx7kS6ibfPVDwY/MohUnUnYkmh/4ZZ2xVV3T8Jj55ZQ1k5KHabjF8D
+UXHRLthnqryMPko8OFPEuyyH7FpwusRB0sXgi5xpBc9/0Tgh6xOMTeK7NY0vj9m
xfKTYSYVEibtS6JQxk9hhkzg4e8cudEm5xuu5XKPg4QQ9kNi9k6Ew1dLL2pRlqAI
6E08AUlEKeRT0KA0fgju8gyM11Vn3bkYzlEz1aWp1KfgpT3hyKlejuyb9XaDNO57
3rgj0QF9L69YIfNM0ZYlglYMAQKeAgraxyI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:28 2026 by rpki-client