Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/92f50bb4-500d-3973-8016-ce46dbe2eb06.roa
File:                     92f50bb4-500d-3973-8016-ce46dbe2eb06.roa (raw, json)
Hash identifier:          or3bBv2h0fBelZUABGB9Ein3+xh3t8XQADdOMBNTpSo=
Subject key identifier:   8D:9B:46:3F:D8:57:3F:D8:75:52:CF:A7:18:4E:47:C8:51:D2:D8:7D
Certificate issuer:       /CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf
Certificate serial:       010D0C9F4328584F20F7BDE54628CE06F37DBB00
Authority key identifier: 67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/92f50bb4-500d-3973-8016-ce46dbe2eb06.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     54070
IP address blocks:        2620:dc:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:bd:e5:46:28:ce:06:f3:7d:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=f2c0449f-6d9f-4b43-8d10-5d45a9074e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:25:2d:6b:cd:8c:23:29:1b:30:f3:15:36:
                    ec:3f:11:a2:a8:a7:f8:19:2f:54:ca:dd:eb:7e:80:
                    29:72:1c:d0:ea:32:a5:72:bd:71:da:fc:2a:95:c6:
                    f6:2b:d4:32:37:6e:95:e0:c8:f3:47:a2:23:ea:e4:
                    1c:24:9d:93:d4:56:1c:db:ef:6f:b6:9e:f6:20:83:
                    6d:51:4b:0f:ca:d3:49:6c:26:54:49:87:7d:74:47:
                    2c:44:ce:d1:b3:d0:78:ec:2a:e4:f7:4e:71:80:c3:
                    1f:f3:f4:c4:23:58:44:c5:ac:f2:fc:1b:f5:1b:27:
                    83:70:67:b1:ae:6e:7d:39:d5:f0:41:9c:a5:16:28:
                    07:0c:50:88:9e:59:36:fd:f3:ab:eb:de:5b:60:57:
                    7d:07:2c:39:8b:e1:00:75:81:88:5a:74:1e:24:78:
                    ae:6f:87:de:2a:d0:1c:be:23:6c:e3:ed:f4:7a:bc:
                    bd:f0:dd:af:3e:54:47:0a:dc:8b:20:98:df:a4:3b:
                    ed:fd:61:1a:a1:57:d1:d8:61:a0:c0:87:8d:22:8e:
                    5c:08:fb:d9:d7:64:44:bf:36:97:0f:fb:f9:ea:d8:
                    17:34:33:ae:e4:03:45:26:bd:28:69:7a:26:f1:75:
                    b5:47:de:d4:e6:a0:3d:59:35:7d:1d:70:ce:b8:f2:
                    aa:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9B:46:3F:D8:57:3F:D8:75:52:CF:A7:18:4E:47:C8:51:D2:D8:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/92f50bb4-500d-3973-8016-ce46dbe2eb06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.crl

            X509v3 Authority Key Identifier:
                keyid:67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:dc:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:29:f1:50:d6:85:cb:c0:b6:b1:1f:63:5a:a0:e6:3e:9d:79:
         95:35:e1:84:d0:25:78:d2:88:c2:b0:55:25:f7:83:13:fc:e1:
         60:39:e3:33:45:6c:6f:58:2f:17:be:32:ba:50:95:d5:5e:c0:
         e6:fd:a0:2c:87:1b:84:42:8e:3f:39:f4:29:d6:81:6e:c1:f1:
         99:32:16:6d:19:76:ff:6d:50:ca:05:54:96:fd:54:27:c2:21:
         47:f7:ff:56:8b:f5:65:86:8a:68:1d:4d:16:24:60:d3:6d:a2:
         f2:31:c1:95:e2:fb:6f:d5:95:f2:1e:24:48:76:49:e9:ea:ea:
         2d:5b:5f:38:9c:52:4d:77:b1:ce:21:73:0f:96:47:69:3b:a4:
         08:88:e8:12:5c:59:33:3e:81:5e:c0:c9:c4:93:0d:20:c7:51:
         8d:20:e2:1c:1f:b7:0f:25:fd:02:66:54:56:39:3a:e9:0c:d6:
         5f:4b:16:89:a4:2a:07:fb:e7:2d:bb:0b:a8:f5:b2:a5:da:3e:
         04:01:60:65:ae:77:0e:42:96:d1:bb:eb:fd:ee:be:eb:3b:27:
         14:20:ff:c1:c2:d3:61:b8:1d:85:b7:8b:31:3d:de:63:72:f0:
         f0:90:44:8d:f7:f1:79:12:49:40:10:2a:93:ed:31:ff:18:ec:
         5f:3a:36:36
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8g973lRijOBvN9uwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQ2MDhjYjgtYTFkMC00MGFhLThiMDUtYTU5NzE1N2Ji
MWJmMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk
ZjJjMDQ0OWYtNmQ5Zi00YjQzLThkMTAtNWQ0NWE5MDc0ZThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj48lLWvNjCMpGzDzFTbsPxGiqKf4GS9Uyt3r
foApchzQ6jKlcr1x2vwqlcb2K9QyN26V4MjzR6Ij6uQcJJ2T1FYc2+9vtp72IINt
UUsPytNJbCZUSYd9dEcsRM7Rs9B47Crk905xgMMf8/TEI1hExazy/Bv1GyeDcGex
rm59OdXwQZylFigHDFCInlk2/fOr695bYFd9Byw5i+EAdYGIWnQeJHiub4feKtAc
viNs4+30ery98N2vPlRHCtyLIJjfpDvt/WEaoVfR2GGgwIeNIo5cCPvZ12REvzaX
D/v56tgXNDOu5ANFJr0oaXom8XW1R97U5qA9WTV9HXDOuPKqdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI2bRj/YVz/YdVLPpxhOR8hR0th9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDYw
OGNiOC1hMWQwLTQwYWEtOGIwNS1hNTk3MTU3YmIxYmYvOTJmNTBiYjQtNTAwZC0z
OTczLTgwMTYtY2U0NmRiZTJlYjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQ2MDhjYjgtYTFkMC00MGFhLThi
MDUtYTU5NzE1N2JiMWJmL2M0NjA4Y2I4LWExZDAtNDBhYS04YjA1LWE1OTcxNTdi
YjFiZi5jcmwwHwYDVR0jBBgwFoAUZyrj657tRjzudv/uwruG7Cqm4tMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDYwOGNiOC1hMWQwLTQwYWEtOGIwNS1hNTk3
MTU3YmIxYmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA3IAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAQp8VDWhcvAtrEfY1qg5j6deZU14YTQJXjSiMKwVSX3gxP84WA5
4zNFbG9YLxe+MrpQldVewOb9oCyHG4RCjj859CnWgW7B8ZkyFm0Zdv9tUMoFVJb9
VCfCIUf3/1aL9WWGimgdTRYkYNNtovIxwZXi+2/VlfIeJEh2Senq6i1bXzicUk13
sc4hcw+WR2k7pAiI6BJcWTM+gV7AycSTDSDHUY0g4hwftw8l/QJmVFY5OukM1l9L
FomkKgf75y27C6j1sqXaPgQBYGWudw5CltG76/3uvus7JxQg/8HC02G4HYW3izE9
3mNy8PCQRI338XkSSUAQKpPtMf8Y7F86NjY=
-----END CERTIFICATE-----
Generated at Wed Sep 30 17:57:59 2026 by rpki-client