Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/10517acb-f135-3f1a-a552-6f002949958c.roa
File:                     10517acb-f135-3f1a-a552-6f002949958c.roa (raw, json)
Hash identifier:          4BSV1HhIwZ1P9qJqOfEnhuo3Y/6/Wrx4jejNCW0ICdw=
Subject key identifier:   DD:1D:75:6E:43:91:90:7C:6E:0C:E6:E0:8E:2B:02:B4:A7:60:78:8E
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584F06722F8DB84E00D7856A36C0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/10517acb-f135-3f1a-a552-6f002949958c.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     398549
IP address blocks:        2605:dd40:8118::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:2f:8d:b8:4e:00:d7:85:6a:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=1412d73d-a1d8-453c-9d28-1a9de3da5598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7e:11:26:c5:2a:a4:9c:b9:0c:e0:d5:6d:e8:
                    97:70:09:ad:dc:20:51:93:cc:f6:eb:60:5d:fe:f0:
                    c8:32:2f:5a:2c:d5:ce:80:f0:79:6a:4b:0f:4e:d3:
                    4f:af:fe:0e:19:2b:c9:c1:c1:f2:ad:43:85:ed:3c:
                    c6:b1:02:b2:ca:ff:e2:e3:46:64:a4:dc:20:b8:94:
                    1d:31:09:43:57:88:b0:fd:69:29:8d:5f:35:fd:95:
                    4f:39:c7:f8:49:45:ad:d9:70:5f:08:ee:b7:23:56:
                    89:e7:a6:a0:8e:00:39:5b:56:f6:a7:66:32:86:01:
                    ab:08:36:e9:19:08:93:6a:56:59:01:46:11:0c:37:
                    d0:a2:e9:36:7d:bf:77:db:b8:80:b5:60:02:63:01:
                    d6:f1:ff:e4:53:71:f0:1d:ee:72:8d:86:4b:5a:42:
                    9a:e0:6c:90:9c:ab:87:55:3e:85:87:1e:3e:f2:09:
                    ed:ca:f9:55:74:f2:e5:06:fb:41:0a:82:ca:53:c4:
                    9d:34:28:b9:5c:26:47:3f:03:d0:9c:df:e4:62:7e:
                    91:45:c4:92:74:2c:20:e7:99:23:7b:4b:d4:ee:ec:
                    89:3d:45:46:92:8d:42:bc:66:89:e2:f3:2c:22:b8:
                    e7:b2:23:c9:9e:76:fb:e8:58:7d:b6:39:d2:97:38:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1D:75:6E:43:91:90:7C:6E:0C:E6:E0:8E:2B:02:B4:A7:60:78:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/10517acb-f135-3f1a-a552-6f002949958c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8118::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:fd:ba:bf:4e:c9:f9:21:6b:9d:40:74:db:7d:6d:3a:bb:7e:
         84:13:21:fa:63:62:53:bd:80:d0:62:84:07:00:55:7f:94:2a:
         8c:ec:35:cf:3c:66:07:69:83:64:0a:e3:3f:8a:ed:60:77:6f:
         98:1f:eb:3c:17:2e:3e:ad:8f:ac:6d:88:43:2f:e9:b0:09:19:
         c3:60:4a:28:cf:07:00:8e:ba:7b:06:c9:08:54:5b:d3:46:be:
         b1:1f:dc:3b:2f:54:e8:dc:25:be:5f:63:d9:8a:f3:4b:41:ce:
         78:a4:5f:43:64:7d:2c:bd:64:44:7a:cd:7b:1a:13:56:4c:45:
         5a:d5:d4:82:b7:b3:bb:4d:22:7b:80:15:d2:99:82:ef:ad:28:
         21:10:35:60:db:d3:c1:35:05:f9:3a:15:48:a0:c3:f3:a4:ba:
         b1:b5:3d:df:a8:88:01:e4:9b:ce:e6:d1:01:c0:d9:e0:85:31:
         bd:4b:7d:ee:4a:8e:68:39:11:8c:5a:10:f4:d6:65:e0:69:f5:
         f5:b2:16:34:8d:fe:1d:8f:00:59:80:4f:cf:55:0b:05:91:dc:
         b8:df:5c:a9:a8:3a:37:4f:87:81:5a:22:45:f0:26:e3:bf:f3:
         7b:c0:c4:1f:d1:60:7b:8e:43:5b:ff:22:6b:25:02:a3:51:2c:
         0f:eb:f6:4d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Gci+NuE4A14VqNsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4
OTc3MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
MTQxMmQ3M2QtYTFkOC00NTNjLTlkMjgtMWE5ZGUzZGE1NTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA834RJsUqpJy5DODVbeiXcAmt3CBRk8z262Bd
/vDIMi9aLNXOgPB5aksPTtNPr/4OGSvJwcHyrUOF7TzGsQKyyv/i40ZkpNwguJQd
MQlDV4iw/WkpjV81/ZVPOcf4SUWt2XBfCO63I1aJ56agjgA5W1b2p2YyhgGrCDbp
GQiTalZZAUYRDDfQouk2fb9327iAtWACYwHW8f/kU3HwHe5yjYZLWkKa4GyQnKuH
VT6Fhx4+8gntyvlVdPLlBvtBCoLKU8SdNCi5XCZHPwPQnN/kYn6RRcSSdCwg55kj
e0vU7uyJPUVGko1CvGaJ4vMsIrjnsiPJnnb76Fh9tjnSlzimFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN0ddW5DkZB8bgzm4I4rArSnYHiOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl
ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvMTA1MTdhY2ItZjEzNS0z
ZjFhLWE1NTItNmYwMDI5NDk5NThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj
NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4
ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy
ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXdQIEY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALj9ur9Oyfkha51AdNt9bTq7foQTIfpjYlO9gNBihAcAVX+UKozs
Nc88Zgdpg2QK4z+K7WB3b5gf6zwXLj6tj6xtiEMv6bAJGcNgSijPBwCOunsGyQhU
W9NGvrEf3DsvVOjcJb5fY9mK80tBznikX0NkfSy9ZER6zXsaE1ZMRVrV1IK3s7tN
InuAFdKZgu+tKCEQNWDb08E1Bfk6FUigw/OkurG1Pd+oiAHkm87m0QHA2eCFMb1L
fe5Kjmg5EYxaEPTWZeBp9fWyFjSN/h2PAFmAT89VCwWR3LjfXKmoOjdPh4FaIkXw
JuO/83vAxB/RYHuOQ1v/ImslAqNRLA/r9k0=
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:45:18 2026 by rpki-client