Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac0fd8cd-ca67-33d7-8ff5-fc20e9e100aa.roa
File:                     ac0fd8cd-ca67-33d7-8ff5-fc20e9e100aa.roa (raw, json)
Hash identifier:          aklPpkEp9b8MI1kT8bHW1dOg5mfizQ62pyMs/H7Yqns=
Subject key identifier:   AB:28:E2:31:68:D5:5F:04:90:C3:9E:01:90:F5:DA:C5:F4:31:DD:22
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F497318145B4AF384F3A65D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac0fd8cd-ca67-33d7-8ff5-fc20e9e100aa.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        2600:1902:80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:18:14:5b:4a:f3:84:f3:a6:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4dc17125-4c04-406c-b80c-eccc85f714a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:65:da:3f:04:6f:e4:1d:1f:cb:74:99:64:f0:
                    f1:30:8c:4a:f8:7e:5f:d0:cb:ee:37:ee:36:26:ce:
                    af:a2:91:47:7e:5b:a0:e6:6f:e8:fe:9a:af:cb:25:
                    59:fa:90:32:a5:d1:ae:dd:98:fa:62:c3:34:1e:74:
                    47:cc:3d:e3:6d:8b:49:ca:f8:fb:e1:87:33:8f:64:
                    62:4f:68:58:c4:30:a5:6c:01:c9:f0:b2:e8:3b:c1:
                    30:d3:1c:82:28:49:04:e2:c4:8b:28:88:b9:94:33:
                    a0:1c:e4:6d:65:de:db:ec:ff:98:70:ef:26:d3:d2:
                    93:cf:87:dd:f1:a1:f8:5a:fb:fd:18:e6:51:aa:5a:
                    0f:bf:5e:9d:f4:f4:c0:a8:e5:ef:f3:2c:e9:6d:52:
                    44:89:e1:91:4d:c0:f9:ae:b2:83:de:1c:69:b7:2f:
                    4b:14:15:ef:3d:39:56:3e:8e:b1:6c:5f:84:ec:38:
                    72:e7:2c:43:8f:44:98:2a:c5:a7:d2:d3:bf:a3:29:
                    cf:9e:2f:14:2c:28:7a:a0:33:9a:d6:01:15:93:6f:
                    25:d9:c8:4b:cd:85:0b:61:0b:b6:d6:22:66:a3:8a:
                    ea:13:91:45:4e:63:9c:3f:c0:a2:39:ce:90:8d:51:
                    cf:14:be:0c:99:48:51:02:bb:3d:f9:f6:95:4a:b0:
                    0c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:28:E2:31:68:D5:5F:04:90:C3:9E:01:90:F5:DA:C5:F4:31:DD:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac0fd8cd-ca67-33d7-8ff5-fc20e9e100aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:68:d4:aa:b5:ed:f4:42:ab:33:0f:8c:96:f5:39:e1:25:62:
         38:c7:bb:9b:3f:f8:22:72:86:de:25:69:1b:36:9d:82:76:64:
         e0:9a:5f:3e:a3:df:96:a4:10:23:eb:fb:29:f6:a7:55:b5:af:
         5e:4a:7c:1d:06:fc:8a:81:96:e5:94:d7:08:f9:35:f3:3b:9f:
         23:d9:66:8d:50:43:e4:f9:97:7d:57:aa:78:ae:08:26:18:ac:
         e5:3f:d4:56:32:f4:fc:bd:75:88:34:dd:33:e8:07:1b:e9:46:
         2b:3f:c6:7f:67:1b:db:25:a8:aa:9c:fa:c6:e4:cc:c7:97:8b:
         ab:c6:5c:2b:3c:85:cf:96:a8:45:c8:de:92:98:36:81:dc:a3:
         d1:28:0f:e0:13:83:4e:83:e5:81:1f:25:f4:a5:75:ba:93:c1:
         60:bc:0e:a7:59:c3:e8:1a:5a:7f:ef:63:76:2b:f6:66:7b:2f:
         4d:7d:ad:d7:47:bc:94:62:0e:c4:b9:88:03:f8:ad:96:8c:16:
         e2:d7:7f:45:2f:5b:82:33:4c:02:c9:97:8d:cb:3d:3c:85:11:
         1b:a1:23:b8:f3:a2:2d:52:f8:a5:c9:12:03:1b:1d:e2:56:34:
         9b:69:78:41:b4:92:2a:0b:c3:fc:c5:19:78:6d:9c:9a:05:fb:
         dc:e3:84:18
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcxgUW0rzhPOmXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NGRjMTcxMjUtNGMwNC00MDZjLWI4MGMtZWNjYzg1ZjcxNGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WXaPwRv5B0fy3SZZPDxMIxK+H5f0MvuN+42
Js6vopFHflug5m/o/pqvyyVZ+pAypdGu3Zj6YsM0HnRHzD3jbYtJyvj74Yczj2Ri
T2hYxDClbAHJ8LLoO8Ew0xyCKEkE4sSLKIi5lDOgHORtZd7b7P+YcO8m09KTz4fd
8aH4Wvv9GOZRqloPv16d9PTAqOXv8yzpbVJEieGRTcD5rrKD3hxpty9LFBXvPTlW
Po6xbF+E7Dhy5yxDj0SYKsWn0tO/oynPni8ULCh6oDOa1gEVk28l2chLzYULYQu2
1iJmo4rqE5FFTmOcP8CiOc6QjVHPFL4MmUhRArs9+faVSrAMhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKso4jFo1V8EkMOeAZD12sX0Md0iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWMwZmQ4Y2QtY2E2Ny0z
M2Q3LThmZjUtZmMyMGU5ZTEwMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgCA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABFo1Kq17fRCqzMPjJb1OeElYjjHu5s/+CJyht4laRs2nYJ2ZOCa
Xz6j35akECPr+yn2p1W1r15KfB0G/IqBluWU1wj5NfM7nyPZZo1QQ+T5l31Xqniu
CCYYrOU/1FYy9Py9dYg03TPoBxvpRis/xn9nG9slqKqc+sbkzMeXi6vGXCs8hc+W
qEXI3pKYNoHco9EoD+ATg06D5YEfJfSldbqTwWC8DqdZw+gaWn/vY3Yr9mZ7L019
rddHvJRiDsS5iAP4rZaMFuLXf0UvW4IzTALJl43LPTyFERuhI7jzoi1S+KXJEgMb
HeJWNJtpeEG0kioLw/zFGXhtnJoF+9zjhBg=
-----END CERTIFICATE-----
Generated at Thu Oct 8 12:23:21 2026 by rpki-client