Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa
File:                     dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa (raw, json)
Hash identifier:          O3QvGKnWp1X8tVuBBmxUA8GrG3Scjgt1750Vxpwnp6k=
Subject key identifier:   30:6A:10:C8:97:3C:D7:85:95:32:68:7B:EF:CB:E8:8F:29:71:13:83
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F4328584E8C8A3E1EC8FA144326D44680
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     400065
IP address blocks:        2604:4540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:3e:1e:c8:fa:14:43:26:d4:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=5fc7346c-63c2-41cf-86f4-3bebe30332b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:56:92:93:b7:fe:86:52:42:36:89:3e:d9:30:
                    36:50:7e:ff:a1:e4:6a:1c:2a:a3:cf:da:be:a7:e0:
                    f2:af:36:04:8c:87:59:dd:58:39:e3:6e:cc:50:5f:
                    32:11:ab:b4:5f:22:34:61:b4:3e:a6:b4:70:8b:5f:
                    d2:34:cc:53:f7:14:e5:54:cf:5c:33:88:a5:93:fe:
                    bc:53:cc:e3:87:9f:a7:80:a9:a3:56:7e:de:da:3e:
                    ae:18:d2:db:55:78:62:41:96:8a:e1:bd:e1:2c:2e:
                    df:f9:c3:58:a9:ee:81:c1:d4:96:bc:d5:d3:36:ac:
                    5d:40:f9:f9:e8:2a:42:da:62:7f:4c:89:b2:77:a7:
                    5a:ff:d8:8a:d9:ea:36:08:06:1b:ae:b8:0b:72:d5:
                    4c:c8:38:84:38:8f:93:6d:06:12:40:62:7a:23:19:
                    7a:e9:cd:c7:7e:5e:e9:be:b0:31:dc:98:f2:84:d5:
                    21:f5:4e:03:c1:94:ae:4b:08:35:5b:68:e2:d1:c7:
                    06:48:77:8c:75:72:86:c4:18:8d:e5:f3:27:4a:6c:
                    72:0f:bf:91:81:05:d5:e7:25:56:17:20:44:1f:1b:
                    ab:df:69:fa:93:f3:3c:c0:5f:6d:3c:b0:9f:a0:77:
                    82:05:bc:c8:10:a7:74:0c:59:4f:f1:13:4b:b1:f2:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6A:10:C8:97:3C:D7:85:95:32:68:7B:EF:CB:E8:8F:29:71:13:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:9c:a6:fa:56:d3:2c:a8:94:ad:22:6c:62:60:80:13:7b:fc:
         56:72:76:5f:0e:67:b0:3b:e8:5f:d7:2c:15:f3:f7:0d:e3:1f:
         ba:43:cd:48:6f:54:0f:ec:dc:8e:f5:89:ab:21:da:8c:1f:e8:
         26:b9:4e:11:5e:d3:e3:8d:41:2b:3d:65:6a:d4:b6:e2:de:ec:
         fe:c8:35:4a:eb:ea:5c:62:e9:33:5d:5c:c4:af:5e:90:de:1f:
         6a:c5:c2:31:52:e3:77:84:78:e3:d9:7d:7a:a4:57:25:8e:db:
         b8:38:9b:04:1c:ab:88:2f:95:ea:e3:dd:90:75:64:76:ee:2a:
         67:f4:7e:45:d3:1c:3c:1c:9f:dc:9b:f0:a6:32:af:4d:25:21:
         20:9c:4f:e4:c5:c3:06:25:02:fa:e3:ca:8f:95:12:90:5e:74:
         9d:19:42:bf:1b:dd:5e:eb:c8:a6:21:81:a6:3c:32:56:89:6e:
         51:24:00:ec:d2:0e:54:0e:b0:55:82:ee:2e:04:db:4d:12:a6:
         9f:b6:b8:05:49:8b:8f:c5:c8:0b:18:25:33:26:14:4f:ed:6a:
         4d:34:c4:03:63:69:c5:a8:df:1f:52:2a:6a:32:f6:97:30:ea:
         dc:65:69:99:72:14:89:c6:f0:19:7a:69:dd:30:7a:39:05:14:
         61:c5:5f:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6Mij4eyPoUQybURoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz
ZWNkMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk
NWZjNzM0NmMtNjNjMi00MWNmLTg2ZjQtM2JlYmUzMDMzMmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlaSk7f+hlJCNok+2TA2UH7/oeRqHCqjz9q+
p+DyrzYEjIdZ3Vg5427MUF8yEau0XyI0YbQ+prRwi1/SNMxT9xTlVM9cM4ilk/68
U8zjh5+ngKmjVn7e2j6uGNLbVXhiQZaK4b3hLC7f+cNYqe6BwdSWvNXTNqxdQPn5
6CpC2mJ/TImyd6da/9iK2eo2CAYbrrgLctVMyDiEOI+TbQYSQGJ6Ixl66c3Hfl7p
vrAx3JjyhNUh9U4DwZSuSwg1W2ji0ccGSHeMdXKGxBiN5fMnSmxyD7+RgQXV5yVW
FyBEHxur32n6k/M8wF9tPLCfoHeCBbzIEKd0DFlP8RNLsfKC6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDBqEMiXPNeFlTJoe+/L6I8pcRODMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj
MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvZGQ0ZDg0ZGItN2EzZC0z
NWFkLWExZGItNmU3NzBjMWM3NmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2
NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj
M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk
OGY4YzNlY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFQAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGecpvpW0yyolK0ibGJggBN7/FZydl8OZ7A76F/XLBXz9w3jH7pD
zUhvVA/s3I71iash2owf6Ca5ThFe0+ONQSs9ZWrUtuLe7P7INUrr6lxi6TNdXMSv
XpDeH2rFwjFS43eEeOPZfXqkVyWO27g4mwQcq4gvlerj3ZB1ZHbuKmf0fkXTHDwc
n9yb8KYyr00lISCcT+TFwwYlAvrjyo+VEpBedJ0ZQr8b3V7ryKYhgaY8MlaJblEk
AOzSDlQOsFWC7i4E200Spp+2uAVJi4/FyAsYJTMmFE/tak00xANjacWo3x9SKmoy
9pcw6txlaZlyFInG8Bl6ad0wejkFFGHFX9s=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:04 2026 by rpki-client