Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/e4ec66db-7d95-3f81-9019-080395a450c0.roa
File:                     e4ec66db-7d95-3f81-9019-080395a450c0.roa (raw, json)
Hash identifier:          vPGCxDNQ34AX5RthePbRkQRr8gRTADq45REeXMP1sbw=
Subject key identifier:   4C:A1:F0:7B:3F:C9:03:2F:82:D0:23:E7:1E:F8:66:79:71:DC:A7:06
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F4328584E48248B04B3AEB753A9502140
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/e4ec66db-7d95-3f81-9019-080395a450c0.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     398427
IP address blocks:        2602:fd35:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:8b:04:b3:ae:b7:53:a9:50:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=74b4288b-afcb-46da-b74a-3703d3f00da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e6:0b:b2:15:89:5d:47:7b:73:94:d9:76:28:
                    78:f0:09:ec:18:96:70:cc:bf:3a:d7:09:c7:44:32:
                    95:57:8d:00:d0:e2:2c:fa:71:53:d4:8d:8b:ed:d8:
                    62:5b:35:71:7b:51:50:7b:5e:97:56:55:25:dc:75:
                    d8:21:37:9c:2f:30:43:f2:37:eb:6e:7b:3b:55:bc:
                    79:ae:40:d9:c6:98:27:6c:7f:3f:76:c1:c6:7c:5c:
                    b5:c3:c3:3a:0a:33:27:8e:d5:81:38:30:0d:6b:93:
                    96:98:a5:ad:a8:e8:5a:32:29:f3:af:10:9a:6d:11:
                    a2:2b:e2:95:f9:cb:91:f1:48:29:ce:89:42:05:f7:
                    19:0f:6a:8f:7e:cb:90:03:a2:b7:0e:8d:3d:29:09:
                    68:65:ab:d9:38:54:3b:ef:1d:bd:2f:ac:f4:f1:ef:
                    48:31:18:78:15:eb:01:0a:96:af:a9:d8:d3:b2:d4:
                    0e:2f:5c:47:8e:1b:ad:e3:34:8d:35:4e:be:4c:f4:
                    a4:2a:37:7c:2f:58:81:30:a2:c9:cc:3d:eb:ec:8a:
                    b3:69:5a:c0:0a:77:58:38:b9:23:76:f3:09:5a:6a:
                    e4:e5:96:e2:2c:15:8f:ee:ff:f2:53:36:b0:7d:39:
                    d1:1c:25:2e:a9:d9:85:19:99:0c:c8:0b:76:b2:9a:
                    e1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A1:F0:7B:3F:C9:03:2F:82:D0:23:E7:1E:F8:66:79:71:DC:A7:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/e4ec66db-7d95-3f81-9019-080395a450c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd35:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5d:da:b7:d2:7a:bb:b2:94:cd:c7:d8:80:c3:58:35:2c:42:
         cc:7b:23:3f:e9:02:2e:d4:d5:3b:27:22:bc:ef:ea:59:aa:0a:
         21:9d:fb:45:e0:9e:e1:2e:0b:31:ea:6a:88:29:8b:09:00:09:
         7c:7c:24:9e:cf:4b:d3:96:5c:28:02:bf:b0:8b:28:db:a9:87:
         22:70:d0:ff:50:af:d2:71:12:25:40:dd:a5:cb:87:51:48:3c:
         09:1f:19:2c:23:a1:05:74:bd:54:b5:74:e0:4d:fe:b0:0a:28:
         e0:f0:40:77:3e:4d:29:73:40:ee:89:44:38:51:f8:c7:3c:91:
         5b:fc:aa:a4:0a:5c:4e:3d:1a:83:27:c8:3c:d6:b5:17:22:02:
         05:59:b5:3b:d5:52:22:e5:57:7d:b9:4a:51:d2:8c:5d:54:d0:
         5f:74:b0:cb:b8:b7:52:a4:c1:1c:68:12:c3:61:63:9b:fc:4c:
         60:7c:b2:a4:c2:f6:59:38:b1:a1:b2:c9:e3:08:e5:9c:e2:da:
         ce:c1:89:8d:d6:9f:11:12:80:8d:ba:2d:2b:b0:9f:04:05:2d:
         08:42:7c:94:c2:7f:83:96:95:3e:85:a4:c7:03:92:4e:3e:0f:
         b4:c2:78:d3:8b:42:18:b2:74:29:f1:f2:a7:11:65:4c:6f:63:
         59:7a:25:63
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5IJIsEs663U6lQIUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5
OTVkMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
NzRiNDI4OGItYWZjYi00NmRhLWI3NGEtMzcwM2QzZjAwZGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuYLshWJXUd7c5TZdih48AnsGJZwzL861wnH
RDKVV40A0OIs+nFT1I2L7dhiWzVxe1FQe16XVlUl3HXYITecLzBD8jfrbns7Vbx5
rkDZxpgnbH8/dsHGfFy1w8M6CjMnjtWBODANa5OWmKWtqOhaMinzrxCabRGiK+KV
+cuR8UgpzolCBfcZD2qPfsuQA6K3Do09KQloZavZOFQ77x29L6z08e9IMRh4FesB
CpavqdjTstQOL1xHjhut4zSNNU6+TPSkKjd8L1iBMKLJzD3r7IqzaVrACndYOLkj
dvMJWmrk5ZbiLBWP7v/yUzawfTnRHCUuqdmFGZkMyAt2sprhWQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEyh8Hs/yQMvgtAj5x74Znlx3KcGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj
NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvZTRlYzY2ZGItN2Q5NS0z
ZjgxLTkwMTktMDgwMzk1YTQ1MGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy
MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5
OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0
MTk1OTk5NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9NQIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHV3at9J6u7KUzcfYgMNYNSxCzHsjP+kCLtTVOycivO/qWaoKIZ37
ReCe4S4LMepqiCmLCQAJfHwkns9L05ZcKAK/sIso26mHInDQ/1Cv0nESJUDdpcuH
UUg8CR8ZLCOhBXS9VLV04E3+sAoo4PBAdz5NKXNA7olEOFH4xzyRW/yqpApcTj0a
gyfIPNa1FyICBVm1O9VSIuVXfblKUdKMXVTQX3Swy7i3UqTBHGgSw2Fjm/xMYHyy
pML2WTixobLJ4wjlnOLazsGJjdafERKAjbotK7CfBAUtCEJ8lMJ/g5aVPoWkxwOS
Tj4PtMJ404tCGLJ0KfHypxFlTG9jWXolYw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:13:14 2026 by rpki-client